Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/to_f9AyFQ27vcO6LD8wE1IQLl60.roa
File: to_f9AyFQ27vcO6LD8wE1IQLl60.roa (raw, json)
Hash identifier: QZN5cXxRMlTaTOVegNuWxwgriHvWWnvqN/hcjCl/Gek=
Subject key identifier: B6:8F:DF:F4:0C:85:43:6E:EF:70:EE:8B:0F:CC:04:D4:84:0B:97:AD
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018FE877F9975215236F0EC43B6F7B3B8160
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/to_f9AyFQ27vcO6LD8wE1IQLl60.roa
Signing time: Wed 05 Jun 2024 12:55:27 +0000
ROA not before: Wed 05 Jun 2024 12:55:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215875
IP address blocks: 195.167.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:77:f9:97:52:15:23:6f:0e:c4:3b:6f:7b:3b:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jun 5 12:55:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b68fdff40c85436eef70ee8b0fcc04d4840b97ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:09:e5:5a:6e:5f:39:77:5b:83:44:b6:38:
ef:e7:76:dd:c7:65:0a:8f:4d:0b:92:ef:14:98:36:
1c:6d:f2:5e:4b:f4:cb:92:d4:c1:93:16:fe:0c:f6:
52:a9:6e:2a:5d:ae:7a:37:c9:b7:4b:22:09:76:85:
81:dc:1f:89:8d:5b:03:c8:4f:f3:a3:e2:87:70:96:
f5:ee:2e:24:44:0d:d6:ad:6e:c7:73:17:59:f4:4d:
22:70:cf:af:e1:70:48:6f:ee:dd:49:fe:2e:b7:64:
2a:2c:1e:9e:3f:4c:1b:ba:5f:15:7f:4b:6b:09:25:
de:2e:7a:af:2e:38:f8:44:9c:76:97:42:ef:fc:f4:
2a:ff:85:0f:2c:b6:b4:41:64:36:11:d6:59:a2:0a:
0e:ab:d8:3a:85:9c:95:cf:20:83:8f:bd:bd:22:2d:
09:49:3c:54:b8:30:43:84:92:27:a9:62:cf:59:6a:
69:0e:e4:71:55:f2:2f:92:76:e3:b4:cf:22:1e:3f:
32:9b:f7:b9:00:f7:fa:2a:ca:2b:ed:4d:4f:79:4b:
55:78:b8:02:65:20:6d:90:2a:02:1f:c2:6f:5c:26:
c2:29:ed:7f:25:0f:20:34:67:88:53:de:dc:89:e6:
db:ad:ec:65:bd:0a:3d:e6:4e:73:cb:06:37:c3:01:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:DF:F4:0C:85:43:6E:EF:70:EE:8B:0F:CC:04:D4:84:0B:97:AD
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/to_f9AyFQ27vcO6LD8wE1IQLl60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.154.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:bd:b6:37:2c:57:98:8a:a8:46:b1:03:af:0e:a5:43:66:51:
8e:08:d3:08:de:b3:c3:e7:93:e3:74:3e:e5:f6:b8:8e:f4:44:
b6:e2:46:4d:58:5d:cc:1b:57:9c:31:60:4b:e4:04:8a:57:08:
2f:05:6c:47:38:c2:6b:f9:1c:fc:3a:d7:cd:45:03:fd:60:8a:
df:b4:30:47:bb:62:e4:ef:26:8e:24:72:57:b8:ac:32:70:b4:
e2:da:62:d6:8f:36:f1:d6:f2:e0:83:45:01:75:b8:de:8c:4c:
aa:cb:0c:52:d2:a6:a4:fe:6e:62:fe:dc:0f:d9:d0:8e:04:c4:
05:23:86:42:c9:36:97:0e:80:65:9f:22:79:ac:00:f0:f6:e3:
48:30:6a:e9:52:5b:57:25:ec:2a:9c:67:cb:74:e4:7c:47:c5:
7a:9a:fb:ee:1d:3e:b2:80:0e:49:9a:e0:82:b6:67:73:39:94:
d3:17:83:4f:ea:c1:91:8e:38:df:03:b3:7a:e5:55:35:c7:87:
f3:ac:be:06:29:b9:11:23:16:60:47:a7:c7:50:5e:d6:97:a1:
3f:8c:69:61:90:07:d9:d3:fd:c7:e6:c1:63:d6:ca:eb:d9:ba:
6d:7f:b7:ed:01:20:ef:de:c8:4d:b6:16:17:f0:a0:a2:cd:73:
69:9b:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:33:59 2024 by rpki-client on console-fra.rpki-client.org