Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/wN-aWnBfOgyFoU1BJ3JZ5ktHvEU.roa
File: wN-aWnBfOgyFoU1BJ3JZ5ktHvEU.roa (raw, json)
Hash identifier: J+CNTv35bAtzQQX7fD7iTBUVuqCPtQKllVQ5fl4bDaE=
Subject key identifier: C0:DF:9A:5A:70:5F:3A:0C:85:A1:4D:41:27:72:59:E6:4B:47:BC:45
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 0190108167549DEAA5D866577D3E65CDB909
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/wN-aWnBfOgyFoU1BJ3JZ5ktHvEU.roa
Signing time: Thu 13 Jun 2024 07:30:34 +0000
ROA not before: Thu 13 Jun 2024 07:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198504
IP address blocks: 195.94.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:81:67:54:9d:ea:a5:d8:66:57:7d:3e:65:cd:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jun 13 07:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0df9a5a705f3a0c85a14d41277259e64b47bc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:8c:66:12:87:be:d4:d3:c5:24:20:d6:3f:
1c:83:f7:be:81:d5:f6:db:27:cf:a2:8f:92:45:07:
b7:c0:6c:32:c1:fc:8c:be:1b:d7:00:2d:ce:c0:ae:
13:a9:9c:4d:9a:68:5e:bc:45:dc:d3:0e:3d:9a:50:
b5:33:59:14:fe:9a:e4:0b:7d:58:5f:fd:f2:ab:c0:
1c:58:e0:02:76:63:7d:3b:56:5d:dc:c2:d9:25:a1:
f7:aa:2c:3c:38:73:6d:a0:7d:6d:95:8a:35:b5:d3:
a7:b5:0f:44:c4:8e:24:7c:5a:e4:07:56:97:f6:fe:
65:3c:59:7b:1f:9d:20:56:fa:8b:4d:af:8c:4e:61:
c0:a1:40:f0:da:1b:c2:a1:ff:d3:a9:de:27:99:61:
ec:a5:ec:51:fe:83:2e:1c:df:3b:74:29:87:26:b3:
b9:d2:08:f6:60:47:ea:0f:bf:cc:30:50:ee:f7:b0:
b5:dc:03:04:52:02:09:50:ca:ba:aa:de:18:ae:27:
13:73:36:a1:d8:96:b8:58:2a:9c:81:0d:bb:28:3b:
a1:c4:e4:4d:9c:54:50:16:b3:e8:e6:f4:58:d4:e9:
95:22:f8:96:ac:6c:d1:f4:6f:aa:7d:a3:da:3b:7a:
74:48:2e:cd:ef:8e:23:2f:a3:e2:9d:c4:04:b7:34:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:9A:5A:70:5F:3A:0C:85:A1:4D:41:27:72:59:E6:4B:47:BC:45
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/wN-aWnBfOgyFoU1BJ3JZ5ktHvEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.94.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:63:24:63:9d:32:2f:6d:cc:23:ef:01:07:f0:97:ec:2e:fe:
49:e2:7d:4e:31:96:ca:1d:94:9c:1d:10:3a:0e:66:ae:10:59:
4b:84:0d:74:54:be:c1:98:d3:1d:6c:f7:f3:fd:50:12:a4:14:
f1:4b:e2:9a:54:dd:8c:de:8f:44:9a:0a:34:df:13:52:19:ea:
34:22:ff:15:34:b9:c5:a3:c5:64:00:75:81:0d:3c:5d:c9:e8:
55:e3:72:b1:fe:35:74:93:26:7e:ff:02:27:49:07:db:3f:2c:
91:1d:7a:cc:91:bd:92:c5:a1:01:e2:27:61:4b:68:0b:91:45:
5f:66:18:ad:6c:cc:6d:72:14:0e:df:2f:26:f8:22:26:09:c3:
8a:46:08:12:28:d8:d3:c3:1d:19:fb:a6:86:ab:77:f6:b1:45:
64:7c:91:d7:d1:10:15:dd:f3:18:20:84:77:d1:5e:82:7b:84:
8c:a1:4e:68:ec:a8:c4:64:4c:bd:d6:98:1b:84:ac:1b:36:a6:
73:2f:95:56:ae:1f:db:dd:63:c4:86:92:d8:b5:4c:e5:ef:a5:
96:33:b8:fe:39:46:fe:1f:73:6c:99:07:4f:2e:14:9c:d2:f5:
90:e1:ab:56:25:28:6b:9c:84:5d:ba:e6:25:b8:11:c5:18:21:
2b:f8:b3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:41:44 2024 by rpki-client on console-ams.rpki-client.org