Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/cPrYxwb7E9qxVo3jJBAjXJKxt8M.roa
File: cPrYxwb7E9qxVo3jJBAjXJKxt8M.roa (raw, json)
Hash identifier: bCALBmiiLVonC8uRrYkIwo7f6F+LO7XJPvjhCPJIeNI=
Subject key identifier: 70:FA:D8:C7:06:FB:13:DA:B1:56:8D:E3:24:10:23:5C:92:B1:B7:C3
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 018CCA2A62E8D300A96207321F6AFFF48357
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/cPrYxwb7E9qxVo3jJBAjXJKxt8M.roa
Signing time: Tue 02 Jan 2024 12:33:44 +0000
ROA not before: Tue 02 Jan 2024 12:33:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15969
IP address blocks: 195.110.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:62:e8:d3:00:a9:62:07:32:1f:6a:ff:f4:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Jan 2 12:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70fad8c706fb13dab1568de32410235c92b1b7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:ac:04:ef:2a:6b:3c:5e:21:25:7e:42:9c:
eb:e9:e9:2c:c7:f5:4d:98:94:72:bf:90:dd:a8:f1:
c6:ec:27:98:fa:ee:38:cc:e5:61:85:d2:a7:50:1f:
84:71:66:15:6d:9a:a5:28:29:00:23:3b:72:a2:2c:
e3:0a:26:57:41:db:d5:0c:ab:b3:2a:7e:ec:d8:45:
12:8c:97:7d:62:82:d9:8c:3d:81:66:0d:bf:7b:d4:
17:d9:95:b6:87:e0:37:1b:58:0c:b4:67:77:e3:01:
cd:8e:b8:a7:22:41:22:7c:79:a0:ce:31:52:ca:38:
42:af:16:f0:78:86:f4:9b:e3:cb:f1:05:a3:a6:d7:
a6:13:ec:eb:fa:9e:ea:98:4e:17:0b:e6:e6:47:f7:
67:e1:a1:a5:65:31:b3:9a:30:bc:d9:f7:ae:8e:9a:
c9:dc:06:8e:25:0b:65:d5:c3:59:66:df:3e:b1:18:
b6:48:37:a9:a6:64:8f:57:71:b3:bc:b7:44:37:04:
19:2d:aa:b3:a8:db:00:89:c9:11:3f:cd:cf:55:70:
84:57:fc:fe:f7:44:01:12:41:9d:6f:9e:40:95:f6:
0e:10:b9:ce:53:43:f7:e6:ba:74:c2:fc:33:9d:8b:
ea:12:ee:f4:0e:a9:69:f2:46:46:68:7c:9c:f2:3e:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FA:D8:C7:06:FB:13:DA:B1:56:8D:E3:24:10:23:5C:92:B1:B7:C3
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/cPrYxwb7E9qxVo3jJBAjXJKxt8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.48.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:78:66:e6:a7:e3:2d:17:40:65:d3:08:e1:6f:71:57:0c:b1:
56:d8:d5:ab:f1:72:7c:4a:d0:79:4d:71:87:cc:84:49:a5:4e:
f3:a7:0b:bb:52:63:f6:69:d7:b0:b7:ba:e8:d2:74:a9:d4:5e:
1a:f6:61:bd:22:a7:70:d2:fb:c8:d8:08:58:c7:c4:9c:c4:29:
39:51:dc:fe:45:d7:41:92:d4:5d:32:e6:d9:85:b8:b7:13:a3:
b0:84:79:79:b5:5f:72:4c:58:57:52:1f:28:f4:b9:96:12:e8:
e4:f1:05:c9:8c:09:f1:7d:18:35:d9:30:e2:30:5b:d9:d9:c8:
5c:17:2b:f1:05:2c:c9:8b:4e:cb:8f:da:1c:37:81:5a:dd:0f:
17:93:f6:b0:ba:5f:d1:00:c7:6a:94:fd:7d:2b:a6:ce:ac:49:
af:42:47:6e:54:78:5a:aa:7e:ff:7e:69:b2:57:f1:3a:11:30:
cf:fe:f4:25:a4:60:ca:59:6a:ca:a6:0f:63:e9:bd:e3:e8:02:
12:a2:90:f1:95:92:e0:49:47:b9:75:14:94:b2:6b:8c:21:70:
03:40:0d:ae:12:f9:88:b9:36:26:39:e7:f2:80:19:57:fd:66:
ab:f6:b9:7d:8d:47:77:c7:ff:09:eb:d2:b2:f0:98:18:76:18:
a2:1b:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:20:43 2024 by rpki-client on console-fra.rpki-client.org