Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x7g7H7V4IHOmc85wmLSnaiEapuA.roa
File: x7g7H7V4IHOmc85wmLSnaiEapuA.roa (raw, json)
Hash identifier: 2zSh3q2gqmIoA3R94LORCItuKquxZDMnAme/bZ+zAQI=
Subject key identifier: C7:B8:3B:1F:B5:78:20:73:A6:73:CE:70:98:B4:A7:6A:21:1A:A6:E0
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E4CAA654F5B487E923DB6ED3CD75
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x7g7H7V4IHOmc85wmLSnaiEapuA.roa
Signing time: Mon 01 Jan 2024 04:29:43 +0000
ROA not before: Mon 01 Jan 2024 04:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206794
IP address blocks: 195.65.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e4:ca:a6:54:f5:b4:87:e9:23:db:6e:d3:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7b83b1fb5782073a673ce7098b4a76a211aa6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:0f:b7:70:84:23:1c:cc:c2:68:f2:85:6c:
ba:68:f6:04:b5:92:d2:4e:22:1a:bc:22:54:cc:10:
3e:db:5e:de:10:fe:95:c6:9e:23:d1:1e:a5:3b:5e:
6f:f1:87:6d:b0:09:82:2c:d6:71:63:44:d0:8c:d1:
0f:31:33:fb:cd:69:34:82:46:3b:70:22:8f:5b:33:
3d:b8:64:f8:af:82:49:5c:90:91:88:a9:19:07:46:
0b:be:09:7d:25:44:e7:c5:b1:95:43:ea:02:82:a2:
c6:08:e4:34:32:0b:45:91:37:96:d6:8b:e6:2d:28:
00:48:8a:78:87:df:17:a5:20:d2:94:bd:3b:ed:45:
8e:8e:03:05:6f:5f:15:ed:f3:c5:b8:cd:08:bb:0e:
27:93:72:7a:fe:f3:86:53:b1:79:d1:e5:a4:40:27:
fa:83:92:6d:32:36:18:ff:05:1c:a2:18:f1:9b:e8:
c2:c5:a8:eb:bf:43:b1:97:f7:f2:ee:c9:37:d6:88:
43:93:bc:c5:2c:7e:fc:f5:1a:57:f5:39:06:b0:86:
be:ac:8e:32:ca:13:5c:16:b0:99:0a:89:d8:e2:14:
97:2e:4e:cb:0d:1e:d8:3a:7a:c5:36:1e:c1:17:12:
93:48:7b:3f:01:26:80:27:18:14:73:ed:c3:ba:42:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B8:3B:1F:B5:78:20:73:A6:73:CE:70:98:B4:A7:6A:21:1A:A6:E0
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x7g7H7V4IHOmc85wmLSnaiEapuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.86.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:35:9c:31:0b:c7:d6:1e:f7:cd:b3:0d:7d:d1:2e:61:3a:36:
29:2a:56:5b:8f:aa:62:c6:ba:af:f6:27:7f:59:35:aa:05:44:
37:f9:d5:de:ce:64:a2:6c:94:e5:47:6f:1d:bf:29:31:e2:c5:
6a:e5:70:bd:ef:5c:ab:36:26:92:a6:1c:3c:05:aa:4a:8b:cd:
cc:ba:5d:ce:d1:31:4f:2e:1f:04:a6:8c:02:c1:fe:a6:c6:fb:
67:a9:36:47:5b:4c:1c:b4:5a:07:9d:f7:24:e7:d6:9a:f5:3d:
27:4a:0e:24:ec:ae:c1:a1:c0:97:9d:ad:98:98:11:39:77:60:
c7:a4:b8:ce:d6:7c:61:dc:14:98:85:46:b0:e9:25:c3:e7:b3:
c1:cc:10:c7:4c:6c:11:df:f7:92:b9:b4:a7:43:0e:9a:de:89:
a5:69:0f:3f:cb:d5:e0:bb:25:dc:90:c6:28:a1:a2:a5:2b:ed:
82:dd:e0:e4:be:f6:08:e9:87:88:09:a7:c4:4a:07:19:f6:f3:
35:67:7c:ee:99:30:b4:8a:7b:90:6c:96:14:e2:d7:0c:54:6a:
cc:a4:fa:50:32:66:b6:32:c6:7d:e5:cd:0b:81:48:fd:ca:61:
c1:27:a5:6f:4e:7e:38:09:12:aa:7a:f6:7a:91:cb:66:47:ca:
58:4c:9a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:16 2024 by rpki-client on console-ams.rpki-client.org