Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/pQzdhVKFmzw5Ff-IwQe6f4oJjbU.roa
File: pQzdhVKFmzw5Ff-IwQe6f4oJjbU.roa (raw, json)
Hash identifier: 9FqKAnn6lTbVPZl3tFM6UZFZSPuQ13ePhggIEkhVq00=
Subject key identifier: A5:0C:DD:85:52:85:9B:3C:39:15:FF:88:C1:07:BA:7F:8A:09:8D:B5
Certificate issuer: /CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Certificate serial: 018CC50105AE44CCBF17D79DB259D7CA8EAB
Authority key identifier: EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/pQzdhVKFmzw5Ff-IwQe6f4oJjbU.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24676
IP address blocks: 95.169.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:05:ae:44:cc:bf:17:d7:9d:b2:59:d7:ca:8e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a50cdd8552859b3c3915ff88c107ba7f8a098db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:65:37:cd:b7:6e:f7:11:5b:be:b6:63:fc:
79:32:13:e0:33:db:b0:ca:60:80:6b:37:4c:03:b2:
53:ef:1c:7b:24:7d:19:7d:b9:12:27:4d:63:42:fa:
e1:df:04:fa:f0:0a:c6:42:fb:e3:cd:c6:ac:25:d0:
40:68:ee:db:d0:5f:5d:64:39:3e:ac:fa:1e:66:82:
cc:cc:33:35:b2:aa:5e:11:8b:83:44:f8:a5:a2:07:
9d:7e:07:94:38:01:1c:3b:b0:f9:62:96:c1:ea:61:
42:06:8c:eb:24:a0:f0:c9:26:ca:c9:36:21:97:d0:
64:f0:02:22:27:fd:28:2b:a1:b2:7e:7e:93:57:0f:
3c:aa:f6:f2:2b:a6:91:d4:54:a5:27:c0:ff:60:22:
b5:32:ef:83:aa:ef:3d:46:dd:c5:7d:fe:c5:d7:ba:
2d:e0:af:13:00:91:0e:c5:3d:b4:ca:a8:2c:36:7e:
5b:b3:12:01:c6:28:43:29:c7:10:b8:13:37:a0:35:
5a:ec:7d:68:0d:81:34:0b:08:8a:2e:6b:20:9a:19:
8f:8a:03:b2:03:6c:ec:f5:33:06:d9:03:22:1d:74:
b1:f9:9e:2a:8f:a9:e4:9e:93:21:7b:bd:ad:d7:ae:
9c:a2:6e:42:e2:08:35:bb:dd:e2:c9:5d:88:ed:27:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0C:DD:85:52:85:9B:3C:39:15:FF:88:C1:07:BA:7F:8A:09:8D:B5
X509v3 Authority Key Identifier:
keyid:EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/pQzdhVKFmzw5Ff-IwQe6f4oJjbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.180.0/24
Signature Algorithm: sha256WithRSAEncryption
86:71:a0:c0:2b:d3:30:ed:52:8f:01:5b:3d:03:58:41:83:6f:
ba:0b:7d:8b:53:ee:20:38:12:54:e3:10:f4:4f:24:70:b1:f9:
59:f9:fe:93:1e:63:8c:e5:57:7b:e7:9e:3a:4a:34:0b:d0:0b:
d9:6a:23:97:83:14:94:0f:fa:d7:1e:ce:87:28:38:4a:96:ef:
c0:d6:a3:8b:e4:52:2e:15:7c:e9:df:fc:91:1e:05:13:c1:1f:
6c:79:5c:54:05:5c:2e:27:6c:5e:5d:8b:92:9b:ca:dd:0e:f6:
d7:07:30:54:e0:87:22:16:ce:fc:03:32:2d:0f:6a:54:5f:32:
47:49:43:90:71:43:2e:f1:5b:bd:0b:86:9a:4a:57:14:2e:2f:
24:66:77:e1:3c:61:46:3d:e1:c7:00:da:e7:7f:4c:51:ac:b8:
6e:e7:2b:13:fc:a1:25:d7:f3:83:89:0c:cc:3e:27:7e:da:86:
71:4b:ef:d8:5d:ec:2c:88:30:05:be:80:33:da:bc:4a:c4:26:
6c:ea:95:64:ab:53:92:6e:da:5a:02:3b:e1:26:cf:17:41:38:
9e:e8:a0:14:53:e8:8d:40:bd:10:41:2a:f7:8d:e6:11:39:0f:
4c:fb:e8:48:97:57:f8:8a:eb:54:5b:36:f6:3b:9d:8b:4c:41:
1c:83:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 00:55:05 2024 by rpki-client on console-ams.rpki-client.org