Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/sjW5Qs5Viu3LkVPFU2rq5i8vDj8.roa
File: sjW5Qs5Viu3LkVPFU2rq5i8vDj8.roa (raw, json)
Hash identifier: zTdlxuOklksA5VRAQhkPrZQzyQYFV4gTPnpH/ZjzUIA=
Subject key identifier: B2:35:B9:42:CE:55:8A:ED:CB:91:53:C5:53:6A:EA:E6:2F:2F:0E:3F
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 018CC801A76FD636501D9E6F267149297FC4
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/sjW5Qs5Viu3LkVPFU2rq5i8vDj8.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9127
IP address blocks: 195.182.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a7:6f:d6:36:50:1d:9e:6f:26:71:49:29:7f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b235b942ce558aedcb9153c5536aeae62f2f0e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:e9:76:32:70:de:69:ab:3c:c8:3d:00:9c:
70:ec:3d:34:40:dd:9e:54:c6:46:13:9e:20:9e:2e:
b9:44:4c:98:02:3a:8f:d6:2e:3a:df:e1:c6:94:55:
ba:c8:84:db:80:62:64:be:70:50:ac:fa:55:f6:63:
c7:6c:2c:67:9e:ff:ca:a2:64:bd:63:0a:5e:2b:d6:
69:18:8c:e7:f5:fd:35:51:d4:a0:3a:c1:00:63:38:
42:7c:e2:08:49:a7:d7:4d:9b:dc:43:87:c6:53:50:
87:27:4e:53:90:52:ca:48:9c:dc:d8:24:0b:8f:2c:
38:9b:70:bb:1e:5f:fd:bc:80:b2:b4:99:fd:42:68:
ee:db:5d:5e:25:ca:72:06:af:7c:f9:84:49:08:86:
85:9d:fd:5a:26:d5:7b:c9:41:b3:e0:9e:a0:b3:e1:
3c:f6:7d:7f:9d:ca:72:40:dc:ed:64:62:9d:1d:25:
35:6b:1b:f2:29:51:b0:99:cf:ce:1c:6b:ab:18:ff:
07:08:58:51:0a:a8:e4:2a:f9:bb:4a:66:01:60:ca:
e0:ec:81:4b:95:bf:e7:5e:33:fe:f2:45:4a:a8:cc:
fc:81:72:61:61:04:a2:af:d7:7c:44:d4:29:42:03:
c9:5c:aa:32:6b:59:11:2d:4a:1b:6e:0d:47:e9:91:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:35:B9:42:CE:55:8A:ED:CB:91:53:C5:53:6A:EA:E6:2F:2F:0E:3F
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/sjW5Qs5Viu3LkVPFU2rq5i8vDj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.41.0/24
Signature Algorithm: sha256WithRSAEncryption
30:89:c8:ec:c6:4b:9f:1a:36:d2:9f:86:c1:a6:d8:e4:02:41:
5d:35:08:69:76:a6:db:07:d3:c8:66:7d:3d:66:88:c1:54:ab:
25:d6:21:e1:f7:35:0f:dc:c4:b9:a5:8d:df:5f:00:25:b1:80:
d5:7b:56:b0:16:7e:79:31:e5:5a:cf:bf:b2:29:bd:1d:5c:1d:
a1:1f:84:a7:b3:f3:b8:32:56:30:e3:d7:23:7d:cc:cc:0f:d5:
2f:c6:21:3d:d3:92:04:58:66:cc:47:f6:56:ef:b7:04:ac:f2:
4a:70:d7:76:f5:7c:83:42:08:44:04:c9:ac:8b:f2:f9:84:2e:
47:15:c0:cc:9f:35:6a:3e:82:fe:ed:ca:8d:0c:44:60:fd:8e:
2b:ac:1a:52:c2:05:ef:0c:3c:ea:ec:7a:60:83:1e:7b:eb:6f:
9f:84:76:54:93:6a:84:31:15:2b:30:f0:fd:f5:88:01:12:3c:
91:ff:04:b8:95:c0:fd:95:a6:a5:16:23:e5:00:f2:f3:4e:58:
ba:ce:a6:78:17:53:da:d1:32:0f:a3:27:1d:7a:8b:c9:4f:d4:
85:90:f6:55:3d:14:71:f7:cd:16:1e:24:ba:bc:29:56:4f:54:
44:2b:69:e7:e2:8b:6b:b6:ee:35:09:ed:52:9c:3f:5c:9f:33:
90:42:e4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:26 2024 by rpki-client on console-ams.rpki-client.org