Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/_J2oMa4txYmsd8jjfdhXgnSEgK0.roa
File: _J2oMa4txYmsd8jjfdhXgnSEgK0.roa (raw, json)
Hash identifier: Hygd4MhSxdAPcna+qVKlt7//3D9676SnGtG4Yii7ojE=
Subject key identifier: FC:9D:A8:31:AE:2D:C5:89:AC:77:C8:E3:7D:D8:57:82:74:84:80:AD
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 018D853230F230F39E5603B2F868F9731BAB
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/_J2oMa4txYmsd8jjfdhXgnSEgK0.roa
Signing time: Wed 07 Feb 2024 20:11:15 +0000
ROA not before: Wed 07 Feb 2024 20:11:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 195.10.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:85:32:30:f2:30:f3:9e:56:03:b2:f8:68:f9:73:1b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Feb 7 20:11:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc9da831ae2dc589ac77c8e37dd85782748480ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:25:78:be:4d:1f:e2:51:ed:37:70:98:68:
a9:ce:7a:10:bc:f6:ad:9c:3b:20:61:4a:c3:c7:bf:
0b:7f:aa:ce:b7:d3:a8:cb:88:d5:da:3e:50:ab:bd:
74:d8:bf:da:2d:5a:53:3d:a5:81:eb:b3:ad:91:3b:
d7:54:ab:0d:c2:8d:28:2a:fe:a4:23:71:0e:7d:e0:
b0:57:22:c1:41:c2:74:bf:78:08:12:ab:5a:54:68:
7f:b5:50:f3:b8:8a:54:24:37:56:f9:aa:84:e7:e4:
c8:88:a5:78:22:8c:1b:f6:90:07:8d:a4:88:38:e9:
a3:bd:8b:48:61:ca:a6:04:f2:6d:ba:f3:18:a6:a3:
da:58:70:a3:9b:cb:c8:0a:0d:2c:af:93:66:d0:a5:
e8:eb:1b:a7:49:a0:e7:20:0f:12:62:14:c2:cc:75:
21:ab:c4:47:a3:0f:ef:29:5d:cb:90:c2:ab:de:eb:
0d:89:7f:87:8f:0f:2f:95:f2:22:b7:ca:f7:b2:77:
3c:3a:5d:22:64:90:9c:b4:0f:17:ce:a9:78:f2:1c:
9e:8d:f1:66:86:25:33:4b:f8:9d:05:c1:5a:fe:28:
c5:37:a7:ac:10:04:7c:50:8c:8d:15:27:7f:6a:0b:
32:92:8d:25:28:a3:48:a1:9b:4f:86:07:6b:23:4d:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:A8:31:AE:2D:C5:89:AC:77:C8:E3:7D:D8:57:82:74:84:80:AD
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/_J2oMa4txYmsd8jjfdhXgnSEgK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.205.0/24
Signature Algorithm: sha256WithRSAEncryption
04:bb:39:55:b7:24:9d:94:11:76:2f:23:09:70:64:05:3a:5d:
97:9c:9f:9a:25:31:ac:7f:f7:19:0c:1f:47:28:9f:f9:ca:fa:
30:f8:4f:c6:5c:a1:b1:d1:4a:3c:1f:c4:c2:64:5e:3d:a3:62:
bf:79:d4:e1:25:a8:23:bd:e2:0a:87:5a:88:2a:10:5f:97:df:
07:cb:9d:e9:f2:b7:17:d7:2b:f9:a5:64:90:a9:e8:40:dd:bb:
3a:f0:91:0d:8a:42:63:4e:99:b4:f1:16:4a:4f:68:c9:49:28:
8b:61:ca:a5:58:e4:60:c6:3f:1a:e2:9f:14:07:80:63:79:55:
8b:5b:4b:49:73:63:09:46:33:d4:42:f8:ac:1b:68:d3:95:30:
36:c5:c2:d3:61:2c:2d:4c:dc:22:bf:8a:58:fa:04:f5:fd:65:
96:1a:d8:74:9b:fe:81:3f:88:9c:40:83:68:44:54:9a:6d:f4:
a9:6c:d0:c1:2b:d5:d0:06:fa:58:9b:b6:7b:18:e0:0b:80:fd:
dd:2b:c3:ec:88:9a:f0:62:07:12:44:45:d9:75:db:e4:3f:a8:
39:c2:52:de:c4:8f:7e:25:ad:f4:a2:a5:71:ab:10:3d:d2:e4:
54:e6:19:4e:fe:60:d0:fe:41:77:b1:14:a6:5d:dd:2e:a8:bc:
9c:51:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:40 2024 by rpki-client on console-ams.rpki-client.org