Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ssJVQsX4oqWob6dmtmez2G563EM.roa
File: ssJVQsX4oqWob6dmtmez2G563EM.roa (raw, json)
Hash identifier: M/aEkjv921GSdsNlD8XzV1L3EzpYUXgCOdy4l6z8kTw=
Subject key identifier: B2:C2:55:42:C5:F8:A2:A5:A8:6F:A7:66:B6:67:B3:D8:6E:7A:DC:43
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018FECD43E35E4E40FF1188308F43E065249
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ssJVQsX4oqWob6dmtmez2G563EM.roa
Signing time: Thu 06 Jun 2024 09:14:43 +0000
ROA not before: Thu 06 Jun 2024 09:14:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200811
IP address blocks: 185.98.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:d4:3e:35:e4:e4:0f:f1:18:83:08:f4:3e:06:52:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jun 6 09:14:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2c25542c5f8a2a5a86fa766b667b3d86e7adc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:ba:37:43:98:0d:a7:00:af:60:5b:1c:07:
c3:4b:96:8b:92:82:0c:3e:4e:db:68:8d:2f:05:e3:
a1:f5:19:5d:14:a2:38:cb:df:eb:2b:12:5f:11:31:
ca:9e:ae:cd:57:34:ec:08:88:fc:d1:db:9f:36:9e:
3b:e0:da:c5:df:5c:23:04:c7:40:49:c6:4c:97:56:
64:29:d8:e2:c0:1f:a4:f2:b5:27:66:7b:40:c7:18:
6a:2e:30:5b:c7:fb:95:8e:c7:9e:3c:18:fa:66:f4:
36:1e:c0:a7:56:ec:eb:f3:2c:41:6a:ff:3c:71:e4:
a5:d2:80:8f:dc:c5:0a:70:81:ff:e1:e9:f0:92:8a:
e7:9f:01:23:10:6f:8e:26:df:42:83:ef:1d:66:e1:
79:ac:3d:7d:8d:26:de:84:78:95:00:ee:4c:3a:4e:
a5:2a:8a:69:ed:6f:70:8d:ca:f6:2f:10:ca:af:44:
ad:2e:cb:86:f4:6e:41:8f:b5:ee:e7:cb:35:2d:fd:
a3:23:89:e6:23:ab:70:45:12:b5:09:af:61:bd:ba:
f6:b6:0b:a4:ff:a7:02:35:fa:60:98:cb:ec:17:e8:
54:99:d8:33:9f:7f:df:3a:1d:22:6b:04:53:c1:48:
03:df:dc:0a:13:08:3b:2a:fd:78:02:eb:35:54:8c:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:55:42:C5:F8:A2:A5:A8:6F:A7:66:B6:67:B3:D8:6E:7A:DC:43
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/ssJVQsX4oqWob6dmtmez2G563EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.32.0/22
Signature Algorithm: sha256WithRSAEncryption
49:c6:9f:d2:cf:ad:4d:43:09:66:d1:e7:db:6d:3c:b3:9a:51:
e5:26:4d:f6:dd:d5:13:f8:1d:3e:96:f8:4e:40:c7:c7:a6:f2:
f4:1e:a3:91:65:34:4b:fc:98:8e:3c:bd:9e:09:23:fc:97:a3:
d5:33:02:c1:6e:d7:13:a7:17:a8:07:da:b5:87:da:da:a3:3d:
0c:aa:61:ed:b4:4b:da:1d:78:dc:24:e4:db:d5:96:ed:46:d9:
9a:e9:8b:64:19:8a:ee:27:44:c2:9c:13:33:c9:2a:f2:6a:33:
e9:73:9d:27:ea:6e:c7:9d:6c:50:d3:c5:66:12:25:f4:c0:d5:
2e:ac:74:35:62:cd:7a:9f:ef:a9:49:d3:fb:81:20:49:b9:ce:
04:ec:76:af:fa:b5:c5:17:7b:98:84:60:91:0d:ef:9e:57:5b:
ee:89:41:34:bc:01:94:16:f4:31:70:a8:3a:af:1b:40:cb:c8:
62:09:78:fa:4d:d1:a2:b6:21:af:68:7e:9d:a1:0a:3c:aa:ca:
99:a6:e9:cd:54:3c:c1:d4:e0:77:e4:61:ed:f8:d5:b5:3f:01:
ad:b4:ba:a7:af:01:bf:22:9c:58:42:20:61:fc:c2:f4:a8:ce:
ec:97:4b:07:a6:f2:ce:75:4a:4a:49:17:03:f5:bf:4c:d1:39:
17:ad:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:02 2024 by rpki-client on console-fra.rpki-client.org