Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/AdKnfCEANaBgXh3_zIciEx-5IsM.roa
File: AdKnfCEANaBgXh3_zIciEx-5IsM.roa (raw, json)
Hash identifier: gmzxQ4S42QaJrixjQ5r3wIgHbRYKbx6Z6DpAr4Zyq6g=
Subject key identifier: 01:D2:A7:7C:21:00:35:A0:60:5E:1D:FF:CC:87:22:13:1F:B9:22:C3
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BC2A0F8B1067B4A3AAC44677B5636
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/AdKnfCEANaBgXh3_zIciEx-5IsM.roa
Signing time: Tue 02 Jan 2024 12:35:14 +0000
ROA not before: Tue 02 Jan 2024 12:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206838
IP address blocks: 195.167.148.0/24 maxlen: 24
195.167.149.0/24 maxlen: 24
2001:1a68:2a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c2:a0:f8:b1:06:7b:4a:3a:ac:44:67:7b:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01d2a77c210035a0605e1dffcc8722131fb922c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:d8:c4:9d:0e:1f:7b:92:2d:64:e3:b7:b0:
a1:da:18:78:fe:81:6a:bf:82:a6:4b:5c:d1:51:e9:
0f:b1:63:a9:59:9e:12:90:7b:2b:77:f1:04:0a:4c:
34:09:45:20:6d:13:c4:b6:db:11:2d:d7:af:0f:be:
00:1a:1b:82:b8:8e:fc:34:1e:61:04:5a:64:b5:a1:
88:bb:50:d0:a9:d2:fb:a5:2f:e3:06:3b:b9:46:4b:
c2:41:e2:0f:60:d0:2f:c8:2c:cd:ed:72:63:91:45:
19:a8:3f:72:af:d2:fc:7c:8e:0f:e8:2d:6b:b5:14:
77:ba:e7:c7:99:18:6a:7c:d1:3a:05:db:f4:1c:75:
0a:0e:34:b7:a2:09:f8:d2:ae:50:a4:f2:19:84:e1:
72:cf:5c:1f:01:cc:16:22:6c:5b:8f:f8:e1:89:24:
d8:e6:a0:8c:37:5f:d7:28:52:f7:e5:fb:54:ee:c1:
29:cf:bc:14:71:13:a2:ef:0c:67:b8:ff:db:8d:c2:
fd:97:d3:59:27:20:6f:09:7a:4e:5f:f9:83:fe:c8:
74:13:aa:b1:72:f5:51:7a:06:48:e3:4b:55:0c:2a:
c8:aa:3c:fe:bb:9b:b5:ff:fc:03:95:76:4e:9e:92:
c8:bc:c7:e1:90:85:b7:bd:f2:03:2a:f2:22:8d:b9:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:A7:7C:21:00:35:A0:60:5E:1D:FF:CC:87:22:13:1F:B9:22:C3
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/AdKnfCEANaBgXh3_zIciEx-5IsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.148.0/23
IPv6:
2001:1a68:2a::/48
Signature Algorithm: sha256WithRSAEncryption
a5:38:14:eb:c1:d0:72:cb:89:15:da:f0:03:57:8f:3a:db:42:
2b:a0:ef:c6:01:12:62:71:c0:ff:42:a1:37:2b:a2:a0:fe:ba:
4e:05:dd:f2:80:1d:ea:ed:8b:ed:a1:02:94:48:a4:9c:3f:21:
52:17:69:e1:31:97:02:67:b4:e9:f8:6d:bc:db:20:ba:c7:96:
b0:2e:e7:18:3d:d4:90:68:cf:fa:9c:3d:e5:ea:b3:f2:7e:b6:
07:2c:e9:01:ee:76:3f:33:d8:b8:7a:1d:e2:49:b5:b3:a4:56:
51:37:60:1d:69:67:98:68:78:54:3c:06:18:72:44:53:ed:78:
34:26:d4:6a:fc:38:eb:dd:a6:34:c4:22:19:da:cc:04:f3:09:
18:fd:78:68:c7:a1:0e:42:2e:33:a1:ee:51:db:68:a7:a5:3b:
11:c8:1e:0a:20:ef:21:d9:0b:09:2e:71:e9:63:80:9b:e0:e1:
6d:a9:a9:a2:d4:3e:68:04:b6:c6:83:81:c5:cc:b1:2a:6a:56:
95:47:30:6b:f0:6a:50:3f:55:35:43:41:5b:8d:f2:04:5b:ac:
0b:93:8d:18:e0:da:c1:ff:be:1b:bb:7f:e7:d2:f8:98:32:16:
80:e9:5c:8b:21:f6:53:6c:12:36:2e:3f:4d:31:a4:a9:b2:8b:
13:b0:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:33:59 2024 by rpki-client on console-fra.rpki-client.org