Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/SASb0RzTy9pu_G-9scuuhPhiZak.roa
File: SASb0RzTy9pu_G-9scuuhPhiZak.roa (raw, json)
Hash identifier: dIb9ZnwLOCge+QplhNAGl7mTPA10BpC7Six3DgBObqE=
Subject key identifier: 48:04:9B:D1:1C:D3:CB:DA:6E:FC:6F:BD:B1:CB:AE:84:F8:62:65:A9
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B932EB4E7478BB3DE5DC53DE32707D
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/SASb0RzTy9pu_G-9scuuhPhiZak.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43331
IP address blocks: 195.87.212.0/22 maxlen: 22
195.87.237.0/24 maxlen: 24
195.87.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:32:eb:4e:74:78:bb:3d:e5:dc:53:de:32:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48049bd11cd3cbda6efc6fbdb1cbae84f86265a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:1e:5a:b0:fb:37:22:fe:fd:20:0f:6c:46:
bf:4e:d3:79:38:cb:8c:42:c5:40:d5:da:6a:4d:a4:
40:49:b9:54:f0:c8:b9:a5:ce:d3:30:ee:59:ad:e7:
1f:e7:e2:c4:f6:f1:4a:d3:32:63:90:48:ac:98:52:
ec:9e:68:1c:34:58:71:61:02:db:bd:34:93:47:8a:
d5:41:8b:3b:59:3e:bd:d1:3d:11:93:e9:d3:b4:32:
2c:a6:37:b3:87:2f:39:0f:85:a7:12:10:78:26:4f:
5a:27:a9:9c:da:57:ff:14:77:3e:d0:a8:1a:86:cd:
ba:b1:0a:2e:5d:58:17:52:94:94:86:2d:43:bb:f6:
ac:b3:57:d4:8c:03:8d:1a:42:d3:c0:61:cf:1d:8c:
14:8f:ad:e9:c5:10:55:7a:90:e6:3b:f3:ab:95:7b:
bf:e8:6a:28:c8:18:1e:c9:86:be:d7:2c:ec:8d:2e:
c7:17:88:4e:bf:a9:fd:3a:43:3d:20:05:02:eb:5c:
ee:17:3f:cf:f2:cb:b4:d9:8c:e2:db:df:43:7c:32:
80:46:90:42:a3:53:8b:5c:6c:dd:ca:9f:09:74:5c:
01:d0:45:e0:e6:ac:28:3b:9d:0f:76:d6:62:f8:50:
74:c1:d0:70:75:39:7a:98:98:be:47:da:15:1e:49:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:9B:D1:1C:D3:CB:DA:6E:FC:6F:BD:B1:CB:AE:84:F8:62:65:A9
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/SASb0RzTy9pu_G-9scuuhPhiZak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.22.0/24
195.87.212.0/22
195.87.237.0/24
Signature Algorithm: sha256WithRSAEncryption
19:86:82:7a:19:9f:2d:88:5b:d7:3f:c3:a3:eb:92:36:10:5c:
56:ab:f2:a4:87:cc:38:dd:ab:77:11:c3:94:fb:f1:ad:dd:39:
d1:8c:30:4c:1f:d9:54:d4:62:ca:b9:91:9b:dd:6c:8d:72:53:
40:84:34:3d:69:c6:f3:71:51:de:ef:bc:48:44:b5:34:22:84:
9f:fa:89:eb:96:24:82:f0:f7:c1:17:8d:86:87:64:9b:78:c4:
3b:81:e5:3a:ad:48:a8:99:43:bd:81:48:af:8d:77:d9:0c:e8:
15:15:da:3d:ee:5e:33:99:ef:28:98:d4:f0:58:f3:eb:53:e4:
1f:d1:4a:9c:97:ce:db:3b:3b:10:c0:03:32:2b:a7:09:b2:36:
30:39:74:76:78:0d:22:31:ac:a4:59:70:92:db:bc:45:66:4f:
4b:2b:74:3e:ce:a2:b4:3d:49:9f:ef:d1:7a:54:e8:f6:75:9f:
7b:ae:ee:1f:78:c8:6b:6f:5c:a6:20:d5:39:66:c8:34:c7:a5:
a8:93:26:c0:b0:81:9b:d9:6b:23:a7:4a:ef:f4:d4:f7:01:fc:
f7:e3:58:27:10:9c:65:8a:b9:66:d6:f1:08:4e:03:74:4e:ff:
16:a2:39:ac:ce:c6:a9:67:d3:4f:50:bb:39:72:5d:17:1f:01:
fc:2e:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:26:14 2024 by rpki-client on console-ams.rpki-client.org