Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/pbo7eyjpwFZQvloWo5irHchbiio.roa
File: pbo7eyjpwFZQvloWo5irHchbiio.roa (raw, json)
Hash identifier: YvQlFR2kJRDzpKaX2+HdX0GUAoHN6Vy1uKakNac4fO8=
Subject key identifier: A5:BA:3B:7B:28:E9:C0:56:50:BE:5A:16:A3:98:AB:1D:C8:5B:8A:2A
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018CC6499BD44573E3421B727CB0CD35DEE6
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/pbo7eyjpwFZQvloWo5irHchbiio.roa
Signing time: Mon 01 Jan 2024 18:29:21 +0000
ROA not before: Mon 01 Jan 2024 18:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62220
IP address blocks: 195.244.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9b:d4:45:73:e3:42:1b:72:7c:b0:cd:35:de:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 18:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5ba3b7b28e9c05650be5a16a398ab1dc85b8a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:ce:59:80:7e:2b:09:83:50:96:a7:dc:45:
40:89:de:5d:08:03:06:73:b1:68:6e:68:eb:f3:e3:
56:15:78:4c:ab:cb:fc:0f:c5:0d:b8:ca:eb:f9:8c:
5f:d5:0f:00:0c:a1:7d:5e:6e:91:a2:6b:91:93:d1:
5b:19:91:02:c8:76:aa:c1:81:19:b5:06:41:a9:44:
d7:93:1f:34:81:7e:b4:a8:75:7a:fd:09:86:09:52:
7a:83:88:5d:67:3a:c8:76:ff:63:8d:81:70:b6:2e:
46:01:a3:e7:3e:29:48:9d:0c:49:6b:63:ad:f4:a4:
31:01:7d:55:0b:a0:46:c4:29:49:fe:36:9c:26:a0:
36:09:71:a0:b4:f7:15:27:3c:64:1b:72:e8:93:ed:
e7:cb:de:48:3b:6f:37:16:11:b5:08:1e:1c:b2:14:
6c:11:d2:a5:06:de:e9:71:c4:ab:a9:19:06:3b:65:
5e:8b:49:f0:92:f4:f9:47:8e:2f:6a:e1:15:05:b1:
59:5f:f2:d8:76:06:9f:84:ca:e9:07:51:8f:34:03:
17:c4:53:bb:3b:26:f7:7b:61:6d:10:a3:a8:c9:1b:
53:91:2a:d5:bc:f7:72:26:6c:48:14:05:34:3b:d8:
07:c9:a2:e8:77:44:b2:4d:4f:ff:88:1b:32:47:3a:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:3B:7B:28:E9:C0:56:50:BE:5A:16:A3:98:AB:1D:C8:5B:8A:2A
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/pbo7eyjpwFZQvloWo5irHchbiio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.158.0/24
Signature Algorithm: sha256WithRSAEncryption
07:79:53:93:99:25:3f:22:a2:a3:08:ca:a0:ed:1e:e0:85:71:
bb:cf:43:70:83:59:ad:fe:15:fd:f8:29:1b:5c:e2:d9:32:48:
c8:8d:c2:bb:10:97:35:96:d0:a9:e3:31:49:40:2b:f0:91:71:
0c:0a:bb:bd:ba:00:f0:0a:89:ef:bd:63:20:c4:ac:ad:2f:66:
0f:a3:4b:a9:41:66:b9:5d:2a:ff:36:58:1a:ea:cc:d7:c6:00:
26:53:d4:c4:6e:6f:36:f5:4f:f5:1b:ef:b7:44:2a:10:23:f8:
09:69:f8:7f:e7:15:ea:b9:94:12:27:21:88:f2:ff:12:40:79:
b7:a6:fa:53:74:e0:3f:ec:b2:50:99:6f:1b:18:c8:5f:84:c1:
f1:6d:6a:aa:b4:13:44:c2:72:61:fd:c9:94:c2:28:58:ba:72:
ed:67:5b:4a:59:4f:5a:47:d3:e6:d5:19:1f:f5:38:95:52:17:
ce:bc:b3:b5:f5:09:09:95:4a:52:d4:1f:23:9c:09:ff:ca:4e:
c3:e2:eb:a6:a6:f9:24:d8:7f:a3:6d:4f:78:d0:7e:95:12:aa:
a2:13:c1:1e:81:a5:42:22:f6:53:f1:8e:13:a0:c3:8c:97:0f:
02:fb:7d:51:92:58:0d:e3:42:3a:ae:47:58:7a:dd:02:5b:18:
b0:56:ca:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:56:36 2024 by rpki-client on console-fra.rpki-client.org