Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/D7XiQ_rWVcPhWs2K2fSJvQNah_4.roa
File: D7XiQ_rWVcPhWs2K2fSJvQNah_4.roa (raw, json)
Hash identifier: No3GAt1AR9tXk2qzUzK70aRRFrqU2uMXjR5BgucMGgU=
Subject key identifier: 0F:B5:E2:43:FA:D6:55:C3:E1:5A:CD:8A:D9:F4:89:BD:03:5A:87:FE
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 018CC795199BBE3974BDDA991078FB3BFE8F
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/D7XiQ_rWVcPhWs2K2fSJvQNah_4.roa
Signing time: Tue 02 Jan 2024 00:31:26 +0000
ROA not before: Tue 02 Jan 2024 00:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43118
IP address blocks: 95.108.0.0/17 maxlen: 17
78.152.0.0/19 maxlen: 19
195.42.140.0/23 maxlen: 23
46.187.128.0/17 maxlen: 17
91.203.244.0/22 maxlen: 22
2a02:2a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:19:9b:be:39:74:bd:da:99:10:78:fb:3b:fe:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fb5e243fad655c3e15acd8ad9f489bd035a87fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:9a:95:db:9d:50:a8:09:a6:d5:71:78:85:
c4:66:4b:38:56:15:a1:8b:8b:3c:96:a2:0e:dd:91:
f0:3b:a1:3e:f3:85:73:14:ae:6b:d6:1f:2c:64:c0:
8c:95:58:84:29:09:4c:c6:4a:2a:cb:6e:f8:4b:0b:
ff:95:6a:e7:12:fc:de:40:35:71:e0:39:2d:64:dc:
c9:e0:86:17:ff:09:83:da:d9:3d:27:1a:e2:ac:a1:
c0:0f:0f:3c:a6:2b:df:5b:35:68:83:71:17:0b:59:
34:ee:32:7a:85:da:63:3c:b6:7b:6f:22:23:d7:79:
48:c2:37:31:70:1b:c4:d5:58:d8:4f:69:db:60:fc:
d6:1b:9a:d3:db:e9:27:ab:d4:df:e5:3c:3e:bf:df:
16:22:ff:d2:58:9a:bb:9e:8b:71:cb:72:13:00:7e:
a4:9c:d0:ab:63:11:30:1b:b5:a0:87:28:da:5c:b0:
25:a1:90:d8:e0:f8:c9:5a:2c:d4:42:0c:3f:83:e5:
6c:27:51:67:7e:16:ce:18:5e:3e:4f:e6:a1:42:01:
c8:38:d3:51:d9:12:4e:44:af:f3:e8:50:49:9c:f0:
2d:78:97:23:56:22:be:e9:b6:99:4b:46:5c:15:ae:
02:48:57:6c:d1:83:40:50:1b:63:e9:39:b3:ce:13:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B5:E2:43:FA:D6:55:C3:E1:5A:CD:8A:D9:F4:89:BD:03:5A:87:FE
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/D7XiQ_rWVcPhWs2K2fSJvQNah_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.187.128.0/17
78.152.0.0/19
91.203.244.0/22
95.108.0.0/17
195.42.140.0/23
IPv6:
2a02:2a0::/32
Signature Algorithm: sha256WithRSAEncryption
65:87:d5:56:bf:e2:0d:fd:fe:4a:45:17:2c:3f:2b:cb:49:3e:
c8:2e:55:be:a3:bc:cc:b7:f5:13:34:cb:89:60:e6:fe:c2:0d:
2c:a7:be:d0:c9:53:f8:6d:86:2f:09:77:a5:84:65:60:69:b1:
27:6d:f5:20:a6:d3:e5:c2:5f:3e:d0:44:eb:bc:41:ad:9e:89:
ab:1a:31:2d:1f:91:c2:52:71:f6:5d:54:52:6c:65:6d:dd:36:
e4:8b:5d:9f:4e:6d:eb:5d:ae:5f:be:56:6b:46:85:df:11:40:
83:30:a6:1c:b5:fa:72:4e:4c:7c:37:73:f5:79:12:82:3d:49:
f5:6d:2b:85:09:89:1e:e4:37:2d:50:dc:db:b9:10:a1:13:44:
82:ef:25:89:8c:7e:f3:f9:61:c3:c0:33:0f:e7:59:7f:fa:72:
96:87:55:a6:1f:66:07:b1:0a:6b:ce:5e:cf:ff:d4:dc:4c:e3:
d0:a4:56:08:73:2a:40:08:b8:ef:24:63:2d:ff:9e:9a:05:53:
e4:bc:cd:c2:22:21:10:79:02:05:3f:5f:56:fb:e2:1d:10:15:
82:6d:ec:6f:2a:9d:e1:f8:51:6a:12:c5:88:40:18:94:cd:e3:
50:ea:18:2f:bf:61:56:05:40:9d:cb:81:33:f4:d2:2d:d6:e6:
27:62:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:57:07 2024 by rpki-client on console-ams.rpki-client.org