Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/VJLpZPns9VmzENs5o_j_UJcZXrk.roa
File: VJLpZPns9VmzENs5o_j_UJcZXrk.roa (raw, json)
Hash identifier: GgRvJjsZokEN50v/xoPqc7H41GhNdmELzAcWa/RGe9E=
Subject key identifier: 54:92:E9:64:F9:EC:F5:59:B3:10:DB:39:A3:F8:FF:50:97:19:5E:B9
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 018CC5007DEC8790EBC06E41C0832B1F6DC4
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/VJLpZPns9VmzENs5o_j_UJcZXrk.roa
Signing time: Mon 01 Jan 2024 12:29:52 +0000
ROA not before: Mon 01 Jan 2024 12:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 195.95.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7d:ec:87:90:eb:c0:6e:41:c0:83:2b:1f:6d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Jan 1 12:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5492e964f9ecf559b310db39a3f8ff5097195eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:93:7b:f2:07:d1:b3:91:32:e4:16:c7:90:
5e:ce:c8:bc:f7:a3:e8:69:52:0c:2e:e4:d5:a1:2a:
b7:7d:37:a2:3e:fd:a9:d7:64:06:b9:31:0e:25:83:
35:04:b3:ad:da:cd:98:bd:f6:1a:54:ba:8c:26:5c:
42:14:09:0d:17:d0:0d:4f:a6:39:2a:22:0c:69:96:
98:c4:b0:1a:30:15:88:73:b7:9b:ec:9e:ef:d8:35:
13:55:47:65:8f:38:9e:27:ef:00:0a:bd:d4:a7:a7:
e4:43:03:34:01:93:5b:41:f9:fb:9a:36:a7:8b:61:
e3:45:94:ed:55:9f:11:ef:12:e1:d1:53:7f:c8:f1:
ab:96:38:dc:4b:b7:31:2c:d7:6a:55:58:3c:32:a7:
bd:50:1b:5d:41:b6:c6:24:cf:be:74:a6:f9:0b:a9:
3d:29:39:d8:95:66:2a:08:54:f9:96:3a:08:26:46:
f4:b9:7e:20:93:9e:99:5a:32:5c:df:8f:96:f6:92:
af:90:4e:b7:71:95:1d:e5:41:69:a5:27:56:94:e3:
2c:54:67:d7:8a:ac:74:05:33:b1:88:63:1d:04:29:
a2:86:1f:92:9d:ab:20:de:65:6e:2c:db:b8:9b:b5:
0d:d6:a6:99:2a:28:d6:21:68:b7:a8:d6:16:17:b7:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:E9:64:F9:EC:F5:59:B3:10:DB:39:A3:F8:FF:50:97:19:5E:B9
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/VJLpZPns9VmzENs5o_j_UJcZXrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.162.0/24
Signature Algorithm: sha256WithRSAEncryption
43:52:bd:86:fc:a2:3d:99:05:b4:40:ea:b5:8f:12:7c:5f:eb:
61:13:44:45:46:22:04:c1:6b:86:08:c1:7b:a8:e7:53:89:50:
08:58:97:84:72:1a:6b:4d:c8:d4:9f:a8:21:1a:ac:3f:36:f3:
6d:74:9c:1a:b1:50:5e:d5:71:b6:83:1a:ee:f2:f0:68:13:b5:
13:7f:01:2d:fd:8f:c8:2a:e4:2c:7a:e8:f3:24:3a:1d:89:c3:
71:cd:7d:f1:26:20:a4:38:8b:97:03:1b:73:d0:91:84:ff:37:
a7:9f:8a:f6:55:f6:34:15:bf:63:d0:50:dd:10:bb:c4:77:d0:
30:c1:21:af:32:1f:82:a5:c9:93:a2:09:d1:b7:36:4b:37:a8:
d5:d1:7c:ea:5f:27:95:fb:a5:f6:d5:dc:e1:a7:2e:d9:d4:94:
bd:e5:26:51:7e:b4:ba:d9:90:fd:cc:d4:32:8c:ec:b5:24:13:
41:11:e6:08:ee:c8:c0:e9:16:5f:e9:21:8b:ff:84:77:be:67:
77:f4:ec:59:6d:c4:a4:67:02:de:32:58:0f:d6:20:f7:26:cc:
48:c2:29:f9:91:a5:03:73:a0:65:ac:0f:c0:68:3b:fa:31:a6:
68:c7:05:0b:20:2c:4d:a8:9e:f4:9a:99:2a:48:4e:38:18:fd:
5f:14:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:22:28 2024 by rpki-client on console-fra.rpki-client.org