Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/rWRYxm_G5BxWQ0uGrqil3B1_CeU.roa
File: rWRYxm_G5BxWQ0uGrqil3B1_CeU.roa (raw, json)
Hash identifier: tjCSK37uqLsyNibvDIOYmAdzQ6MTUfBHFQH7pog1lPg=
Subject key identifier: AD:64:58:C6:6F:C6:E4:1C:56:43:4B:86:AE:A8:A5:DC:1D:7F:09:E5
Certificate issuer: /CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Certificate serial: 018CC64AE8B0220E99781D45DE3CE84D5A5C
Authority key identifier: A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/rWRYxm_G5BxWQ0uGrqil3B1_CeU.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207906
IP address blocks: 195.189.184.0/23 maxlen: 24
195.189.190.0/23 maxlen: 24
2a0f:54c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e8:b0:22:0e:99:78:1d:45:de:3c:e8:4d:5a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad6458c66fc6e41c56434b86aea8a5dc1d7f09e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:d4:08:e3:fd:e9:eb:0f:d0:f4:4a:7c:b5:
4d:17:b6:bf:06:8a:5a:6c:f5:f8:a3:76:fc:43:96:
55:df:f9:b9:ab:70:42:9c:0e:b1:3f:41:13:27:a2:
46:3c:e4:f7:73:40:7d:6e:f6:1e:a3:18:c8:fd:9b:
05:dd:1a:10:da:91:c9:f6:9f:b9:3b:e9:cf:eb:07:
7a:95:cd:71:4d:90:01:89:48:f5:d0:d8:e6:e5:3a:
4d:c1:ca:bb:9c:b7:c0:4a:68:89:08:c8:d0:46:a9:
e0:75:b5:0a:94:a9:61:cb:f0:49:f5:a5:ff:61:3e:
f9:2e:ce:a3:bd:90:81:c7:e9:56:17:0b:2c:8e:53:
9d:32:38:6a:e8:ed:aa:0a:9e:a9:a5:40:a0:8f:39:
3c:f3:b9:1e:db:52:af:66:ed:bc:39:08:15:56:6c:
2a:a0:87:4a:92:68:c2:c3:b7:e2:5b:45:e6:0f:28:
83:d2:9c:51:eb:7e:9f:55:4d:58:1b:41:32:d3:ed:
eb:93:40:ca:4d:4d:15:0c:6d:88:fb:91:3a:53:bb:
01:52:03:d0:04:a8:51:45:14:58:c4:ee:36:ff:e5:
46:e9:fe:e5:a0:a0:f4:ca:c7:df:41:b5:da:5b:db:
4f:9c:50:d3:5e:42:eb:7d:84:ad:fd:ec:5a:b1:0d:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:64:58:C6:6F:C6:E4:1C:56:43:4B:86:AE:A8:A5:DC:1D:7F:09:E5
X509v3 Authority Key Identifier:
keyid:A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/rWRYxm_G5BxWQ0uGrqil3B1_CeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.184.0/23
195.189.190.0/23
IPv6:
2a0f:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:14:66:ea:98:a1:af:0f:a4:fa:13:75:58:08:e6:e0:d3:3e:
c3:68:b9:e1:41:b1:26:53:00:ba:33:83:28:47:6e:ba:72:0b:
5a:32:bb:94:1b:b2:6b:1e:a3:8e:f5:35:c6:74:cc:68:14:8a:
7d:f8:6a:9b:74:34:87:ba:1a:30:3c:b2:3d:00:84:36:9d:8b:
d2:96:16:62:a2:01:4e:e0:29:4d:3e:7b:70:43:4e:48:ca:9f:
41:88:d9:d7:ab:03:0b:a2:2e:41:08:15:a0:ef:fb:ad:5b:0c:
36:eb:fc:51:f7:0e:82:b9:19:5b:9e:d2:af:c3:79:09:c7:ab:
e2:ef:34:af:c0:4a:fc:1f:43:20:0e:ad:0d:d3:4b:78:71:0c:
b0:b6:1f:69:0f:e6:06:f6:8b:7e:26:63:a9:79:9e:00:9b:23:
45:78:18:77:00:ec:c9:5f:62:89:90:d0:08:a3:db:e9:71:4d:
75:17:86:b4:2d:37:ee:e5:33:c6:a3:ee:07:29:3e:c1:0d:8d:
81:20:5d:cd:d7:25:a3:9b:a2:f3:83:c1:69:ea:27:d8:2e:2f:
a3:81:67:13:d5:da:81:a0:97:db:33:ee:81:19:fc:64:1f:de:
43:5f:44:fd:5c:9d:b2:6a:a7:2c:4f:ec:fc:d0:f4:98:06:9b:
1b:19:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:12:08 2024 by rpki-client on console-fra.rpki-client.org