Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jAvlv_mL4F1u3dwa4iU72tac6rE.roa
File: jAvlv_mL4F1u3dwa4iU72tac6rE.roa (raw, json)
Hash identifier: Dy+9tqxPTV68N38xPsn5Glc/+1g3rfTmaY6UN+eOqwo=
Subject key identifier: 8C:0B:E5:BF:F9:8B:E0:5D:6E:DD:DC:1A:E2:25:3B:DA:D6:9C:EA:B1
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D3D93EE1FA820B9249196B5A7D984
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jAvlv_mL4F1u3dwa4iU72tac6rE.roa
Signing time: Tue 02 Jan 2024 08:32:11 +0000
ROA not before: Tue 02 Jan 2024 08:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21219
IP address blocks: 195.178.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:3d:93:ee:1f:a8:20:b9:24:91:96:b5:a7:d9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c0be5bff98be05d6edddc1ae2253bdad69ceab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:58:26:ff:cf:f3:71:94:c7:bd:f9:ca:6b:
94:dd:44:4e:58:1e:0e:70:d0:e3:43:56:77:3c:54:
67:db:10:a3:c8:70:8d:3b:a4:11:87:df:1e:b0:22:
24:c9:ff:18:5e:98:81:93:6b:e9:a2:97:6d:a8:b5:
60:70:9a:07:e1:b2:46:a8:80:c1:4e:1e:d2:a3:f4:
10:03:70:18:9e:69:79:f8:de:74:82:fd:bc:0d:2c:
d5:42:88:d7:5a:41:0b:3e:15:aa:c3:20:b3:43:21:
e9:3b:5d:c9:ca:11:bc:ce:fa:13:d5:d5:80:0e:95:
4b:62:1d:ff:d8:51:71:1a:07:78:1b:2c:2e:69:98:
8a:ca:39:3c:23:db:90:78:54:91:b3:ae:57:3e:96:
4b:db:cd:b3:e6:6f:ac:03:6e:a9:29:7d:86:aa:28:
0f:e9:31:86:9d:27:5a:88:17:be:e1:9f:df:2c:4d:
d1:22:25:ed:16:24:38:07:64:30:3c:d4:aa:4c:71:
19:a4:0f:bc:89:8d:31:bc:f2:39:8f:23:c8:49:26:
9e:ce:0b:90:32:48:85:ff:96:e3:99:0a:75:da:91:
00:24:47:da:72:9c:e5:d5:7f:b7:9e:b8:50:68:d4:
fd:df:95:5e:57:99:51:2b:ca:4d:45:78:ef:80:a3:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0B:E5:BF:F9:8B:E0:5D:6E:DD:DC:1A:E2:25:3B:DA:D6:9C:EA:B1
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jAvlv_mL4F1u3dwa4iU72tac6rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.150.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:b6:72:6d:a4:4c:54:19:d4:49:70:80:98:4e:c4:96:54:9b:
a7:d3:a3:a1:28:6d:ab:74:7b:b3:3c:4a:75:a3:e7:e4:f1:3f:
9e:b0:fd:73:7c:a1:7d:05:57:5d:08:72:fb:1e:62:b6:c0:90:
d5:09:ef:9d:0c:71:63:73:fa:aa:7d:8e:d8:d8:da:3a:a7:c7:
a4:b3:c3:c8:ac:25:10:44:9d:3b:00:d8:a3:d7:33:6e:eb:0a:
04:a3:0c:aa:3d:5e:ac:a4:57:49:1c:f1:0a:18:bb:0c:9b:77:
5b:03:78:be:80:82:83:e4:a8:f8:64:6f:3f:25:79:88:05:2a:
e9:fe:d0:7f:3e:a9:ee:58:a9:b6:ff:48:a9:75:de:aa:ca:fe:
64:c0:45:bc:f8:6e:4a:b3:8e:8c:09:21:c4:82:b5:dd:b5:1a:
6c:c5:71:b9:e7:09:a4:bf:24:82:08:f4:ed:d7:7b:74:4f:2d:
ee:21:26:9d:f0:55:d2:3c:8f:ff:59:89:14:83:0d:4e:6f:50:
49:7a:a0:ee:04:20:1b:d4:9b:3d:88:2b:e9:f9:a9:bb:8a:e5:
ca:76:55:fc:4d:ad:09:04:3c:48:6b:a4:0a:d5:11:a6:67:0c:
e3:77:e6:9e:0e:1a:ff:95:5f:c2:5c:73:0d:3d:36:98:e6:a4:
c4:e8:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:04 2024 by rpki-client on console-ams.rpki-client.org