Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/1BeoqBw7D5I9p9Pegs5nZQONow8.roa
File: 1BeoqBw7D5I9p9Pegs5nZQONow8.roa (raw, json)
Hash identifier: sXoXEIaBr2aLlplwmiokJ7+UmFxiLYR5j1Qny4u0zWQ=
Subject key identifier: D4:17:A8:A8:1C:3B:0F:92:3D:A7:D3:DE:82:CE:67:65:03:8D:A3:0F
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 018CC6B8E99549A8362D2C777BD6834599EA
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/1BeoqBw7D5I9p9Pegs5nZQONow8.roa
Signing time: Mon 01 Jan 2024 20:30:56 +0000
ROA not before: Mon 01 Jan 2024 20:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30734
IP address blocks: 195.95.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e9:95:49:a8:36:2d:2c:77:7b:d6:83:45:99:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Jan 1 20:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d417a8a81c3b0f923da7d3de82ce6765038da30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:84:16:b3:40:a0:3b:03:2c:06:2d:6a:cd:
e5:6a:23:92:a5:8c:a4:42:31:43:e2:37:d4:01:bd:
49:ac:9a:ed:20:12:b2:c1:5e:e8:4a:45:92:2c:ec:
9e:06:8c:5c:01:60:ab:28:38:58:0e:51:46:18:b5:
9e:b8:61:32:74:37:97:62:41:05:0c:c9:ac:63:08:
6a:ea:cd:a8:d2:f4:43:ae:0b:2c:9a:1a:81:b0:ff:
f7:8c:cf:27:44:6f:ca:b0:af:7c:6f:a6:41:97:cf:
0f:07:fb:13:95:70:f3:d0:47:39:58:ec:15:9c:b8:
d0:1a:dd:4f:d2:25:bc:2e:17:f9:d6:de:30:12:18:
75:c7:a5:57:3a:15:f6:99:38:e0:42:b9:86:03:61:
2f:bf:70:a2:fd:e9:b9:ee:40:cd:54:41:83:b0:f8:
ad:97:8b:16:b6:cc:ec:0d:00:b8:55:34:20:be:72:
8f:14:df:e2:d3:5b:e8:d3:53:60:e8:6b:19:13:e9:
02:f9:60:95:ed:af:00:6c:a0:a4:31:bb:ea:b9:5a:
0e:90:ac:b1:dc:dc:00:f2:74:ee:58:ec:e0:43:77:
a7:7f:28:18:3a:a6:c3:50:55:7a:6b:57:d3:df:76:
7c:40:25:d3:5d:45:25:51:4e:3c:6d:3c:d2:29:58:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:17:A8:A8:1C:3B:0F:92:3D:A7:D3:DE:82:CE:67:65:03:8D:A3:0F
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/1BeoqBw7D5I9p9Pegs5nZQONow8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.160.0/24
Signature Algorithm: sha256WithRSAEncryption
26:50:d0:e6:79:6c:77:21:93:8f:af:c3:ec:3b:01:8f:ae:e9:
27:b4:6f:06:81:fd:97:59:41:4b:fc:3a:37:d1:25:44:68:78:
db:a8:6a:1f:f8:46:28:cf:fc:59:07:e6:8c:c6:4f:b2:32:a4:
97:71:c7:e2:fa:c9:d3:19:90:d5:6b:2b:d0:46:4a:96:fd:c0:
3a:d5:0b:4d:08:54:8c:95:fb:c6:db:de:59:e5:d0:b0:b3:6a:
f7:15:44:7a:bc:0d:35:4e:d7:2d:b0:c0:5c:44:76:a2:96:b7:
2c:0d:c3:69:55:fb:f0:4c:b2:a8:ac:12:e0:df:27:fc:0f:bb:
e4:9a:fc:04:b5:9c:f9:bb:48:86:2d:94:b9:a1:37:0d:9f:c9:
6c:df:ce:54:b9:bc:53:45:90:c2:9a:1b:a6:cb:22:48:fe:1f:
36:b2:13:e0:0e:22:13:13:9a:01:11:e3:df:88:17:61:27:70:
2c:6e:d8:d2:97:bd:16:27:f5:6f:b1:2c:6f:d6:6e:43:1f:ff:
6e:18:70:45:85:a7:57:ab:3f:84:b9:71:cd:ff:22:96:00:b6:
43:9a:30:ee:17:41:f2:9c:c9:47:4a:e1:da:bd:1c:8b:4a:3e:
3c:25:a4:50:35:47:5c:aa:78:66:5e:e9:6c:59:4c:c5:1d:17:
96:db:95:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:56:03 2024 by rpki-client on console-fra.rpki-client.org