Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/pp6cYSMd21t-dA_j_5KvfPINwuo.roa
File: pp6cYSMd21t-dA_j_5KvfPINwuo.roa (raw, json)
Hash identifier: 43RAf2oeA3Ut1+PwTFODKKU4y/iRZoSXlnZH2VNGOvk=
Subject key identifier: A6:9E:9C:61:23:1D:DB:5B:7E:74:0F:E3:FF:92:AF:7C:F2:0D:C2:EA
Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Certificate serial: 0190FF5C1AEEDFDB22A9372442AA5BDAE360
Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/pp6cYSMd21t-dA_j_5KvfPINwuo.roa
Signing time: Mon 29 Jul 2024 16:39:04 +0000
ROA not before: Mon 29 Jul 2024 16:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207324
IP address blocks: 195.85.248.0/24 maxlen: 24
195.88.181.0/24 maxlen: 24
195.95.128.0/24 maxlen: 24
195.95.130.0/24 maxlen: 24
2a10:6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ff:5c:1a:ee:df:db:22:a9:37:24:42:aa:5b:da:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b
Validity
Not Before: Jul 29 16:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a69e9c61231ddb5b7e740fe3ff92af7cf20dc2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:04:ab:ae:10:8f:67:a7:15:06:9b:26:66:
62:79:98:f7:9c:0f:f7:35:82:b7:37:8c:55:ce:00:
dc:be:61:93:43:39:71:50:de:f3:e1:49:b4:76:ac:
4f:bd:c7:55:cf:3b:df:0e:1e:a8:da:09:83:c9:40:
de:56:78:67:a9:af:00:7d:02:1e:a4:16:5e:75:d0:
39:ce:fb:91:94:5c:8e:11:e6:99:93:56:41:43:85:
09:e8:b8:6e:c2:e3:eb:93:4a:25:2a:fd:2f:8b:1a:
88:fc:bc:df:e2:d4:2f:2b:7d:d3:71:c7:96:74:69:
f9:6e:90:41:19:c6:a4:da:53:82:ab:85:bd:7e:ef:
a4:8a:89:b9:e1:9b:f4:5d:92:83:8e:c9:d8:31:9c:
ac:f0:0c:18:e5:8e:f2:15:fb:e2:dc:df:cd:4a:75:
09:07:95:eb:8a:75:fe:27:47:15:30:d1:9d:7d:73:
86:e4:18:17:99:79:96:dd:fc:bb:08:c5:6d:bb:c9:
40:ab:b2:56:d9:1f:dd:24:84:0b:80:51:7f:af:54:
68:93:ef:99:3f:05:71:4b:c2:ca:33:a6:2d:be:02:
24:16:d7:77:32:5d:22:06:fa:91:51:2f:84:62:25:
21:e2:cc:90:8f:ce:5e:e6:57:b1:8d:f6:a6:c5:02:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9E:9C:61:23:1D:DB:5B:7E:74:0F:E3:FF:92:AF:7C:F2:0D:C2:EA
X509v3 Authority Key Identifier:
keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/pp6cYSMd21t-dA_j_5KvfPINwuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.248.0/24
195.88.181.0/24
195.95.128.0/24
195.95.130.0/24
IPv6:
2a10:6c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:c1:53:1f:68:f2:08:48:5e:91:1a:d5:fd:06:a4:24:eb:ce:
8c:cc:0f:f8:92:f0:c4:54:b2:44:e3:14:dc:a6:8a:ed:1d:11:
1e:42:17:57:13:19:a4:68:f1:62:67:1e:4b:ba:c3:d9:df:97:
74:e1:a9:5e:27:6e:cc:59:3e:35:04:ae:57:f7:74:6f:a2:d4:
c7:bf:9a:c3:cb:95:0a:20:8f:63:ba:08:26:8a:07:94:15:7c:
22:b5:dd:79:55:0a:76:5d:26:a9:dc:e9:09:7d:1e:a7:24:51:
27:ff:6e:c2:9b:72:6d:e7:0c:7f:fb:75:a1:b9:bc:3e:f8:f6:
92:9d:81:02:78:1f:fa:f2:88:28:02:09:7e:cc:fb:37:ee:b4:
8b:3a:c8:bd:c8:de:2a:45:42:08:30:ba:35:bd:8d:d3:75:17:
ea:a7:c1:5e:69:03:d1:9f:e7:99:5a:49:ce:21:01:2c:aa:53:
30:e6:e1:0f:7b:9c:d8:d8:71:13:75:64:cd:c2:84:8d:59:d7:
73:6a:f6:d7:08:e3:02:3a:84:0f:61:be:d7:c3:53:5d:d7:97:
ab:92:82:9d:68:a3:f6:d8:2c:df:b0:15:b1:6b:1e:01:d9:8a:
33:aa:12:19:2b:4f:12:fd:5e:69:91:c6:f6:a8:0a:75:16:bf:
75:6a:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:31 2024 by rpki-client on console-fra.rpki-client.org