Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/0v7V0qU3F5YmHpnEgQtwX9UmPdo.roa
File: 0v7V0qU3F5YmHpnEgQtwX9UmPdo.roa (raw, json)
Hash identifier: 5GgfMIvRw2bUU4P/iCWj4UO1uRMNoRGKdy6IQRJyO3c=
Subject key identifier: D2:FE:D5:D2:A5:37:17:96:26:1E:99:C4:81:0B:70:5F:D5:26:3D:DA
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 018CC5DC2BAECFC3D082D0B0296117A28A8D
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/0v7V0qU3F5YmHpnEgQtwX9UmPdo.roa
Signing time: Mon 01 Jan 2024 16:29:49 +0000
ROA not before: Mon 01 Jan 2024 16:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212797
IP address blocks: 194.76.58.0/23 maxlen: 23
194.76.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2b:ae:cf:c3:d0:82:d0:b0:29:61:17:a2:8a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Jan 1 16:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2fed5d2a5371796261e99c4810b705fd5263dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:87:6f:f6:73:c6:46:a9:15:0f:4b:ec:e3:
9a:64:f9:dc:f3:c6:bd:63:f9:b9:02:f4:07:07:f4:
00:c6:d1:c2:8b:df:1d:29:a0:52:3b:46:2b:80:b6:
d7:53:cb:31:9d:70:50:3d:ef:20:68:b7:2c:06:f6:
c8:93:31:ad:04:6c:a4:08:95:33:69:e6:a1:cf:69:
e3:3e:85:2b:3d:27:ee:38:8c:f8:8d:1e:77:a7:2a:
fd:3d:a2:6e:df:18:af:43:8f:58:23:f5:16:d1:60:
fd:7a:62:37:17:2d:74:50:83:3a:02:84:9d:06:bd:
4a:42:4f:6b:8d:74:98:81:cd:fe:1a:a3:55:54:ad:
15:af:71:f2:d1:70:35:45:45:a1:a5:6b:12:40:d4:
f4:bd:8f:a9:a3:9a:59:99:df:4b:5f:b5:9f:07:9a:
65:55:32:ab:45:ec:11:f4:fe:c6:38:c8:85:fb:23:
12:23:4c:30:da:29:a9:ac:30:04:31:c2:33:05:af:
82:5e:6c:2c:56:ba:92:de:1b:1c:54:5e:60:b1:6f:
10:c4:93:3f:85:6e:ef:45:52:f3:b3:54:7e:b0:03:
c5:c2:20:a7:0d:44:57:50:9f:60:b8:0d:17:86:ca:
d1:a4:bd:8b:97:73:7f:f2:71:21:e3:5d:a5:73:5f:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:D5:D2:A5:37:17:96:26:1E:99:C4:81:0B:70:5F:D5:26:3D:DA
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/0v7V0qU3F5YmHpnEgQtwX9UmPdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.58.0/23
194.76.104.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:7b:64:74:10:b9:b9:82:39:e2:ab:27:56:a8:ac:d9:6e:db:
4a:5d:94:fa:38:27:b1:d5:da:5a:7c:91:9f:d1:38:2a:0c:37:
15:95:6b:d4:42:ff:4b:7c:ae:e3:42:74:13:74:a8:47:d9:b7:
a2:0e:98:b0:74:7e:b0:ae:ed:01:81:81:2d:a1:a0:83:e7:19:
4d:bc:96:54:82:0b:1c:c2:15:d9:27:b8:e9:3f:b5:ec:10:ac:
6b:50:4d:98:f8:7c:fd:1b:ae:bc:4b:ea:08:6f:a1:0b:13:a2:
e2:a2:22:9b:ab:6f:d2:c0:36:6e:9e:25:97:32:04:98:da:42:
cd:cd:c8:d6:f9:5e:04:d6:0a:b1:5b:ee:be:f1:d7:05:a4:71:
2f:be:af:b6:0c:7e:98:56:20:12:c5:d0:84:33:aa:1d:cb:11:
5b:71:fc:ca:c5:7a:4a:79:f5:8c:c7:62:ad:3e:65:fb:cf:b4:
58:33:f7:7a:ee:c7:e3:5f:5d:1e:65:8e:4e:99:d7:04:7f:f4:
ac:11:5f:c4:fd:04:4c:1c:70:25:2d:7e:ac:84:09:72:a8:7a:
20:24:64:92:6a:a0:23:ed:25:bf:12:67:7d:cd:cf:02:33:76:
72:16:37:2d:95:7a:4e:5c:5b:14:4b:25:41:5f:eb:83:2f:d6:
0d:c7:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:31 2024 by rpki-client on console-ams.rpki-client.org