Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/CpWj3IlNaZsDdqOC9MZMAFcqMYM.roa
File: CpWj3IlNaZsDdqOC9MZMAFcqMYM.roa (raw, json)
Hash identifier: SSMf6zjOlE7w2XlmhgfKLfYaXTxXxEW0J7QTkuJ7g0M=
Subject key identifier: 0A:95:A3:DC:89:4D:69:9B:03:76:A3:82:F4:C6:4C:00:57:2A:31:83
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 018CC501168536EBC141BFE35310BC149B6C
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/CpWj3IlNaZsDdqOC9MZMAFcqMYM.roa
Signing time: Mon 01 Jan 2024 12:30:31 +0000
ROA not before: Mon 01 Jan 2024 12:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1764
IP address blocks: 195.242.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:16:85:36:eb:c1:41:bf:e3:53:10:bc:14:9b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a95a3dc894d699b0376a382f4c64c00572a3183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:83:de:a6:4a:eb:8e:f9:c5:f3:13:f4:60:
27:f4:44:d3:82:f8:97:0c:97:b2:29:f0:e6:df:8b:
8a:d3:d3:72:95:77:17:6c:99:08:5f:86:1d:1b:c1:
5e:9a:36:85:88:5e:49:56:c2:c9:7e:f2:77:77:8a:
24:c5:6f:05:75:ad:4e:ba:75:36:08:43:e0:69:80:
4d:50:f0:9b:82:2a:9e:dc:da:65:3a:60:98:a6:ee:
21:5f:d8:2b:95:89:dd:6a:25:4b:16:c6:87:cd:6f:
16:8d:73:1a:2d:f8:18:13:11:67:12:7f:ab:38:80:
04:fa:54:41:b1:79:d5:2e:ce:b5:fd:fd:a4:05:22:
96:8d:fe:4c:ca:50:e0:0d:67:76:4c:21:90:58:bd:
1c:be:5d:90:0d:c1:87:51:5a:63:04:7a:16:af:82:
81:8c:ce:2b:ab:37:00:89:90:f1:f8:9f:4a:eb:52:
a3:d1:97:38:6f:e1:a1:96:b1:42:0c:c0:8f:f6:85:
75:01:fa:c2:c0:c6:ca:1f:6e:ee:0a:df:8c:24:20:
b7:3f:9a:c4:56:ad:5b:dd:da:ef:dc:60:19:96:22:
55:3e:23:b8:40:1a:b4:bd:ce:0b:90:1c:38:b1:61:
66:f7:64:43:30:ff:dc:32:bd:25:03:76:31:d5:5e:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:A3:DC:89:4D:69:9B:03:76:A3:82:F4:C6:4C:00:57:2A:31:83
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/CpWj3IlNaZsDdqOC9MZMAFcqMYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:af:c3:95:67:cc:92:1c:7f:b8:a1:7c:8a:ec:96:5d:fc:49:
be:73:eb:1f:c9:05:ed:cd:a1:35:b7:c1:1f:06:9a:1e:d1:4f:
5c:75:3c:20:c6:44:84:31:27:8a:c8:20:6e:b1:f8:46:f5:ee:
d9:6e:fd:ed:78:d6:50:61:51:39:20:8f:84:04:ee:3f:f6:e1:
d9:2b:30:36:41:8a:63:70:4b:f0:c6:c1:8a:58:7a:94:d6:7b:
18:a2:b3:73:e5:c6:ac:e0:93:4c:c4:a9:3d:52:d8:38:fd:66:
44:6e:53:b2:94:b3:7f:88:6d:e4:ff:bd:42:f6:25:04:e9:cf:
bc:b8:57:2a:1b:b0:4b:db:02:ba:cf:0d:13:89:6a:99:63:df:
d8:45:c7:3d:4e:ca:2e:8b:54:2c:78:4b:51:d5:4d:eb:fc:4e:
72:f8:16:8f:15:7c:a6:74:7f:25:b3:29:ef:60:d3:61:a4:7a:
16:d4:17:c3:f9:da:76:65:52:33:40:f8:41:54:d6:5d:c3:bc:
f4:b8:5f:29:e3:12:59:8e:0a:27:0b:d1:4e:b1:dc:31:d3:3a:
dd:12:8e:6b:70:75:57:53:4a:98:ae:09:75:57:a6:22:ce:c7:
73:ca:2b:f7:fd:22:ff:d9:89:8c:49:fd:f3:1c:e1:6a:93:5a:
e5:49:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:55:12 2024 by rpki-client on console-fra.rpki-client.org