Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4Hsgobmz4OkRTDXyWHg99hI2Ejo.roa
File: 4Hsgobmz4OkRTDXyWHg99hI2Ejo.roa (raw, json)
Hash identifier: 1R1+znGsCivsZ/iBD8yMnA4JXDxjgiyNPxLx/0Bl6ro=
Subject key identifier: E0:7B:20:A1:B9:B3:E0:E9:11:4C:35:F2:58:78:3D:F6:12:36:12:3A
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E0C5DA5AA509F4607312E9A88471F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4Hsgobmz4OkRTDXyWHg99hI2Ejo.roa
Signing time: Tue 02 Jan 2024 08:33:04 +0000
ROA not before: Tue 02 Jan 2024 08:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212837
IP address blocks: 195.187.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0c:5d:a5:aa:50:9f:46:07:31:2e:9a:88:47:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e07b20a1b9b3e0e9114c35f258783df61236123a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:60:45:2e:77:63:41:b7:80:95:cd:9c:63:
af:e7:8d:54:ad:e5:65:3f:65:83:42:38:97:c8:a7:
61:98:1e:b1:7a:26:d5:d6:17:45:50:9a:b1:3f:09:
c5:60:04:04:75:79:10:49:20:49:11:65:ca:f7:c1:
65:7a:c6:a1:2d:f0:b3:8a:3a:ab:2b:3c:52:ba:4a:
d6:85:5f:2a:25:9c:1a:f0:3d:c2:37:23:73:6e:6b:
56:50:82:43:89:c0:e2:b3:78:4d:66:11:18:f1:b9:
36:59:38:fc:d3:df:ef:d4:6a:96:f2:a1:6a:92:11:
41:78:08:28:6a:93:17:e0:58:62:b2:f7:7b:06:66:
45:d7:9d:20:63:5c:d8:7d:0b:80:4b:49:7e:28:a2:
ab:93:ae:6e:8d:c0:28:16:3e:66:88:e2:70:0c:86:
74:81:f7:43:2f:ab:51:ad:a4:65:38:bb:e3:df:3a:
73:74:ca:5c:55:8f:7f:c1:96:e9:3e:86:a0:7f:a1:
0b:7a:92:0b:cd:7e:56:68:46:41:0d:70:e0:f4:e2:
1a:4f:f4:db:96:66:f8:74:9f:d1:00:80:d6:16:84:
ef:c8:ea:c9:c3:fe:ad:b2:4e:06:9b:bd:1e:30:d8:
b0:40:ce:2b:d9:f5:32:33:38:1a:71:34:a4:27:42:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7B:20:A1:B9:B3:E0:E9:11:4C:35:F2:58:78:3D:F6:12:36:12:3A
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/4Hsgobmz4OkRTDXyWHg99hI2Ejo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.108.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b0:75:06:7f:9e:bd:f0:e3:33:34:4d:08:63:9b:bc:ba:f6:
f3:43:bd:ab:e6:75:fa:d0:b1:f3:85:49:40:6f:50:ea:06:f6:
4d:d8:cb:ac:f3:3b:ef:e7:f5:bc:88:b9:8e:c1:f7:d0:cb:4c:
07:04:8c:fb:34:39:94:df:d4:51:64:e0:0f:2a:65:30:05:f2:
d7:2c:39:a4:07:56:a5:b8:74:f5:7d:9c:5c:1a:9e:a1:a3:56:
49:2e:c1:6e:96:13:87:fd:1c:af:ac:28:78:d6:87:29:d3:dd:
bc:14:34:89:a9:72:38:06:f5:17:06:d3:8f:c6:5d:7d:54:5c:
84:7c:53:ae:76:d9:e1:f6:15:83:29:a2:35:e8:f8:81:04:ba:
3c:50:84:df:93:60:d5:e6:f2:30:d6:ef:9e:31:93:d7:10:bc:
29:e0:75:69:f5:b4:7a:f3:66:36:94:df:2c:03:59:18:bf:24:
0c:49:80:e8:d5:56:76:9a:ca:b5:69:3d:2b:b8:b9:45:01:ce:
c0:44:03:37:a4:3c:a5:f3:12:07:fe:57:41:7b:60:f8:e1:c0:
54:2e:4e:48:55:77:fa:fa:68:4d:4e:fa:79:f1:30:d1:36:35:
d6:71:d0:26:b8:ef:b2:e5:76:6e:e1:67:c8:ea:70:1d:96:4d:
bf:01:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:08 2024 by rpki-client on console-fra.rpki-client.org