Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/pLOJsrR6TGhqsxTJ1ZsmCXN8UXI.roa
File: pLOJsrR6TGhqsxTJ1ZsmCXN8UXI.roa (raw, json)
Hash identifier: M8GUEWed8B2AZ/A42jfJrifqjkSNGs/nbe6Jl+W0TBA=
Subject key identifier: A4:B3:89:B2:B4:7A:4C:68:6A:B3:14:C9:D5:9B:26:09:73:7C:51:72
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 018CC2DB07180DC12F052803923A96422748
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/pLOJsrR6TGhqsxTJ1ZsmCXN8UXI.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39419
IP address blocks: 195.141.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:07:18:0d:c1:2f:05:28:03:92:3a:96:42:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4b389b2b47a4c686ab314c9d59b2609737c5172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:ca:55:9f:29:fe:7d:d3:94:3f:db:5d:6f:
5d:be:0f:51:3f:26:b3:72:e7:45:02:3e:35:d7:26:
cc:9d:54:c2:b3:3c:c0:fc:ca:20:95:c1:c2:8a:59:
b7:45:8b:3f:23:73:c9:57:f8:80:08:25:ab:69:c1:
5e:6b:76:3e:fd:68:99:59:ec:2a:c5:c7:ea:f4:06:
54:11:5b:3c:a8:df:a0:bf:6d:7b:cc:07:9e:7c:53:
b5:87:08:81:b8:e5:08:a1:e5:8b:d5:a9:18:7a:7f:
73:0f:cb:b1:7c:2d:02:51:96:e8:27:de:d7:ed:93:
2f:87:85:fa:0e:de:e3:6e:d9:fc:8c:8b:7a:13:81:
52:10:9d:cc:ff:02:08:1c:06:69:db:40:6d:a5:82:
59:ba:cb:a3:71:da:ca:87:85:42:aa:8f:9e:e4:f6:
b0:08:e6:0b:d2:a1:38:78:a4:4d:58:5f:0a:25:7a:
b0:2c:fd:ff:4b:6c:58:ea:13:57:0d:d1:23:52:0b:
f0:f5:4b:42:cc:40:e7:9a:45:83:a8:a4:a3:ea:d5:
7b:a4:51:dd:cf:94:5a:39:9d:a8:73:17:6e:1a:57:
64:7e:78:34:18:44:6c:e4:09:6d:f1:8b:da:41:de:
be:c2:d1:03:08:19:83:8d:15:2a:ed:42:96:92:e3:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B3:89:B2:B4:7A:4C:68:6A:B3:14:C9:D5:9B:26:09:73:7C:51:72
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/pLOJsrR6TGhqsxTJ1ZsmCXN8UXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.141.249.0/24
Signature Algorithm: sha256WithRSAEncryption
15:99:03:15:c5:dd:1f:b8:e2:5a:44:4f:26:af:ca:73:35:03:
83:8f:56:45:11:b9:7e:3d:1c:cf:fc:2c:88:98:63:44:70:60:
01:43:19:9e:26:59:00:bb:c2:d1:d5:ec:04:2f:0f:5c:89:14:
7a:78:0f:b9:27:f6:55:24:56:ae:6c:08:18:e0:82:0e:77:ea:
0b:ff:ab:4e:91:5f:1a:ed:13:17:f3:90:b7:5b:55:63:34:15:
15:5a:f9:15:d4:ac:3a:db:14:ca:89:0c:f0:58:94:b8:81:f2:
19:f4:eb:8a:bb:86:0b:6e:a8:11:44:0d:b0:dc:6d:bd:57:2e:
4d:6e:59:1a:ab:2f:ae:8e:85:0d:32:3d:d4:2a:f0:e3:3a:dc:
21:2f:0d:52:b8:d1:f8:28:e5:da:be:32:43:99:67:74:41:2c:
bf:91:b3:f8:4b:1b:25:7b:b2:1d:12:f9:ee:df:6e:76:0e:d1:
10:16:d3:a3:58:cb:5e:9b:b6:cb:c7:65:c0:70:27:9a:80:1b:
4a:6f:14:39:eb:f7:0d:aa:43:f4:83:94:98:fb:d5:38:b9:ba:
6f:f6:ad:ba:ff:13:43:cb:4f:ca:e0:7c:ea:0d:83:53:91:e1:
d7:5b:ed:9b:01:e0:f9:1e:f3:24:78:52:bf:99:52:8f:16:56:
01:a4:3d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:11:09 2024 by rpki-client on console-ams.rpki-client.org