Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/x4srMTzqKkwkV7S1jL31T9wCaTo.roa
File: x4srMTzqKkwkV7S1jL31T9wCaTo.roa (raw, json)
Hash identifier: ZbTxRhcuphwqFW7JRgWhJAfnDyPGEqL1yHTMmVuymSA=
Subject key identifier: C7:8B:2B:31:3C:EA:2A:4C:24:57:B4:B5:8C:BD:F5:4F:DC:02:69:3A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 018CC94DA6C1415401966EA98AF59F9BC5BD
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/x4srMTzqKkwkV7S1jL31T9wCaTo.roa
Signing time: Tue 02 Jan 2024 08:32:38 +0000
ROA not before: Tue 02 Jan 2024 08:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48813
IP address blocks: 195.242.191.0/24 maxlen: 24
83.143.16.0/21 maxlen: 21
195.140.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a6:c1:41:54:01:96:6e:a9:8a:f5:9f:9b:c5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Jan 2 08:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c78b2b313cea2a4c2457b4b58cbdf54fdc02693a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:42:b3:b6:44:a4:8f:20:44:d4:f0:5b:b7:
7c:87:81:91:39:3e:90:31:96:d6:59:66:d4:19:bf:
a7:19:81:4f:ec:d9:ee:29:fd:ce:00:31:2d:9b:db:
59:8c:95:c6:f7:1e:c2:7e:e0:d3:75:d2:ea:42:53:
f0:f7:99:c2:3f:94:12:6e:44:d5:bc:09:b3:66:12:
b5:31:27:04:55:86:e4:a6:e7:02:2f:ab:66:83:7e:
d2:28:35:77:96:d4:4a:2d:d1:3b:dc:63:69:bc:f5:
04:16:28:7a:ca:ab:24:f3:d3:49:c0:57:34:f7:0c:
5d:9f:64:73:d8:7c:16:32:da:ac:c9:cc:4e:ff:64:
28:58:eb:7c:af:a2:43:0a:1c:34:b8:49:c8:44:39:
af:a3:e2:53:79:7d:ca:12:b5:e5:a5:db:89:c4:08:
a5:aa:67:f2:b3:db:25:1c:e0:b1:3e:81:c2:fa:90:
32:ab:32:53:2e:a6:ba:84:87:0c:4f:99:d1:34:59:
25:5e:01:ac:9e:0b:5a:ef:bf:ca:13:af:ce:3f:93:
58:6e:66:3d:f3:c6:f5:99:8f:92:01:aa:d6:30:8f:
4a:ea:95:58:f7:81:a5:6d:7a:63:9e:b0:55:85:ea:
5b:88:92:7a:fd:3e:c1:79:48:49:af:f9:df:48:be:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8B:2B:31:3C:EA:2A:4C:24:57:B4:B5:8C:BD:F5:4F:DC:02:69:3A
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/x4srMTzqKkwkV7S1jL31T9wCaTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.16.0/21
195.140.140.0/22
195.242.191.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:47:6b:cf:65:e8:79:bf:d0:e3:6a:bc:a6:5e:95:32:0c:99:
9c:8c:b6:ed:31:1c:89:d2:04:15:38:8f:f9:a2:d1:cb:2e:71:
8a:47:c8:9e:7c:61:a1:f3:26:79:0f:e2:cf:8a:af:ca:34:d6:
5d:46:a9:1d:5e:63:71:e4:66:45:e5:6f:9a:bb:1b:48:0f:df:
44:ab:16:26:c1:b9:7d:b3:b3:f5:04:89:0d:5c:ff:f6:cd:93:
77:28:ec:42:b9:db:77:e0:0d:54:0d:92:11:e5:5c:af:32:2d:
0d:83:4f:a7:0a:9b:95:7f:a1:a5:f9:9b:1e:bb:8e:0d:09:f8:
e1:b6:02:b5:43:ea:8c:4b:bf:7c:83:c3:3a:f2:e1:ad:e7:c0:
15:39:a6:c3:4a:24:db:a9:c3:a2:52:77:7d:06:3d:08:1a:1d:
8b:a6:04:6b:26:f6:7f:59:84:4f:71:c5:be:17:49:14:fb:9c:
04:36:9a:41:d0:d5:50:c3:2e:c0:a9:11:54:ab:ed:4c:06:5c:
67:3b:1b:c3:68:fe:61:cc:33:76:72:d8:0e:38:6b:5f:f8:22:
50:9c:40:17:aa:28:d7:4c:11:65:d3:93:13:ab:25:b7:53:e0:
f4:9d:3f:94:69:e0:a8:d9:4b:91:08:97:be:3b:99:99:58:ef:
17:fb:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:01 2024 by rpki-client on console-fra.rpki-client.org