Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/vOH89jOb0h-Q1bQvNNZpsJK2i60.roa
File: vOH89jOb0h-Q1bQvNNZpsJK2i60.roa (raw, json)
Hash identifier: C5lLs37cEPbVEpOJWfAApqMhjtK6MA2029p15P8EPSY=
Subject key identifier: BC:E1:FC:F6:33:9B:D2:1F:90:D5:B4:2F:34:D6:69:B0:92:B6:8B:AD
Certificate issuer: /CN=aa8b798ce7adaeae9e70915ba2cbcf83fe65d9dd
Certificate serial: 018CC7952B74321E7415C0031382863863B9
Authority key identifier: AA:8B:79:8C:E7:AD:AE:AE:9E:70:91:5B:A2:CB:CF:83:FE:65:D9:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qot5jOetrq6ecJFbosvPg_5l2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/vOH89jOb0h-Q1bQvNNZpsJK2i60.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49063
IP address blocks: 95.181.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qot5jOetrq6ecJFbosvPg_5l2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2b:74:32:1e:74:15:c0:03:13:82:86:38:63:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8b798ce7adaeae9e70915ba2cbcf83fe65d9dd
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bce1fcf6339bd21f90d5b42f34d669b092b68bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:50:55:77:6c:a6:a5:92:df:46:f0:2a:22:
72:b3:b5:6b:dd:44:32:40:8c:ac:6d:d8:41:de:42:
26:f4:5e:94:47:c9:83:7f:0b:8a:2f:d4:b7:6d:a5:
cb:99:56:34:98:3b:93:94:36:55:08:d2:f9:b5:4d:
f8:f6:29:61:95:0b:22:f5:07:7c:7d:9a:e7:ef:c9:
fe:f0:07:0b:45:08:84:51:63:83:07:39:a0:3d:98:
aa:d2:49:9b:61:03:40:88:12:a9:e0:1a:b6:dd:93:
90:e8:e3:f5:ce:ae:6b:a2:d6:b3:7a:c5:b1:22:43:
64:b4:b7:c4:db:d8:77:c6:de:94:af:48:34:77:0a:
9d:ce:78:60:db:63:d9:a6:b2:26:8c:74:f3:9e:a7:
14:cd:2e:05:54:ba:e9:cf:a8:f1:21:4e:19:3a:1b:
4e:e8:e9:69:19:77:dd:2e:e8:d6:14:94:27:64:00:
65:75:d7:ec:6b:3e:44:44:75:e1:9d:54:05:65:c3:
8f:e0:3a:08:b9:18:bb:54:40:73:98:08:c3:00:88:
6f:9a:22:ba:b8:8e:37:23:f6:48:74:1c:c4:09:72:
4d:af:33:7e:74:66:58:0d:26:54:13:e4:88:b0:cc:
04:f5:51:87:ac:b3:3a:9e:50:26:20:a4:1f:22:ed:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:FC:F6:33:9B:D2:1F:90:D5:B4:2F:34:D6:69:B0:92:B6:8B:AD
X509v3 Authority Key Identifier:
keyid:AA:8B:79:8C:E7:AD:AE:AE:9E:70:91:5B:A2:CB:CF:83:FE:65:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qot5jOetrq6ecJFbosvPg_5l2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/vOH89jOb0h-Q1bQvNNZpsJK2i60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.198.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c8:84:24:64:bc:d6:63:a7:6d:ea:16:78:34:dd:d2:99:ab:
ef:aa:85:e7:b6:be:a7:09:23:3c:de:75:32:16:69:d4:b3:19:
7c:a6:97:ab:2b:cd:cf:52:25:ab:12:0d:16:ba:81:7c:8f:72:
7e:30:0f:b3:81:1c:c8:c8:de:36:6c:f7:b4:db:d6:99:8a:45:
b8:7a:5e:4d:43:34:39:c1:dd:5c:bc:9c:78:92:f2:86:88:df:
4f:7f:4e:c9:3a:ba:f2:4e:cc:cc:63:2d:d1:24:c7:58:32:f2:
0f:35:21:36:52:7e:e1:32:6c:3b:7c:c6:a5:ab:81:fb:5b:b6:
93:9a:79:43:ba:74:48:39:98:db:19:f8:48:14:83:38:ac:54:
c2:e9:27:4a:9a:d0:8f:9b:c9:5d:c0:de:ab:bf:45:0e:71:62:
04:c4:a7:4c:86:b7:4c:b4:16:8e:06:16:f3:94:3f:bb:35:6c:
1e:98:90:82:d0:c8:02:e4:71:35:29:6f:56:12:f6:06:ba:aa:
2b:9d:0e:d1:d2:98:58:b3:a8:66:32:99:38:d5:e5:d9:f1:13:
54:7b:72:01:d2:89:d2:ed:65:f0:0c:2a:82:c4:51:b1:e5:be:
ba:b1:23:ba:c4:78:9f:08:41:25:b6:98:db:bb:d6:59:c4:4d:
5b:e3:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:41:48 2024 by rpki-client on console-fra.rpki-client.org