Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/rln2hAhK9q0geLnR19x-k9rfUSk.roa
File: rln2hAhK9q0geLnR19x-k9rfUSk.roa (raw, json)
Hash identifier: qDAvtwIPM9I7SBAh3PqUzYnsR/A+f2mQuVlipgK2994=
Subject key identifier: AE:59:F6:84:08:4A:F6:AD:20:78:B9:D1:D7:DC:7E:93:DA:DF:51:29
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018EA3F28A43D5F1B8901954509619CF97E3
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/rln2hAhK9q0geLnR19x-k9rfUSk.roa
Signing time: Wed 03 Apr 2024 12:32:45 +0000
ROA not before: Wed 03 Apr 2024 12:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 195.206.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:f2:8a:43:d5:f1:b8:90:19:54:50:96:19:cf:97:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Apr 3 12:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae59f684084af6ad2078b9d1d7dc7e93dadf5129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:bd:20:d3:00:6f:b7:32:69:46:0c:4b:2b:
78:3f:a6:c0:d4:af:2f:b6:3a:00:b9:f9:e2:f5:06:
bb:f9:66:8d:62:f4:a2:1a:67:24:da:3d:88:2f:bb:
23:be:4b:91:cd:56:f2:92:c4:f6:f6:e3:75:2e:63:
a1:d5:07:ba:fe:1c:3e:b8:a1:33:74:23:93:b4:7f:
3e:54:36:8b:04:c1:2f:b1:72:9e:de:88:0a:41:27:
e7:bc:4c:25:a3:5d:c6:e8:6f:3b:88:c8:f7:77:0d:
80:a2:db:6a:f2:6c:74:98:52:01:98:b9:41:c7:dc:
48:74:09:b7:ed:e6:26:d1:3c:ac:78:be:60:ec:47:
7d:a2:17:e9:72:8b:2b:4c:39:51:67:72:b0:37:02:
53:2e:63:8c:35:dd:74:36:96:26:bd:9b:b6:9e:a2:
7b:2d:5b:e0:5b:ae:ad:9a:9b:78:40:c1:00:97:bc:
b2:fb:7a:ce:72:d4:1b:62:9f:d0:20:63:ea:15:82:
07:70:5f:bc:0d:0b:d5:af:db:a2:03:7b:50:d5:8b:
0f:70:6f:77:92:a9:b8:99:21:9b:b7:5f:6c:68:9c:
ff:28:39:d2:29:c3:6e:66:ce:24:46:c8:3b:87:2c:
48:10:7c:0c:93:34:75:35:ec:41:15:c6:1f:ff:11:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:F6:84:08:4A:F6:AD:20:78:B9:D1:D7:DC:7E:93:DA:DF:51:29
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/rln2hAhK9q0geLnR19x-k9rfUSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a2:79:6b:51:90:7f:4e:40:f3:24:3c:93:47:83:29:a4:36:
f8:f9:3e:f0:d0:f0:db:b1:c0:c8:2d:37:2d:22:98:16:eb:ac:
b8:98:36:01:dc:eb:e0:18:79:07:b6:98:23:92:e0:01:33:ba:
49:53:61:c6:c8:6c:28:dc:fd:30:31:29:34:f0:c0:88:ed:b0:
3f:bc:4c:b7:8b:5d:99:13:1e:7f:62:87:3c:bb:3c:d1:be:1c:
cd:03:0f:e0:f9:d4:f8:a0:3e:cb:ed:af:19:97:9b:13:2b:60:
2a:06:15:54:c9:5c:60:72:11:c7:a6:1f:34:78:a1:57:a0:ec:
dd:19:71:b6:5d:5f:a3:ca:55:ad:d8:fd:04:2a:b2:2d:c3:4e:
1d:07:49:60:0e:da:81:4c:d2:45:d9:f3:47:48:09:48:0c:7c:
a3:21:f4:bc:b3:e1:fa:23:ea:73:3c:d5:06:2a:f2:43:d9:8b:
41:2d:3a:7b:f4:2f:ca:ce:5c:bb:3a:38:72:65:be:9d:e7:75:
ab:2f:e7:0a:49:97:29:a3:6a:a7:c5:7c:50:8c:e1:94:8c:bc:
8d:bb:01:bc:8a:8d:63:98:8c:a2:97:1b:a6:c4:9f:b8:48:47:
c9:0e:c3:a1:65:54:b0:60:9e:90:05:a4:47:8e:91:57:0a:a6:
14:36:48:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:29:15 2024 by rpki-client on console-ams.rpki-client.org