Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fO23UxvN0Vug_Wes8dIue7PBIQ8.roa
File: fO23UxvN0Vug_Wes8dIue7PBIQ8.roa (raw, json)
Hash identifier: /Lv90kfkPgkKKiro4g1WrTW8qBTXODEjLcypELfuEi0=
Subject key identifier: 7C:ED:B7:53:1B:CD:D1:5B:A0:FD:67:AC:F1:D2:2E:7B:B3:C1:21:0F
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B92D8552EB888E5B653D8F35563E7F
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fO23UxvN0Vug_Wes8dIue7PBIQ8.roa
Signing time: Mon 01 Jan 2024 20:31:13 +0000
ROA not before: Mon 01 Jan 2024 20:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 195.87.92.0/24 maxlen: 24
212.133.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2d:85:52:eb:88:8e:5b:65:3d:8f:35:56:3e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cedb7531bcdd15ba0fd67acf1d22e7bb3c1210f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:6c:96:0b:cf:6c:30:d1:9a:23:3d:08:6a:
75:56:8a:8a:26:41:05:0c:7b:c6:4e:2e:0a:ef:fa:
e8:b1:33:56:a5:68:3d:a4:b6:ea:f8:b6:1c:a3:e6:
53:77:74:2c:25:16:8e:3e:64:68:e0:29:ca:66:5e:
0f:8c:00:8f:3b:36:b5:ff:c3:47:1c:5e:15:50:38:
e4:01:6c:27:f9:64:78:e4:5c:52:65:6a:72:08:4a:
7b:9d:ea:c4:b6:bc:c0:c7:33:d6:b3:41:f1:fd:c8:
9c:00:73:ba:62:a7:0f:22:0a:37:e5:a0:6b:eb:2c:
47:46:1b:5c:33:a9:72:c7:df:20:77:82:72:28:fc:
5f:69:9b:0c:55:26:64:78:a3:b8:e7:6b:0e:b0:bb:
fe:03:95:37:03:c5:69:8b:86:d0:5a:f3:1c:e7:e3:
f5:9b:7d:52:bd:5e:ad:be:66:4b:37:b0:0f:26:3f:
30:74:c9:9d:38:91:48:73:8e:90:b4:d1:e7:5d:72:
97:c8:8c:c2:33:6a:80:a2:83:13:84:bc:48:10:8e:
f7:1b:c5:71:91:27:ee:a0:b5:2e:07:8e:7b:30:53:
52:92:27:cd:66:0c:34:ab:cd:09:f9:05:95:05:c5:
e8:5e:83:f0:ab:59:f8:7d:f5:c6:f9:91:10:e4:83:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:B7:53:1B:CD:D1:5B:A0:FD:67:AC:F1:D2:2E:7B:B3:C1:21:0F
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fO23UxvN0Vug_Wes8dIue7PBIQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.92.0/24
212.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ee:ed:a9:9e:48:b3:bf:76:63:2e:19:98:8f:6d:8d:e8:9f:
f5:27:51:a5:4f:f8:3e:05:4f:e3:20:ef:7a:c3:ab:08:23:0a:
da:e2:4e:38:1b:59:b1:0c:3c:ab:a3:b2:df:26:32:52:ee:ed:
49:41:bf:f6:cb:4f:6f:9b:39:38:d8:66:0c:ac:a5:d0:23:bd:
fd:f6:20:b3:7f:ce:cd:47:64:6e:19:ce:e3:91:62:7e:0f:42:
77:d3:3b:fe:ed:70:3e:4f:0c:b7:b9:03:79:89:a0:e9:b8:77:
ba:b9:ca:55:03:2d:2f:10:7d:29:e1:63:be:eb:2e:8a:71:2c:
22:bb:c5:57:e9:df:28:53:07:71:19:86:7a:5d:31:31:2c:58:
3e:fd:23:9d:fa:56:85:98:0a:1a:46:05:29:24:e8:b2:9f:f8:
03:de:6d:fa:e0:26:d7:c9:6d:24:6d:b3:2a:47:7f:6f:d0:1e:
59:1c:9a:03:50:bc:ad:8c:d6:1d:56:51:e3:b3:ac:a9:c1:6e:
00:00:09:38:9e:2c:3d:a1:ba:f7:cb:b5:74:67:50:89:7f:e3:
c4:ba:e6:cb:15:64:89:2f:cb:a0:d8:00:de:a6:57:1a:76:37:
50:74:17:05:ff:24:40:d6:c5:97:be:0d:9a:a1:50:53:33:f3:
ef:a7:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:11:50 2024 by rpki-client on console-ams.rpki-client.org