Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/1-APGb7-lSx6NRzQsbIEJz-SwNU.roa
File: 1-APGb7-lSx6NRzQsbIEJz-SwNU.roa (raw, json)
Hash identifier: Upn1TZOmULBfUbk/0FidetYkcn6c8qMPZWvBQwqgCB8=
Subject key identifier: D7:E0:0F:19:BE:FE:95:2C:7A:35:1C:D0:B1:B2:04:27:3F:92:C0:D5
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 018CC727342DF77402C93E6DD63BEC5DB7AF
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/1-APGb7-lSx6NRzQsbIEJz-SwNU.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25241
IP address blocks: 195.234.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:34:2d:f7:74:02:c9:3e:6d:d6:3b:ec:5d:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7e00f19befe952c7a351cd0b1b204273f92c0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:b1:1e:72:85:39:04:6b:a7:d1:ef:99:72:
a8:81:72:38:8f:63:2b:46:5c:c0:e9:f3:54:a5:b1:
08:17:f4:ec:c6:a8:3f:76:55:91:d6:9e:c8:6f:b5:
3c:42:77:e4:32:31:1a:a4:b7:f6:a6:10:cf:e7:10:
13:b9:9f:c5:1d:ec:53:00:fe:cc:be:29:71:f7:fe:
19:99:f5:b4:a9:ac:06:28:81:e9:51:7d:66:bf:a3:
7a:77:0b:8d:67:c9:3d:e6:31:bb:48:9f:8c:ad:c4:
8a:fd:f1:4d:33:bc:f5:79:10:3c:19:07:3a:e5:13:
3e:91:a0:c2:51:9d:7c:06:3c:7a:e2:14:14:32:ff:
47:5c:b7:db:c1:17:08:0a:5c:ef:ab:c6:3e:8a:e8:
f8:72:d6:d7:8a:38:af:72:ef:9b:01:9f:ba:de:0c:
89:7b:00:db:1c:2d:98:97:0a:c3:4f:23:af:59:ea:
fa:32:1d:d2:e5:8d:36:78:c0:72:47:20:bd:05:bf:
5b:ab:a6:fa:5a:bd:6d:40:fb:b7:f5:d7:88:4c:9b:
c7:82:d5:ac:f3:05:b8:b3:6e:3d:f2:1d:ef:31:95:
e3:f5:8d:9d:1f:4b:16:dc:c7:92:ec:e3:bc:56:7f:
b3:63:29:89:4e:b5:eb:31:6e:6d:8c:27:66:41:ed:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:0F:19:BE:FE:95:2C:7A:35:1C:D0:B1:B2:04:27:3F:92:C0:D5
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/1-APGb7-lSx6NRzQsbIEJz-SwNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.144.0/24
Signature Algorithm: sha256WithRSAEncryption
42:74:17:5a:70:0c:30:bf:eb:3b:59:70:a5:8b:f9:a9:50:e7:
51:fc:48:82:7f:fa:cc:2a:f9:81:4d:7b:df:1a:7e:40:34:00:
a5:65:d8:d0:9a:86:b1:3f:4d:85:08:b8:f1:04:2e:c6:f1:6e:
49:c4:0c:fa:52:ba:7f:67:9a:94:90:98:c4:5d:86:c9:fd:42:
9e:ab:87:02:ed:dc:c1:fc:69:a9:e8:83:fb:e4:94:46:0b:9c:
17:72:1e:51:8d:74:aa:ea:9c:90:f2:c3:82:be:20:9f:d7:7b:
2c:4f:c7:8a:dc:28:05:39:45:d9:35:d5:16:3b:7d:75:19:6d:
64:97:c9:13:44:3f:99:d4:0b:d2:ef:04:d0:51:f2:cb:be:ae:
89:e2:61:1d:47:ed:da:a3:3a:7e:2f:b7:43:eb:0e:7b:53:e3:
f5:23:89:ae:28:ff:32:82:2a:4c:21:a2:6e:a3:c1:30:e8:5c:
56:fa:07:cb:b0:a7:55:32:b1:eb:f6:05:56:07:c8:12:ab:41:
cf:ba:1e:59:63:a4:d7:7f:1e:ce:74:58:c0:7e:1e:e5:c6:c5:
3a:1b:06:e5:0f:17:ef:89:47:2b:d8:8f:ec:63:2d:fa:68:b8:
20:01:d0:58:f4:a0:4d:ce:dc:e8:a0:e6:1b:37:61:bf:5d:cf:
7e:ea:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:30:40 2024 by rpki-client on console-ams.rpki-client.org