Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ermYDhObhVxTq8rI3__T6aVxmFA.roa
File: ermYDhObhVxTq8rI3__T6aVxmFA.roa (raw, json)
Hash identifier: qKkolTrdgCy/qrhhKhYxwbkMGMWMZdcFNCBMghwkvLU=
Subject key identifier: 7A:B9:98:0E:13:9B:85:5C:53:AB:CA:C8:DF:FF:D3:E9:A5:71:98:50
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018CC794573A1AD4C95436EEBE1813CE648A
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ermYDhObhVxTq8rI3__T6aVxmFA.roa
Signing time: Tue 02 Jan 2024 00:30:36 +0000
ROA not before: Tue 02 Jan 2024 00:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202735
IP address blocks: 195.146.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:57:3a:1a:d4:c9:54:36:ee:be:18:13:ce:64:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 00:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ab9980e139b855c53abcac8dfffd3e9a5719850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9b:b1:9e:18:20:44:90:46:cd:6e:82:85:f8:
60:32:1c:56:b0:9b:7e:53:af:0b:a0:4f:ed:3b:7c:
74:d5:ef:1b:23:b1:97:41:31:a7:2f:8e:82:9d:75:
db:c9:34:1c:9c:0d:0c:a8:43:90:bd:53:a7:7f:64:
a2:c4:b7:20:a9:3e:ed:ea:a0:68:c1:13:06:2b:4c:
bd:5c:fc:89:c9:ca:b7:8f:05:65:e8:7c:ff:4b:70:
12:3d:a7:a2:bd:5d:48:ec:cf:45:bc:da:32:92:5b:
56:f7:12:21:51:63:1e:3d:2d:de:99:3d:b9:9f:cb:
7e:b2:99:be:b4:89:c8:e4:59:b0:37:f9:22:62:47:
1c:4d:44:e7:c5:94:c9:7b:31:e4:ee:97:78:96:5b:
28:52:c4:62:7e:6c:42:d3:f9:fe:d2:7e:79:60:57:
43:e2:0d:81:d7:75:9b:35:89:a3:af:48:34:55:85:
8e:80:5f:7c:33:7e:7b:28:92:92:71:e1:6c:6e:74:
f4:79:55:7a:56:f2:75:5e:3b:aa:4d:b4:f7:df:35:
20:c0:65:e1:5e:83:36:e7:8c:1c:60:59:49:3f:c3:
80:43:ad:33:49:fa:81:18:31:8e:f4:61:a6:7b:af:
9c:cf:e4:29:83:71:a6:52:a5:5f:04:ae:1f:4a:14:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:98:0E:13:9B:85:5C:53:AB:CA:C8:DF:FF:D3:E9:A5:71:98:50
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/ermYDhObhVxTq8rI3__T6aVxmFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.60.0/24
Signature Algorithm: sha256WithRSAEncryption
53:91:af:ca:3c:8e:86:6a:8b:3a:1c:cd:f0:b3:4d:f3:93:d9:
c7:f1:48:2f:ae:b5:97:85:48:61:60:0a:31:19:e0:60:2e:b6:
f2:59:c5:b7:ee:9e:1b:79:51:56:29:2b:45:76:55:60:a7:84:
85:ba:35:74:3e:0f:bf:1f:79:ef:c2:f4:4d:da:3c:7e:3b:84:
f4:bc:b3:42:d1:9d:9c:c7:39:7c:d3:34:5d:32:b0:9d:af:82:
a6:7a:7c:1f:a2:43:55:bb:db:21:4e:22:10:1b:07:d7:b4:bf:
1b:82:a1:88:92:88:25:56:4e:db:41:8d:fe:41:9f:82:fb:b3:
dc:ba:8c:fb:58:27:9f:d6:79:9d:95:62:18:8a:24:2c:68:5c:
f9:bc:96:36:93:1b:30:e6:eb:39:02:41:da:e3:3e:c3:e8:6a:
b7:45:e6:01:53:1f:13:ee:0c:cd:f6:99:5a:03:ff:25:6c:d1:
45:54:be:30:32:73:40:07:db:3f:6e:b2:67:e3:f4:07:b6:ce:
98:f6:7d:05:80:10:da:e3:40:e0:f9:39:53:61:42:e0:69:ef:
0b:c8:fd:7a:a3:c9:d1:9f:2b:a8:9b:58:6f:db:67:6b:ff:df:
61:c1:1f:cb:2c:1c:6b:9a:dc:48:32:9c:c6:a9:07:57:52:1c:
ff:75:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:53:57 2024 by rpki-client on console-fra.rpki-client.org