Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/TSFhW3P2sk4rq8BMclJGfwcfvpU.roa
File: TSFhW3P2sk4rq8BMclJGfwcfvpU.roa (raw, json)
Hash identifier: AtNeNLgwio5anQrCdGYK4mrOHeMW5e4pL5qWZP84knI=
Subject key identifier: 4D:21:61:5B:73:F6:B2:4E:2B:AB:C0:4C:72:52:46:7F:07:1F:BE:95
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E9653F9EC43372CAEFFC22EFB6918
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/TSFhW3P2sk4rq8BMclJGfwcfvpU.roa
Signing time: Mon 01 Jan 2024 14:30:08 +0000
ROA not before: Mon 01 Jan 2024 14:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200006
IP address blocks: 195.214.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:96:53:f9:ec:43:37:2c:ae:ff:c2:2e:fb:69:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d21615b73f6b24e2babc04c7252467f071fbe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:0d:05:68:26:36:75:89:5c:ce:68:04:ce:
57:a3:a5:be:5a:44:cb:81:29:d5:03:61:91:89:ed:
db:13:98:dd:1e:3c:72:0f:a7:bc:e4:76:c3:20:c7:
2e:af:4e:85:b4:7a:b0:5a:a0:b9:c1:d3:0b:08:b3:
0a:44:ff:ed:3b:0b:c4:fe:74:9b:9f:c3:bd:dc:d9:
76:a9:07:b7:60:35:ec:30:b9:94:15:8c:9c:ca:02:
f3:54:b5:af:0a:77:63:db:f3:1d:3c:50:bb:c4:98:
20:2b:3c:32:cf:4a:14:eb:63:66:8f:7d:9b:b8:2a:
10:33:b1:b8:75:0a:ee:08:15:cd:9f:fa:a6:24:ca:
c5:d4:41:f3:38:33:a4:55:45:cc:40:3a:ad:b2:7d:
a9:37:d9:d0:2a:bd:c0:af:f3:ad:b7:2e:a1:cb:85:
41:df:32:d2:9d:2a:26:f1:c5:cc:51:8e:86:13:8e:
73:56:c1:51:a2:e7:f4:2b:ff:cc:f5:78:44:16:f3:
4c:f2:8b:f8:86:62:4d:46:cf:4d:2f:7a:ab:a6:e9:
9f:bf:e7:7b:89:84:f0:49:8f:b4:1a:af:d1:21:0d:
85:e7:a3:dd:72:52:4c:b5:02:d5:7c:6d:4d:19:6f:
fe:7a:5a:58:82:fc:a8:2c:1a:8b:d9:e8:20:0c:fc:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:21:61:5B:73:F6:B2:4E:2B:AB:C0:4C:72:52:46:7F:07:1F:BE:95
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/TSFhW3P2sk4rq8BMclJGfwcfvpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.152.0/24
Signature Algorithm: sha256WithRSAEncryption
97:90:1f:af:0e:f9:30:35:03:f6:5f:96:9e:2d:c4:3f:06:41:
4d:7e:c2:7c:cd:8b:f2:c9:01:47:67:db:54:2a:91:53:7e:55:
ca:60:96:94:a4:4b:83:f0:79:4e:03:18:c9:d9:f5:bb:58:1b:
f1:20:58:61:70:71:63:4a:56:55:0f:dc:53:4e:49:48:02:ff:
7b:e0:64:61:9a:8f:65:cb:34:01:f7:44:78:9d:bb:fb:be:64:
09:1c:25:fd:a2:55:e8:96:09:c8:0f:2c:b8:f0:29:05:5f:f9:
f6:b1:fb:90:4e:72:99:8a:10:52:20:3e:0e:ce:81:2f:9a:32:
0b:fd:da:f5:02:98:a4:53:79:86:c4:fc:03:e3:da:90:c3:7c:
ad:eb:ae:36:43:2b:2d:45:89:9e:b6:92:2f:dd:dc:fa:5a:82:
c3:77:c8:ff:31:ef:aa:1d:f1:1f:ec:a7:09:9d:fe:b7:11:60:
10:96:31:33:80:ca:7b:c0:02:4c:d6:3b:8a:1a:28:86:9e:3c:
ae:43:58:1f:7a:93:8c:cb:a0:7d:74:51:a7:45:bf:e4:b6:4f:
cc:ad:c4:c9:dd:6f:ae:85:09:81:fa:00:84:c8:8c:a0:bd:8a:
41:64:58:27:22:da:02:6a:9d:64:0a:37:89:31:ea:bb:f9:2e:
86:19:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:04:34 2024 by rpki-client on console-fra.rpki-client.org