Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/1M0fs8Ru2Vxpmw5C7pVWGaVK7xI.roa
File: 1M0fs8Ru2Vxpmw5C7pVWGaVK7xI.roa (raw, json)
Hash identifier: xzzsuqqg/1GhRDZ5kHqyxkZvbkKgqULisM9EADRyrG0=
Subject key identifier: D4:CD:1F:B3:C4:6E:D9:5C:69:9B:0E:42:EE:95:56:19:A5:4A:EF:12
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 018CC9BC687B4323C027934C8BA7643F7631
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/1M0fs8Ru2Vxpmw5C7pVWGaVK7xI.roa
Signing time: Tue 02 Jan 2024 10:33:37 +0000
ROA not before: Tue 02 Jan 2024 10:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 195.66.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:68:7b:43:23:c0:27:93:4c:8b:a7:64:3f:76:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jan 2 10:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4cd1fb3c46ed95c699b0e42ee955619a54aef12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:d0:c8:71:31:b8:22:fd:a3:fb:c7:79:6c:
3f:f1:bb:b9:1e:6d:3c:60:6a:e0:f6:e4:df:d3:79:
a9:be:56:be:ae:4e:1e:fa:61:f7:3b:99:73:e9:54:
ee:ad:57:a0:26:a3:1e:4e:3a:50:ff:87:53:13:49:
48:8c:2e:b6:2d:59:da:a2:db:73:e2:72:df:8c:1c:
5a:2c:a4:4a:69:a7:dc:71:7e:21:b3:1a:4d:65:fe:
50:39:6c:42:c0:b4:58:8c:5e:38:d0:1e:a4:00:4f:
e4:37:72:4d:f9:e0:e0:ac:ac:c8:8b:b7:46:c1:ce:
37:07:ee:00:3a:5d:ba:55:dd:df:cf:47:42:63:4c:
09:50:34:30:ac:e3:d5:92:70:25:b3:98:ab:c0:73:
cb:25:be:7a:06:5e:d6:53:87:1e:73:2f:11:3c:84:
76:34:be:4d:6d:25:dd:07:b8:fa:5d:0e:a0:6b:74:
e5:68:4b:dc:ec:ab:67:a4:e1:d7:bb:a8:4f:f6:b3:
f5:45:3c:8d:94:b6:c5:a4:76:5c:3a:35:71:16:4c:
96:93:c4:15:37:89:76:23:db:55:d2:0a:e7:ef:84:
76:36:6a:5d:40:2e:b8:29:23:4c:ef:65:f0:8b:22:
73:70:ea:f3:23:e4:95:e2:dd:f1:4a:e2:bc:64:28:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:1F:B3:C4:6E:D9:5C:69:9B:0E:42:EE:95:56:19:A5:4A:EF:12
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/1M0fs8Ru2Vxpmw5C7pVWGaVK7xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:5a:05:ab:31:21:3f:90:79:86:01:36:3c:e3:06:46:17:d3:
24:d3:35:2d:4e:78:c9:58:38:b1:24:9c:b2:26:7a:fa:27:d1:
e7:5a:79:2a:cc:17:e3:f9:a0:4e:e4:7b:b0:83:9a:c0:95:95:
7f:fc:64:59:31:e6:f0:92:20:8a:56:43:41:e7:82:aa:ee:c7:
d1:75:3b:a6:6c:8f:dd:be:71:ce:35:eb:62:b7:96:c1:58:66:
d7:5f:6f:ff:2a:2d:a1:49:7f:d3:19:0f:11:56:6e:d7:56:4a:
e8:3e:66:ee:0b:6f:65:32:f6:35:d6:10:dd:d3:57:a9:c2:88:
86:1f:19:e2:48:70:6f:21:5a:47:f9:18:32:34:8a:9d:41:11:
59:af:31:90:20:b2:99:53:23:dd:e1:d1:83:42:bc:0f:33:e4:
9c:dd:71:41:45:22:6a:c4:31:e3:17:a6:87:5b:e8:a7:f9:70:
f0:a0:9d:44:0c:fa:3f:d7:a3:26:be:46:db:c8:cf:0f:ad:b7:
2b:6d:e0:70:54:3d:8f:47:84:38:a6:e2:bf:60:07:83:fe:fc:
63:82:25:49:df:dc:d9:d4:23:46:e0:bd:14:96:20:13:be:20:
fa:20:47:9c:b9:0e:2b:79:45:2f:d9:53:f6:6c:4f:df:20:d4:
d7:c3:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:09:30 2024 by rpki-client on console-fra.rpki-client.org