Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/AOyFavlxqDKM8x9pUkPbGlAhKAk.roa
File: AOyFavlxqDKM8x9pUkPbGlAhKAk.roa (raw, json)
Hash identifier: EX0yEoRnl/ceh38ieR08Uqc8KWlwltYAZjLh7JflLCo=
Subject key identifier: 00:EC:85:6A:F9:71:A8:32:8C:F3:1F:69:52:43:DB:1A:50:21:28:09
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 018CC8DE556B045EAC0CA94F3F105B7B4712
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/AOyFavlxqDKM8x9pUkPbGlAhKAk.roa
Signing time: Tue 02 Jan 2024 06:31:03 +0000
ROA not before: Tue 02 Jan 2024 06:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47692
IP address blocks: 195.2.220.0/24 maxlen: 24
195.2.220.0/23 maxlen: 23
195.2.221.0/24 maxlen: 24
2001:67c:1508::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:55:6b:04:5e:ac:0c:a9:4f:3f:10:5b:7b:47:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Jan 2 06:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00ec856af971a8328cf31f695243db1a50212809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5a:bd:70:c9:19:fc:af:86:76:81:a4:57:89:
ce:55:83:a7:40:e3:b2:16:62:e9:42:9e:e2:c0:34:
eb:36:b0:d6:27:a3:29:bf:b1:1c:f3:9d:a8:66:01:
38:7b:d0:7d:52:13:82:39:72:f4:53:69:66:db:f5:
8c:80:60:6d:0b:28:6b:67:30:fd:65:85:b3:2a:c4:
dc:aa:be:01:ea:8a:3b:7b:24:1f:e9:59:d9:09:9c:
97:9d:43:8c:d0:b1:ba:73:8b:5c:13:c3:d9:9f:40:
52:b5:7a:b8:34:85:c1:40:c3:b7:f6:3b:09:da:52:
21:cd:11:30:11:ec:10:69:35:1d:68:40:97:f5:ce:
0b:81:05:93:b7:b8:7c:63:69:0b:01:1f:8f:e7:8b:
9f:15:bf:20:6d:c9:bd:ac:b4:6b:8a:6f:5c:d9:f6:
5f:3c:5a:ad:47:c6:42:c2:65:ef:c7:45:9c:61:4a:
d9:a0:6c:a2:ac:0e:d8:70:da:82:90:b0:43:1f:33:
f7:dc:c2:a2:57:6f:59:44:c3:7c:27:17:99:43:94:
19:e9:ad:c4:84:dc:2f:6f:0f:4f:47:6c:c5:18:1c:
ab:67:e1:0c:1d:b9:62:2f:a7:f7:f6:c6:f9:83:16:
1b:56:ab:22:6a:03:05:08:ff:df:c3:d5:aa:8a:ee:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EC:85:6A:F9:71:A8:32:8C:F3:1F:69:52:43:DB:1A:50:21:28:09
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/AOyFavlxqDKM8x9pUkPbGlAhKAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.220.0/23
IPv6:
2001:67c:1508::/48
Signature Algorithm: sha256WithRSAEncryption
6f:df:5f:ff:28:e8:17:14:cb:31:cf:be:ea:cc:01:35:7f:ed:
3c:06:c7:96:39:21:c5:ee:0f:0c:8c:bb:f5:d3:41:80:b6:91:
c7:aa:54:c1:4b:a1:8f:6b:82:64:44:23:42:67:85:34:65:14:
a5:f5:70:42:86:9a:d5:1d:51:ac:0f:80:80:65:45:c7:e3:f3:
27:2f:f1:27:8d:ab:d1:7a:ea:1a:66:4a:da:18:3d:9d:6a:4d:
d3:ff:51:29:b0:a7:76:da:76:d1:23:cb:1a:41:26:7e:7c:a7:
87:46:cc:d7:a1:a5:33:d8:a4:ed:69:11:1e:f4:c7:c6:3e:f0:
c8:c0:7f:a5:38:0e:15:52:85:e4:38:ce:f7:fd:eb:5f:b7:9a:
51:4e:a2:09:8d:e0:45:b5:0c:8a:4f:5a:23:6e:91:d2:6d:79:
ee:e8:88:c5:63:d0:11:a1:8a:1b:8f:9c:51:3d:b6:52:c0:60:
50:38:3a:eb:97:1b:24:ed:b7:4e:cd:2e:32:f2:36:67:dd:6b:
49:3a:3e:f7:ab:ed:a0:83:e5:40:9d:e2:73:75:9b:63:6c:a8:
f1:1f:ee:c8:12:9e:e8:51:3d:33:73:87:e1:e1:0a:a5:55:f2:
ae:7c:d1:40:16:6b:28:c2:b1:82:10:ad:55:7d:bc:16:f5:e0:
7d:db:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:27:58 2024 by rpki-client on console-fra.rpki-client.org