Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lZgdKRUZf3rLqmfkFW-jBIrG7xg.roa
File: lZgdKRUZf3rLqmfkFW-jBIrG7xg.roa (raw, json)
Hash identifier: OKnaEK2fsPWxbvS194TjtGvxMzb8uzWvaKxv5b0lYjY=
Subject key identifier: 95:98:1D:29:15:19:7F:7A:CB:AA:67:E4:15:6F:A3:04:8A:C6:EF:18
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DACC070A2610DD15281A0EA11F5466
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lZgdKRUZf3rLqmfkFW-jBIrG7xg.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25070
IP address blocks: 195.136.174.0/24 maxlen: 24
195.136.182.0/23 maxlen: 23
195.136.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cc:07:0a:26:10:dd:15:28:1a:0e:a1:1f:54:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95981d2915197f7acbaa67e4156fa3048ac6ef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:ae:13:de:4a:07:13:d6:b2:3a:7c:78:30:
aa:77:a4:7c:8f:f7:6d:49:ec:66:00:92:35:1a:3e:
bf:30:b7:a5:b6:a0:f4:f5:1b:aa:17:5f:db:b6:41:
f6:77:fa:4d:de:5a:e4:7c:d7:1c:40:13:1e:1b:a3:
4a:46:e6:ea:c3:4b:06:de:1a:e1:84:a1:f5:2c:49:
16:06:79:c6:f0:da:f3:72:ef:c8:eb:94:0f:e2:36:
15:2d:99:85:97:0f:b5:03:8b:47:0f:ff:e1:1b:55:
79:8d:81:70:bf:72:a5:bd:91:41:7a:34:d2:71:55:
77:7f:5a:bc:f8:f5:fa:d1:20:6a:0e:2f:71:87:04:
81:8b:5f:d1:ad:99:18:f7:a3:20:45:53:fb:51:c5:
be:92:f7:7a:b8:6d:0f:8a:8a:b3:ac:b6:35:19:29:
4d:b9:b6:89:1a:23:b9:4a:85:82:46:e7:73:63:8f:
5d:ab:c5:b4:43:bf:07:0d:b1:e7:a3:19:3a:45:d5:
81:e8:c2:5b:05:93:58:0f:53:7a:ff:95:53:6b:bc:
62:4c:3e:19:25:13:a4:2f:30:5d:ba:74:e2:6b:32:
a3:33:c8:a4:63:75:74:fc:6b:c4:df:ae:89:57:da:
dd:8e:56:7e:0e:6b:b7:8f:ad:45:0d:5d:69:94:68:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:1D:29:15:19:7F:7A:CB:AA:67:E4:15:6F:A3:04:8A:C6:EF:18
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lZgdKRUZf3rLqmfkFW-jBIrG7xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.174.0/24
195.136.180.0/22
Signature Algorithm: sha256WithRSAEncryption
52:d4:37:bb:44:8a:44:7d:5e:3f:3c:eb:8a:bc:aa:06:85:49:
d4:03:26:d4:b8:79:0c:27:75:e8:34:e9:f1:a5:10:b3:a7:c1:
a1:61:a9:32:26:aa:b6:df:c2:2b:e8:1c:39:9a:22:e5:3e:d9:
af:b0:ad:f2:37:bb:86:d7:0e:31:32:8b:66:c1:82:30:1b:85:
9f:69:e8:43:c2:6f:4f:e4:0a:e3:d7:2e:33:20:cd:e0:64:7c:
05:de:4c:3a:de:c0:b3:1a:7d:bc:cc:76:42:b7:db:fd:47:ca:
99:17:94:b4:7d:8f:7a:2f:3f:57:df:2e:1e:c2:48:f9:23:d8:
d5:fd:59:d4:12:3a:3a:d7:01:1f:dc:48:6b:e5:40:40:57:9e:
60:59:d9:3e:b7:bb:a4:a4:a0:0d:ea:fd:f2:d6:39:7a:ed:56:
f0:de:bf:33:5b:fa:95:46:08:a1:ba:0d:34:2e:3f:3d:cc:ab:
1d:15:c6:0f:52:6c:00:14:0e:12:38:5e:a5:57:65:68:e3:96:
c4:b2:50:24:38:1b:e9:45:c0:7f:09:91:bc:47:22:34:e8:e3:
d6:4b:c8:64:21:b7:79:1b:fb:31:cd:c7:2b:00:d2:b6:91:99:
ec:0f:5f:5d:45:d9:d9:f6:2b:f8:5a:7c:89:8e:61:29:aa:ab:
45:96:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:42 2024 by rpki-client on console-fra.rpki-client.org