Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/rmUusaJYRC9BVHg2Ny-3YOtRX34.roa
File: rmUusaJYRC9BVHg2Ny-3YOtRX34.roa (raw, json)
Hash identifier: ppsYrivk8nVt9vK6rT0Ai2Tee1BF6LZr0X6A1DSoSFI=
Subject key identifier: AE:65:2E:B1:A2:58:44:2F:41:54:78:36:37:2F:B7:60:EB:51:5F:7E
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 018CC56E07429E98BAAF8DC67B1A79049A22
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/rmUusaJYRC9BVHg2Ny-3YOtRX34.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5459
IP address blocks: 195.66.232.0/22 maxlen: 22
195.66.240.0/22 maxlen: 22
195.66.248.0/22 maxlen: 22
2a01:40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:07:42:9e:98:ba:af:8d:c6:7b:1a:79:04:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae652eb1a258442f41547836372fb760eb515f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:c8:a6:92:b3:bb:3c:7c:26:fb:b5:9f:19:
d0:60:56:91:bd:9c:7e:42:b8:a9:b5:56:ca:98:7e:
a4:4a:46:13:d4:3a:75:66:de:fb:02:0a:1b:90:e3:
cb:31:81:db:77:7f:6c:09:bb:20:f6:6a:8d:ff:59:
5a:bf:a5:4a:37:9c:0b:61:4e:1b:06:51:5f:1d:50:
51:5e:be:93:5e:46:58:00:e1:73:5b:1c:df:5d:d0:
fe:36:6d:d0:ed:29:cd:3a:d9:3a:1b:40:92:e5:45:
c4:51:74:a4:3a:09:ab:b6:84:46:18:20:59:07:ef:
ed:da:c0:35:92:20:84:29:6a:35:55:5f:69:df:08:
47:3d:a0:5a:3c:ad:d5:9c:c0:38:92:e4:cd:78:c8:
8e:5c:7d:40:1d:04:9d:6f:32:d2:46:24:1d:3e:68:
3a:29:7c:9c:7b:f7:81:2c:c1:8d:8d:a0:10:6c:94:
1e:9c:69:64:dc:ee:f1:38:f6:65:21:eb:55:d0:2c:
fb:ac:9d:7d:ad:cf:65:d2:73:d9:3d:62:62:c9:8a:
8f:08:1a:b0:a4:fb:2e:fb:d8:8e:e2:b0:ce:2f:04:
ac:ff:b9:c7:8e:0c:0b:08:67:42:00:8f:18:20:87:
cf:e7:9e:30:06:53:f0:46:40:6c:bd:41:49:38:a4:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:65:2E:B1:A2:58:44:2F:41:54:78:36:37:2F:B7:60:EB:51:5F:7E
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/rmUusaJYRC9BVHg2Ny-3YOtRX34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.232.0/22
195.66.240.0/22
195.66.248.0/22
IPv6:
2a01:40::/32
Signature Algorithm: sha256WithRSAEncryption
91:1a:55:67:0d:85:e5:33:1c:c7:6e:fe:24:3e:67:28:40:44:
96:27:f9:d9:bc:02:b2:35:3b:9c:a5:6e:49:5c:ef:e1:15:65:
9d:24:f3:b0:ba:92:43:42:f6:3a:0f:e1:3e:e7:b4:7d:d0:e5:
54:1e:ab:fa:f6:aa:7a:63:29:74:51:d6:64:c6:14:4d:25:d2:
f5:b0:b8:9d:e9:c8:18:a8:fc:89:72:20:55:96:83:95:f7:c2:
bf:7b:ce:6d:c5:cc:5e:e4:89:5f:2e:7f:e4:88:d6:97:a7:a5:
7e:41:ea:47:54:ed:b8:55:c4:6a:b5:f1:1d:77:2a:06:4f:9b:
3b:a7:15:43:dd:52:83:53:16:4a:ca:1b:4a:97:d4:55:3c:22:
e5:22:9a:cb:27:5c:4c:33:6b:34:49:9e:2c:ed:cb:fb:40:a3:
f4:b7:c5:51:86:7d:48:1f:9f:71:b8:66:46:71:20:c9:9a:d0:
1b:1a:66:e6:48:36:7d:db:5c:3c:38:fc:59:ab:c2:ac:48:20:
67:23:98:c3:8d:61:d0:82:31:3c:1f:c7:4f:57:48:98:9e:50:
f9:4e:76:4b:47:e4:6a:e4:c0:a0:99:c0:24:b0:b5:67:e3:d8:
6e:5a:e2:98:43:c7:0d:4c:f1:76:8e:1f:30:63:cb:e9:66:a6:
42:fd:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:13:12 2024 by rpki-client on console-fra.rpki-client.org