Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/q_rpJ9-QVrI4aFo9bByw5LVc8UM.roa
File: q_rpJ9-QVrI4aFo9bByw5LVc8UM.roa (raw, json)
Hash identifier: OvLH/PcwT4EJeW7sSDlRsJughMaZ2tAm5rk25pRx+Pw=
Subject key identifier: AB:FA:E9:27:DF:90:56:B2:38:68:5A:3D:6C:1C:B0:E4:B5:5C:F1:43
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01933F3BE4946C395A5C3A28E446286B39A1
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/q_rpJ9-QVrI4aFo9bByw5LVc8UM.roa
Signing time: Mon 18 Nov 2024 12:25:09 +0000
ROA not before: Mon 18 Nov 2024 12:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 195.35.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:3b:e4:94:6c:39:5a:5c:3a:28:e4:46:28:6b:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Nov 18 12:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abfae927df9056b238685a3d6c1cb0e4b55cf143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:33:82:2d:7c:c5:f5:a6:bb:b1:a9:82:2f:62:
be:35:2e:3f:7c:8a:53:0f:36:01:72:5e:d0:af:67:
5a:64:12:7f:ab:2f:72:3f:86:ab:84:e6:81:cf:28:
51:c1:b9:9b:ae:31:9b:c8:2e:59:df:fb:3b:9c:a3:
47:96:c4:67:41:c7:4c:8b:33:74:f2:d2:3f:68:a8:
79:80:16:40:a4:5f:26:de:33:d1:fb:59:bf:b4:c9:
9d:ed:8a:71:80:70:5f:0b:b3:3a:48:0c:ab:ea:02:
fd:a5:83:31:3e:db:df:a3:f1:b0:3a:a2:45:89:39:
97:c8:aa:0c:6a:b2:17:8e:90:07:59:31:3f:4b:0f:
64:dd:d3:24:6a:28:d9:e1:93:42:4d:0c:b3:44:1d:
13:72:99:3e:f4:d8:4b:62:9e:0e:67:fc:93:97:01:
09:43:af:b4:6b:86:b3:63:25:fd:58:d5:4f:ce:53:
d9:e4:a6:89:5b:3c:88:25:b7:b2:f5:df:e4:fc:cd:
8d:27:dc:86:51:8e:24:4e:69:cb:40:d1:d5:a6:5e:
cc:db:d8:0c:d0:cb:61:d5:41:52:7b:cd:58:d2:e8:
0f:98:90:74:b0:ba:57:a4:e3:85:57:18:76:c3:c6:
65:d5:3b:3f:9f:03:55:d7:fe:01:84:60:2e:2b:55:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:E9:27:DF:90:56:B2:38:68:5A:3D:6C:1C:B0:E4:B5:5C:F1:43
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/q_rpJ9-QVrI4aFo9bByw5LVc8UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fd:bd:95:6b:d2:de:4b:9d:e3:c1:73:62:8a:5f:89:ea:ea:
57:b2:1e:7e:60:a6:e5:25:b2:36:5d:86:23:6b:3d:1b:d9:ee:
bc:19:b9:22:a5:a7:b1:2d:2f:9d:16:33:bb:ab:1a:7e:a8:53:
a4:55:7e:13:4e:d7:62:f5:1a:a2:68:50:b9:40:55:57:1b:19:
e4:25:76:f3:8e:b3:59:82:51:6e:e7:36:a3:ad:86:65:6b:7b:
77:ed:58:af:a3:92:75:0b:a6:7b:14:00:a6:1b:4e:d3:c2:c7:
eb:6b:a2:98:5e:4e:62:be:fc:78:f2:a7:01:d9:92:8c:b7:b1:
54:d2:74:e4:26:e4:a0:ae:07:b6:dc:ac:62:56:38:2a:ea:ce:
c5:17:16:2a:6a:4d:d7:6f:f0:6f:8c:47:43:52:0e:49:c8:b7:
12:85:ba:15:e1:3d:03:5c:dc:6e:7d:ae:b6:23:9d:82:e7:ce:
ba:50:7f:6d:55:a5:c5:fc:30:03:85:1a:20:85:2f:99:63:8d:
7d:e8:f5:20:f7:77:03:a8:be:e5:3c:47:b0:1f:68:ac:5b:23:
a4:a0:d1:58:e8:f0:23:94:83:7d:f5:8d:46:5b:67:e3:81:f3:
2b:37:de:2e:43:25:3b:6d:80:68:ef:a6:4f:c3:4e:43:df:86:
7d:b5:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:25 2024 by rpki-client on console-fra.rpki-client.org