Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6qxL_CjmKoRbcW__I9GsMRcFvF0.roa
File: 6qxL_CjmKoRbcW__I9GsMRcFvF0.roa (raw, json)
Hash identifier: HfyAjcbrn3vIMhBiAKSePaZGnO9z3+z/BiAmcAk25yQ=
Subject key identifier: EA:AC:4B:FC:28:E6:2A:84:5B:71:6F:FF:23:D1:AC:31:17:05:BC:5D
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FED5A5761E929D1F9E06EC6CECEFE
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6qxL_CjmKoRbcW__I9GsMRcFvF0.roa
Signing time: Tue 02 Jan 2024 04:30:27 +0000
ROA not before: Tue 02 Jan 2024 04:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35509
IP address blocks: 195.155.105.0/24 maxlen: 24
195.155.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ed:5a:57:61:e9:29:d1:f9:e0:6e:c6:ce:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaac4bfc28e62a845b716fff23d1ac311705bc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:e6:05:7b:13:05:91:70:d4:41:37:82:6b:
04:08:b7:16:9d:f1:36:2e:d4:26:cc:40:e4:19:25:
6d:ef:7e:12:5b:14:a0:17:87:9e:37:a1:3c:1f:df:
00:d0:32:e6:f8:fd:5f:6e:26:6c:13:9f:65:9b:58:
a5:0f:95:80:81:e7:0b:d0:f2:89:20:44:19:a8:e7:
f1:1f:41:75:a3:d5:e5:02:5b:40:ad:da:bc:73:af:
b1:4f:8f:27:8b:57:4b:01:30:06:75:4a:36:6e:09:
be:51:7b:39:3d:9f:67:68:02:b6:3d:8b:9f:1d:e5:
d0:f2:34:07:93:e5:d1:0a:45:8b:47:9b:85:b3:f4:
53:e2:ec:98:66:b2:f1:05:27:2e:70:98:2e:03:21:
a1:1c:0d:1b:01:13:26:1f:4a:04:05:84:4b:dc:b3:
e9:69:2f:13:28:90:3a:6f:4b:17:56:69:f8:e3:fe:
c6:e2:a7:f9:5a:12:55:72:cc:50:5d:45:17:84:3e:
c9:f8:e6:49:4a:bd:49:61:0e:79:ef:51:7f:7c:b2:
a9:cd:16:c9:17:8f:cd:07:9c:63:2d:26:97:90:f1:
01:55:d8:0a:f2:12:c8:16:5b:a8:56:0f:c6:dc:91:
61:26:db:8e:8a:5b:30:85:de:be:d5:b8:29:a8:f8:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:4B:FC:28:E6:2A:84:5B:71:6F:FF:23:D1:AC:31:17:05:BC:5D
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/6qxL_CjmKoRbcW__I9GsMRcFvF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.155.104.0/23
Signature Algorithm: sha256WithRSAEncryption
44:99:05:77:10:e1:b7:88:74:90:40:ad:28:b4:57:f4:69:73:
30:3f:b6:05:4b:13:85:c8:38:7b:24:c1:e6:c1:df:a4:55:75:
24:91:a1:9b:0d:1b:7a:83:d6:83:6d:2a:61:f3:30:8c:97:91:
a0:ef:48:03:c2:11:fa:bc:59:79:f0:f1:e1:b2:d3:40:30:ba:
0c:e6:95:0a:a5:02:38:27:5f:70:b8:70:25:98:b2:95:f9:bb:
ee:ec:13:4b:d7:9a:8b:80:17:23:c5:dc:8b:8a:26:39:cc:e9:
42:e2:1b:fd:13:ef:49:0a:e1:cc:98:d2:c2:c8:af:5d:f6:f9:
6c:d2:ed:5f:86:b8:35:4e:6e:2d:09:a1:a7:84:4a:55:7e:bc:
97:3a:d0:7d:ed:00:9a:5f:69:b2:61:dd:62:a2:cc:bb:10:5f:
dc:01:83:c9:74:da:fd:7a:da:14:c4:1a:a9:2e:95:21:8c:5f:
7b:a0:f9:ce:9a:22:52:8f:11:35:03:ff:fa:a5:01:e5:9e:a3:
9c:d3:75:5c:86:f9:3c:63:db:e2:4f:a6:fc:28:8a:99:3c:dc:
ff:15:00:5e:88:b6:a9:7c:be:f4:99:c0:27:70:11:a1:cc:f5:
93:8e:81:18:99:37:2e:35:ba:dc:22:db:c9:1e:84:c8:35:ed:
ef:2e:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:23:11 2024 by rpki-client on console-ams.rpki-client.org