Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/RzyQokfWZxJfppvqfNbidjApPGg.roa
File: RzyQokfWZxJfppvqfNbidjApPGg.roa (raw, json)
Hash identifier: 113Rxhoul7DXH/5cTBRoEuJgb/sipBR22oH2/P9m7Lw=
Subject key identifier: 47:3C:90:A2:47:D6:67:12:5F:A6:9B:EA:7C:D6:E2:76:30:29:3C:68
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 018CC56E148D699D70392A389CA8E4F69E5C
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/RzyQokfWZxJfppvqfNbidjApPGg.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 195.210.108.0/24 maxlen: 24
195.210.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:14:8d:69:9d:70:39:2a:38:9c:a8:e4:f6:9e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=473c90a247d667125fa69bea7cd6e27630293c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:90:ea:29:c2:a7:83:b7:be:2a:37:3e:6c:
db:4d:22:a4:72:9d:68:6a:38:17:60:d3:c6:74:91:
dd:56:94:eb:91:be:22:66:2f:26:fa:dd:bf:d6:46:
cc:7e:8c:93:73:1a:d4:1a:62:ad:7f:b0:87:b1:49:
50:01:e4:77:fb:0f:8a:73:ca:e8:07:2a:68:51:2b:
e5:02:5a:18:03:f7:53:a1:a9:97:b5:09:39:7f:77:
18:15:db:fd:9a:1c:c6:e3:07:0f:ae:93:9e:a6:b4:
1b:6e:e1:7d:44:70:90:43:ed:b5:21:dd:af:a1:c8:
23:9b:d0:ae:32:fb:70:ac:02:70:ab:23:de:d6:a2:
f5:57:ff:15:ca:7a:89:b6:2b:a6:75:72:ef:ed:e2:
55:6c:bb:2c:59:fd:71:1a:d9:a7:21:74:09:58:d3:
5b:b7:94:ba:8d:45:1c:3e:bc:10:b6:ba:cf:9d:b0:
d3:69:cc:15:ba:b7:f0:99:0b:25:6d:ba:ca:23:ea:
bf:1a:27:9b:89:43:78:99:cf:dd:96:2e:ef:16:5b:
5d:f8:ae:db:5d:ab:c4:95:ea:70:89:55:87:10:00:
58:e7:08:ab:d8:c2:ab:29:b8:dd:7c:d6:b5:6b:20:
40:c2:04:68:3c:12:af:f8:2d:ae:e6:f8:fc:48:dd:
93:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:90:A2:47:D6:67:12:5F:A6:9B:EA:7C:D6:E2:76:30:29:3C:68
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/RzyQokfWZxJfppvqfNbidjApPGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.108.0/24
195.210.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:84:82:b4:dd:31:c1:70:b3:0b:72:ba:ad:25:69:5c:ca:dc:
41:35:92:5b:40:2b:0b:fa:ae:f7:51:ae:60:5b:66:d1:48:10:
94:5e:f0:d6:ea:c5:6d:a2:c4:19:0f:8c:a3:3a:be:82:e1:3f:
1b:63:1d:d5:19:a2:d0:d3:b9:6e:bd:03:b8:51:fc:22:57:76:
7f:fb:71:89:65:3a:49:20:88:89:ee:96:e9:42:53:05:e6:30:
12:2e:8a:a4:c8:4a:ed:ca:1a:89:4d:ff:d9:a8:c2:dc:77:51:
30:1e:bd:1f:66:3d:87:13:50:9f:37:88:f4:f5:08:9a:8d:bb:
b8:f2:b1:6b:82:6c:eb:08:06:39:0c:69:1c:8c:52:2c:55:96:
55:26:9f:1a:cd:38:38:8e:6d:4c:80:5b:67:22:71:69:10:4a:
38:d8:29:33:33:d6:7d:4e:0d:8f:f6:7f:dd:e0:ce:07:fc:3d:
7b:7b:c1:5c:fa:6a:52:76:c2:da:8b:f0:46:ce:e6:41:17:34:
20:d3:81:01:99:43:dc:b2:db:8f:fb:02:d7:a7:98:da:eb:6d:
2a:19:11:19:a6:09:e8:32:02:e5:d1:f4:3e:ca:f7:61:a9:6d:
ea:47:c9:99:64:22:87:83:d9:e5:ab:1d:93:02:68:37:94:2f:
c3:58:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:29:34 2024 by rpki-client on console-fra.rpki-client.org