Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/8sIui6vsNei3TNtsZaW5njNBKG4.roa
File: 8sIui6vsNei3TNtsZaW5njNBKG4.roa (raw, json)
Hash identifier: cgqvUeYySl6ZHppN83Zp5slR2xCQ9dVKiUXrpGK1Zlg=
Subject key identifier: F2:C2:2E:8B:AB:EC:35:E8:B7:4C:DB:6C:65:A5:B9:9E:33:41:28:6E
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 018D1F6B23A58BA105F1BE35A7B15BB23234
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/8sIui6vsNei3TNtsZaW5njNBKG4.roa
Signing time: Fri 19 Jan 2024 01:52:11 +0000
ROA not before: Fri 19 Jan 2024 01:52:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 195.69.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1f:6b:23:a5:8b:a1:05:f1:be:35:a7:b1:5b:b2:32:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jan 19 01:52:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c22e8babec35e8b74cdb6c65a5b99e3341286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:91:f9:da:3f:fa:6c:f2:c3:45:ef:db:ba:
cb:36:db:fa:ea:53:cb:e4:41:c8:e7:f6:74:29:32:
f9:d4:7e:c1:2d:ad:26:4d:ba:25:e9:ad:96:bc:78:
1a:10:0e:6f:f0:5a:67:25:d0:20:a8:83:94:a0:f4:
3e:ba:df:ed:2e:d4:8b:3f:db:20:bd:31:80:66:f6:
c5:5a:64:1d:9f:76:e1:f2:e9:78:46:25:be:63:f5:
03:9e:84:39:91:1f:5a:ce:e4:7e:5f:03:92:a9:1d:
ff:78:e8:44:c4:04:d3:67:2c:94:33:c7:f0:17:3b:
61:4f:a8:cf:44:8d:ce:f0:51:30:ab:b0:c2:63:40:
ae:ba:19:87:f3:8e:5a:53:bb:da:1c:61:3a:54:18:
40:e7:16:60:c0:b9:d2:20:dc:53:76:23:03:8a:c1:
2f:d2:e3:e8:4c:1d:e3:45:38:23:00:88:6e:ce:19:
0c:04:62:4a:95:9e:80:da:d8:0a:32:f0:44:9f:89:
33:eb:2e:da:b2:4b:27:cf:22:74:a6:2e:03:c8:ad:
17:f2:57:70:19:ea:0b:96:df:b8:5e:c5:0b:bc:5d:
ce:d2:13:1b:8d:97:e7:66:cb:51:dd:94:71:4d:99:
fc:79:e1:1e:ef:12:19:59:cc:ca:e9:53:86:d0:8f:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:2E:8B:AB:EC:35:E8:B7:4C:DB:6C:65:A5:B9:9E:33:41:28:6E
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/8sIui6vsNei3TNtsZaW5njNBKG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.230.0/24
Signature Algorithm: sha256WithRSAEncryption
76:87:f9:0b:cd:bf:2e:c8:a6:b4:3d:7e:20:9c:5d:14:5c:ea:
de:0a:2b:9c:c8:bc:f9:52:4a:87:6b:9a:8d:46:32:81:2c:fd:
47:6a:9a:39:83:49:c8:01:f0:45:46:c8:0a:04:5a:b5:1b:d5:
de:23:66:6d:d9:b1:40:6b:61:f7:90:2b:f3:35:62:c4:95:df:
74:b4:c6:fe:80:dc:16:8b:82:5d:1a:05:b8:67:ca:c1:b4:c1:
2f:af:55:a9:6d:8a:f3:79:e0:53:86:60:62:04:37:89:ee:a6:
ff:35:3d:94:75:c5:ee:8b:84:68:26:af:79:52:c0:77:7b:0a:
ea:1f:19:73:ba:b2:ea:31:12:85:f4:2f:7b:49:42:ac:3b:c0:
a3:66:6b:30:c9:27:db:ba:3f:a3:8d:c1:4c:63:70:86:f8:e9:
91:4c:31:b5:8b:92:08:41:10:e9:e7:b5:9f:06:cc:92:0e:e6:
37:67:66:9f:ae:fb:2a:94:c7:a2:70:b2:c6:a3:de:01:d2:ff:
0f:0b:14:62:8f:9b:ee:0e:8b:8b:76:2b:ac:e1:d8:ef:48:e9:
2e:ef:f7:92:ef:76:c3:c6:bc:ff:bd:04:88:00:99:45:43:ad:
65:04:1f:6d:d1:8b:36:f9:cc:06:8d:4e:44:e7:48:4b:b2:a9:
11:46:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:36:00 2024 by rpki-client on console-ams.rpki-client.org