Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IQ2FhBsSD9OQPGcEhfEwZ0H2RvA.roa
File: IQ2FhBsSD9OQPGcEhfEwZ0H2RvA.roa (raw, json)
Hash identifier: I+X2aK528haIOF1TVE2o0x5VLf4Leig1qidJsnUo/g4=
Subject key identifier: 21:0D:85:84:1B:12:0F:D3:90:3C:67:04:85:F1:30:67:41:F6:46:F0
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DADB8EA8FE380D49CD7FE8E7719761
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IQ2FhBsSD9OQPGcEhfEwZ0H2RvA.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199390
IP address blocks: 195.136.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:db:8e:a8:fe:38:0d:49:cd:7f:e8:e7:71:97:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=210d85841b120fd3903c670485f1306741f646f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:47:73:72:3f:87:55:83:42:ac:da:8c:f3:
46:82:0b:2e:f1:2f:fe:6b:66:d7:b5:52:34:94:56:
ee:69:00:3e:2d:e1:16:03:4c:fe:ab:a2:74:ee:18:
f6:a7:d0:b2:0c:3f:0d:05:55:39:39:ff:a7:a5:0b:
87:16:b3:f5:70:ac:85:09:ab:0a:e9:57:d5:6f:45:
5c:68:25:46:0c:f2:c2:42:fb:e5:12:c4:c1:42:70:
11:4c:34:cc:70:ea:c5:57:09:38:9b:bf:c5:b9:45:
c9:06:0c:39:b2:02:7c:4d:cc:8a:c2:63:5a:c8:c0:
2d:ad:64:71:74:8e:12:85:a1:bf:94:22:00:0a:d7:
20:92:be:a6:e1:d5:63:69:50:ba:76:80:a2:fe:d0:
05:c3:ad:11:bc:58:7e:9f:fc:3c:59:6f:13:bd:ad:
7e:6e:16:0f:d5:41:a0:c7:08:7f:50:88:07:4d:96:
19:a5:92:56:47:19:b2:a5:46:7c:4a:83:94:3a:57:
98:e1:b5:ec:33:6a:99:78:e0:fc:6c:9b:8e:58:c1:
cf:97:8a:be:4a:14:3e:5c:c6:f2:90:9d:3a:a2:a9:
b7:50:9c:05:60:3c:00:6e:a9:56:a4:df:f5:07:b4:
aa:fb:8f:1f:68:b5:d5:c0:53:36:a5:10:68:61:ec:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0D:85:84:1B:12:0F:D3:90:3C:67:04:85:F1:30:67:41:F6:46:F0
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IQ2FhBsSD9OQPGcEhfEwZ0H2RvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.176.0/22
Signature Algorithm: sha256WithRSAEncryption
69:2b:09:2f:55:af:f8:4f:61:df:34:a3:f6:23:86:3d:f4:a8:
2a:b6:17:0d:60:21:88:b0:bf:ab:53:1b:33:51:27:a9:58:56:
20:c5:73:6e:f1:75:3f:6e:84:7c:99:c2:df:90:b8:3c:11:25:
ff:83:b0:75:37:3c:5f:98:50:52:bc:dd:34:ec:be:bd:35:56:
8f:e6:d6:3e:7d:74:98:b4:cc:50:9c:89:b1:af:1e:91:78:b3:
ec:0d:d5:15:ae:a4:e1:fc:3e:81:47:13:29:54:0c:b4:78:38:
6e:d8:d2:1a:37:2a:a1:9d:58:5e:03:86:3e:9b:f0:65:db:f2:
8f:51:c5:aa:ff:00:da:79:cb:6c:b0:79:f8:f6:ae:ce:9b:16:
68:0f:e0:5a:f4:53:fa:c0:aa:74:6c:2c:36:52:85:e5:7c:22:
4c:81:40:ee:6d:ea:58:8d:53:c1:d3:d2:6b:08:7c:4d:c4:03:
bd:45:1c:55:23:85:59:68:cd:ce:58:c7:69:14:65:ec:4d:9a:
f7:45:45:cf:06:91:7a:2e:19:15:78:e1:1b:26:53:59:5b:de:
95:b4:55:bc:9f:df:ad:e3:c1:b8:74:32:08:6b:e6:21:02:5b:
b7:e6:9b:57:02:0c:d8:c6:2c:b2:dc:9d:12:5d:41:20:66:7c:
97:26:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:51:54 2024 by rpki-client on console-ams.rpki-client.org