Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/4OTV0cB36Ji69xRT4t2wFf-plQc.roa
File: 4OTV0cB36Ji69xRT4t2wFf-plQc.roa (raw, json)
Hash identifier: OC/gUVq4B0nzVGqUP3NQk/PNQSW9VCgDcC/oWt+JHNQ=
Subject key identifier: E0:E4:D5:D1:C0:77:E8:98:BA:F7:14:53:E2:DD:B0:15:FF:A9:95:07
Certificate issuer: /CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Certificate serial: 018CC79540F066F98486CAE2A14AC4BD6906
Authority key identifier: F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/4OTV0cB36Ji69xRT4t2wFf-plQc.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202561
IP address blocks: 195.62.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:40:f0:66:f9:84:86:ca:e2:a1:4a:c4:bd:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98dfff7f3cdaa79aa8c51f5ce12b23870644081
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0e4d5d1c077e898baf71453e2ddb015ffa99507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:6d:9a:40:50:63:01:77:a2:aa:d1:90:15:
31:b6:18:18:b3:db:d3:28:a4:c8:75:08:32:c2:72:
8d:f0:c6:c9:94:45:65:44:7e:9a:64:81:21:f7:80:
e1:b8:ab:8d:be:ee:a9:6d:60:42:08:6d:50:70:bd:
92:6d:b5:2a:b5:d2:bc:f0:a6:c0:22:db:d3:16:f9:
63:0e:2f:f3:63:d3:3c:78:db:30:af:c6:c5:b6:0d:
28:b7:0a:30:a6:29:ba:ef:f2:79:ac:75:cf:16:8a:
93:26:88:3a:09:18:9f:c9:88:90:eb:0a:e4:07:b7:
99:3a:00:92:08:2d:09:b5:2f:8b:98:e7:d5:f7:9f:
6f:22:15:87:0b:e1:50:e2:d7:66:66:06:d4:48:55:
69:20:43:b5:67:68:3b:cf:c3:1f:06:d4:9e:82:39:
20:15:23:4b:3f:61:31:e1:2f:ec:6c:81:be:bf:e3:
b0:9d:54:78:6f:e1:e9:aa:dc:df:35:41:c2:fd:92:
d6:12:aa:89:22:c0:12:c1:3b:2b:74:65:2d:cb:61:
11:73:95:a0:9d:89:dd:27:17:bb:36:c7:aa:bd:a0:
a1:c2:81:dc:9b:f8:c1:a9:cf:2f:8a:9a:c4:ea:7d:
7d:44:35:bd:3c:ef:d1:19:cd:ba:dd:4c:31:bb:b1:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:D5:D1:C0:77:E8:98:BA:F7:14:53:E2:DD:B0:15:FF:A9:95:07
X509v3 Authority Key Identifier:
keyid:F9:8D:FF:F7:F3:CD:AA:79:AA:8C:51:F5:CE:12:B2:38:70:64:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/4OTV0cB36Ji69xRT4t2wFf-plQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5471a8-aedf-4d86-a46d-788c6306bb3f/1/1-Y3_9_PNqnmqjFH1zhKyOHBkQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.50.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:70:d0:f9:31:f4:5e:73:51:6c:70:3b:ec:dd:22:8c:f2:d0:
c3:1f:3f:c0:71:70:a0:6c:60:2c:54:12:48:13:5f:7b:2a:98:
ed:f7:f3:fa:ba:5b:d9:39:4b:c1:e8:a4:a1:7e:e3:19:e6:81:
99:3b:14:29:46:80:14:2b:0c:c4:28:43:a6:ff:ca:11:43:3d:
95:39:76:f2:b2:8a:68:12:85:0c:64:24:1d:93:28:bd:04:0e:
2a:4d:de:1e:9d:e9:42:ff:d1:2a:f7:29:d5:ee:69:11:aa:00:
6c:10:33:bc:79:10:b4:e6:8d:ad:0e:68:9d:9f:59:1a:b9:e9:
77:1c:15:fd:bb:d4:b0:ca:cc:56:67:0e:3c:ac:63:f6:6a:2e:
44:82:91:b8:3b:a8:95:0c:22:f0:14:81:5f:e0:b2:8e:76:60:
08:f8:92:5a:8c:d2:c4:0f:fe:29:ad:bb:a1:2d:83:19:66:7c:
a5:28:6f:b4:f6:46:81:f7:d1:86:2d:9c:3e:59:fe:ac:d4:96:
03:8f:e2:4c:db:2d:af:67:92:af:8b:16:b6:64:48:c6:de:ff:
c2:a3:95:0b:e1:5d:aa:b5:fa:c2:ed:c6:c3:ba:5d:c7:45:55:
83:8c:34:d0:10:c8:d7:30:90:19:e2:06:04:74:52:86:c9:96:
7e:ba:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:07 2024 by rpki-client on console-ams.rpki-client.org