Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/NDxYYoakBcWMG1TBHTpLsqlJ-aQ.roa
File: NDxYYoakBcWMG1TBHTpLsqlJ-aQ.roa (raw, json)
Hash identifier: 5S7SE2IgABik4xbJx+wbL4Zmu5pVYhvr+iUx9b82Ghs=
Subject key identifier: 34:3C:58:62:86:A4:05:C5:8C:1B:54:C1:1D:3A:4B:B2:A9:49:F9:A4
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 018CC42452980A9EBA812916F241CF7E3D84
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/NDxYYoakBcWMG1TBHTpLsqlJ-aQ.roa
Signing time: Mon 01 Jan 2024 08:29:23 +0000
ROA not before: Mon 01 Jan 2024 08:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51619
IP address blocks: 195.210.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:52:98:0a:9e:ba:81:29:16:f2:41:cf:7e:3d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Jan 1 08:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=343c586286a405c58c1b54c11d3a4bb2a949f9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:8b:bc:63:23:8c:fe:24:a0:f1:68:6a:b0:
80:d8:92:66:ee:07:6e:86:39:a3:d2:24:2f:07:7e:
e0:ec:86:9f:88:96:ce:11:fa:a9:b2:7b:66:77:3f:
89:2b:f8:3f:64:65:6b:23:f9:e8:23:4e:7c:bb:a8:
6b:ce:c1:16:d8:2e:f0:0b:42:46:4a:e1:48:e4:1d:
ae:fb:ac:a5:2b:83:cd:9f:3a:1e:20:f5:5c:ac:7b:
35:41:7c:93:78:3e:77:98:74:ca:42:e2:65:ab:50:
6f:ef:b0:b8:d6:97:ab:7d:3f:5a:c1:31:d2:cb:c1:
8e:58:9f:68:e1:f7:66:73:8a:e6:a2:37:96:5a:8c:
33:1c:08:04:11:78:15:70:1e:69:e1:c9:c2:47:a5:
53:24:47:81:57:ef:ae:8f:5c:fb:b6:4f:13:e6:5d:
99:9c:1c:11:d7:64:a6:64:a5:a2:82:ab:d7:1c:38:
15:a4:6f:f0:5c:fd:3a:f7:14:a8:fc:9f:32:35:e6:
02:60:87:7a:1f:4c:ae:20:ed:f4:f9:a3:1e:ee:b9:
f4:27:10:fc:74:89:a4:70:30:6d:c3:c9:d4:f9:fd:
4e:1d:78:2d:64:f5:94:c9:41:7a:50:6f:db:49:4f:
e8:91:20:33:e0:4a:12:8d:1d:fb:79:48:bd:18:1b:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3C:58:62:86:A4:05:C5:8C:1B:54:C1:1D:3A:4B:B2:A9:49:F9:A4
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/NDxYYoakBcWMG1TBHTpLsqlJ-aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.60.0/23
Signature Algorithm: sha256WithRSAEncryption
92:11:01:7c:7d:db:9d:7d:7d:83:00:e9:0c:a9:07:3f:5b:cc:
22:4e:a7:67:af:a4:06:d8:08:d1:a0:4b:4c:bb:5a:27:19:8b:
8f:a3:f9:96:40:22:56:f7:17:30:e4:ca:6e:da:42:65:a7:83:
7c:24:b2:d5:6b:7d:74:cd:54:b6:11:66:83:bc:72:14:41:a7:
9c:e1:78:5e:99:59:f8:2d:c5:25:3f:2e:00:2d:18:19:12:e3:
79:01:a9:8f:cb:0c:b4:d1:37:c0:d8:34:01:e1:b2:91:ec:af:
8c:e4:63:87:46:13:12:38:d0:51:9f:d2:a7:d9:4e:ac:e9:c4:
23:d3:be:50:ba:4a:d7:6a:8a:89:11:65:89:c3:d5:5b:24:0f:
98:6b:b3:07:4d:0f:03:0c:4a:c3:d5:7e:db:b9:63:2d:ba:8b:
3f:59:55:6b:6f:be:4e:b4:26:6f:74:c0:49:44:e7:3c:ba:e7:
dd:90:ff:4b:5a:3e:98:bf:a2:59:1f:0e:36:31:3a:d8:d7:ce:
d2:8c:64:05:fc:3a:57:58:02:ef:08:52:48:9e:81:88:79:12:
1b:97:13:e3:58:e9:7d:46:51:68:0a:b3:36:78:94:b6:83:d7:
ca:ef:0c:9c:6f:9e:69:e3:f5:26:bf:bb:16:68:ff:b8:d1:3e:
70:b4:c4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:18:24 2024 by rpki-client on console-ams.rpki-client.org