Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1TOaDNh467FMdV9fR1xQJ7yxO6Y.roa
File: 1TOaDNh467FMdV9fR1xQJ7yxO6Y.roa (raw, json)
Hash identifier: p26bUvCoYZdLpeZzE53BZnbVL0gDG/lG5CiG+WbY8+Y=
Subject key identifier: D5:33:9A:0C:D8:78:EB:B1:4C:75:5F:5F:47:5C:50:27:BC:B1:3B:A6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE14341D739C1CC325FE46BD99357
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1TOaDNh467FMdV9fR1xQJ7yxO6Y.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204953
IP address blocks: 195.136.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e1:43:41:d7:39:c1:cc:32:5f:e4:6b:d9:93:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5339a0cd878ebb14c755f5f475c5027bcb13ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b2:ef:46:99:4c:a4:bb:ad:1d:34:2d:09:88:
bc:ec:99:0e:f2:fb:0a:bf:9b:2f:a3:e1:35:4f:a0:
60:c8:e6:08:f1:1d:a3:80:de:cb:77:9c:45:3e:bc:
b7:20:a3:47:64:c0:8d:d2:42:35:bc:40:d5:7b:14:
3f:73:c5:9e:b7:4e:01:d8:cc:87:80:91:04:69:aa:
d6:08:25:6f:06:6b:3e:54:ab:f8:6b:71:eb:ab:a9:
40:14:58:98:5b:a2:01:5d:ad:32:ba:1a:da:fe:89:
93:d5:07:12:a2:1b:ee:c3:ee:d8:98:12:2f:ce:b4:
05:5e:a1:9c:a0:25:ac:2f:25:61:18:12:b0:91:ca:
3c:22:bc:a6:c5:8e:fd:2f:2e:9a:eb:32:1a:6b:e5:
3e:b9:ef:68:f2:5e:ed:bc:47:96:f4:40:e6:7c:42:
70:f5:87:3e:14:72:f8:bb:91:32:84:69:46:38:9e:
02:07:08:d9:8f:03:8a:c8:65:56:14:9e:76:0a:20:
c3:5f:49:4e:83:83:1e:d2:67:38:6d:01:38:f4:02:
33:a2:92:b9:b5:7f:55:e0:7f:e5:d0:bc:d1:36:67:
7c:4a:9b:f4:a6:e9:27:ae:6a:99:6e:a0:cd:df:c5:
e6:93:e7:dc:08:b7:da:a5:6e:4f:b4:77:ae:9d:b1:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:9A:0C:D8:78:EB:B1:4C:75:5F:5F:47:5C:50:27:BC:B1:3B:A6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1TOaDNh467FMdV9fR1xQJ7yxO6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.154.0/23
Signature Algorithm: sha256WithRSAEncryption
11:94:b9:24:e8:cc:dc:37:4f:fb:51:10:12:8e:62:8c:18:3c:
b0:10:5c:39:80:c1:c0:bf:b6:cb:8a:ce:48:a1:f1:9a:7f:ec:
90:e7:d3:f1:a5:51:61:51:b5:4c:7f:43:51:46:f4:6d:37:b1:
97:4c:26:63:9f:09:e6:33:36:30:23:9c:77:89:6a:dc:9e:2e:
e0:c6:13:3f:ea:b4:4d:4c:1b:b2:b4:51:2a:fd:b3:18:d2:ee:
13:7e:9f:71:0c:a6:1c:23:11:9a:a5:74:82:fc:ea:5e:1f:da:
b1:5b:88:cc:2b:90:e4:95:21:4c:8f:e5:df:80:eb:15:df:f9:
0c:a7:78:e0:13:f9:f7:a0:33:74:b5:4e:ca:53:68:f8:2c:bd:
25:75:44:8a:ec:11:f2:d2:05:65:07:56:65:62:4b:df:1b:71:
d0:c6:2d:c5:03:f6:fa:f1:83:44:e4:c3:da:99:90:cc:c9:c6:
50:f9:67:f1:bf:ec:cb:78:0d:b5:05:e4:2c:bf:34:0d:e9:2d:
0c:b3:38:e3:d9:b5:36:b6:df:8b:bc:b6:9d:ec:ea:5e:a7:ef:
2e:b7:d9:57:40:3e:ad:f4:78:f2:39:2f:21:9b:31:24:ba:fe:
5d:42:76:70:3f:0d:4f:2f:a4:cd:17:5d:5e:a4:7d:cc:5c:d0:
d4:ef:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:14:50 2024 by rpki-client on console-fra.rpki-client.org