Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/pIis_oL2FEP1jV49Jve2sYgRvlU.roa
File: pIis_oL2FEP1jV49Jve2sYgRvlU.roa (raw, json)
Hash identifier: XwhcPWwvEUvQIaP24KxziL6yrRqc7RRWbW14un3nHHY=
Subject key identifier: A4:88:AC:FE:82:F6:14:43:F5:8D:5E:3D:26:F7:B6:B1:88:11:BE:55
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018FAA2379E3BA1D15612D6D1E7344CE679E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/pIis_oL2FEP1jV49Jve2sYgRvlU.roa
Signing time: Fri 24 May 2024 10:26:42 +0000
ROA not before: Fri 24 May 2024 10:26:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43149
IP address blocks: 195.64.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:23:79:e3:ba:1d:15:61:2d:6d:1e:73:44:ce:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 24 10:26:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a488acfe82f61443f58d5e3d26f7b6b18811be55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:28:f2:4b:75:ca:e8:df:6a:2d:2c:d6:04:
12:2e:b1:04:46:03:df:37:54:9d:69:a8:f4:63:ea:
cf:e9:5a:fb:db:54:72:58:b8:1f:56:b7:c1:26:b1:
05:a4:26:5d:fd:28:94:7b:1b:44:ea:18:ad:0f:9e:
26:84:b3:6c:4d:27:c0:e2:7f:99:75:5c:de:ef:f9:
4d:15:b8:0b:2e:ab:0e:4d:35:74:09:65:b2:d2:37:
fe:10:12:2b:77:22:fd:91:f3:a5:13:fb:c1:dd:a6:
fd:82:10:c9:04:46:69:91:09:d8:e3:9b:f9:2b:00:
b9:68:df:62:97:b4:46:4e:6a:9c:08:35:47:ee:cf:
62:31:c5:a5:fd:19:e4:7d:6f:af:77:be:5a:0a:90:
2c:6a:82:0d:be:d5:1a:88:05:86:1c:08:10:a7:9b:
eb:5b:ae:87:05:d8:23:52:69:c7:bd:eb:ff:5e:c3:
49:ae:9a:38:46:bf:5a:ae:81:a2:fa:c8:94:1a:95:
78:31:b2:3f:66:7d:aa:a3:c4:ba:5c:be:57:a8:67:
89:e8:13:c0:12:bd:7d:38:ec:1d:80:70:51:2a:f8:
e7:02:e2:00:88:d1:d8:f2:e3:f1:25:85:04:38:2d:
34:8b:20:9e:3c:92:21:5d:12:ab:ee:b1:1e:0d:b5:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:AC:FE:82:F6:14:43:F5:8D:5E:3D:26:F7:B6:B1:88:11:BE:55
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/pIis_oL2FEP1jV49Jve2sYgRvlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.105.0/24
Signature Algorithm: sha256WithRSAEncryption
57:20:1d:e2:82:75:2d:8e:fc:df:01:20:1c:85:17:a9:33:34:
1f:3b:42:8b:29:13:01:fb:f3:6e:ba:c4:a7:43:04:ba:c1:46:
17:a4:1f:a0:9c:a2:37:af:ed:f2:d3:b4:83:73:14:13:3f:c1:
72:83:10:0e:5c:e6:c0:3e:f7:08:2e:b5:59:78:ef:28:4b:dc:
5f:2a:54:38:ca:9a:3f:f4:4e:07:ff:1c:15:8f:3f:13:c3:c1:
4c:d2:02:4e:b3:df:35:47:9b:f1:58:80:07:5d:ae:4c:a1:b5:
47:b2:93:6b:e6:51:d9:53:e2:c4:47:61:08:53:14:ad:91:74:
6d:bf:2f:b8:97:e0:d8:f6:5a:a2:3d:3a:d4:c1:b1:a6:66:a3:
d9:01:1b:89:66:d4:eb:f3:15:dc:6f:18:40:bd:f5:5f:40:27:
d5:9c:37:f2:86:df:5b:3b:9c:b9:fe:68:4f:e6:80:83:a5:d4:
a1:84:c2:6a:63:95:92:00:10:f7:bf:33:82:a8:ca:a4:cc:83:
09:cd:1b:72:a0:c5:3d:02:a4:6d:67:e2:98:0e:8e:8e:18:20:
a5:c0:d8:1a:91:61:0a:4e:b7:33:05:ce:34:47:c9:8f:b1:c7:
0e:e8:8c:97:6e:a5:47:0e:f8:ca:93:07:c6:b7:67:1a:55:f4:
0f:1d:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:54:35 2024 by rpki-client on console-ams.rpki-client.org