Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/5z0Mdc3N7HpRWB726LUfwP0jNfs.roa
File: 5z0Mdc3N7HpRWB726LUfwP0jNfs.roa (raw, json)
Hash identifier: Zf80PG4i3EFE4I8tKUoVZ+4U1vW1n5RSbvefWWni2ag=
Subject key identifier: E7:3D:0C:75:CD:CD:EC:7A:51:58:1E:F6:E8:B5:1F:C0:FD:23:35:FB
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 018CC3491FFC9187BAFA220F1CB9581A9851
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/5z0Mdc3N7HpRWB726LUfwP0jNfs.roa
Signing time: Mon 01 Jan 2024 04:29:58 +0000
ROA not before: Mon 01 Jan 2024 04:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47174
IP address blocks: 195.216.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1f:fc:91:87:ba:fa:22:0f:1c:b9:58:1a:98:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jan 1 04:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e73d0c75cdcdec7a51581ef6e8b51fc0fd2335fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:96:9a:97:51:13:7c:25:1f:a9:08:36:1b:8a:
66:00:37:1e:de:98:0c:9e:0c:15:d5:2b:81:11:6f:
6b:28:b3:68:3b:83:07:b0:8c:d7:07:72:2e:8b:0a:
b2:63:90:e9:1a:d5:da:8b:48:61:59:0f:9e:5b:27:
97:03:b1:c3:97:61:29:67:fe:95:96:f2:4f:93:13:
99:4b:c7:6f:e0:2b:d4:af:56:d1:d4:a2:b4:89:35:
e3:d3:38:50:33:4e:38:4c:16:1f:9f:61:15:fa:98:
6e:e4:5a:54:ff:46:1b:27:07:b6:24:0c:78:46:86:
4e:3e:d8:90:6f:1d:bd:19:53:f0:c7:cd:09:01:3a:
6b:3e:11:77:16:5c:dd:9d:f8:01:c0:6f:ab:66:0d:
bb:fa:21:79:4a:f0:c8:67:5b:64:33:b6:7c:77:68:
8b:01:fa:5c:2d:30:88:2a:04:e7:53:02:a1:3c:59:
61:48:b9:53:df:48:0b:88:68:3c:1f:a3:2a:0b:e1:
df:4f:37:b7:ed:35:a3:bd:ed:ba:77:00:7c:c3:fb:
66:fb:42:68:40:25:b4:9b:a2:15:92:4b:e7:41:fe:
ae:46:fb:bc:70:b7:24:42:f4:5d:ed:5c:9e:d2:6e:
35:fa:85:c5:b9:76:4a:bb:37:98:f7:6d:73:1a:1d:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:0C:75:CD:CD:EC:7A:51:58:1E:F6:E8:B5:1F:C0:FD:23:35:FB
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/5z0Mdc3N7HpRWB726LUfwP0jNfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.228.0/24
Signature Algorithm: sha256WithRSAEncryption
91:33:71:5e:6b:de:bb:2e:dd:ee:42:39:41:9c:2b:b3:30:f3:
ba:e2:c7:89:48:99:2a:fe:08:14:d2:ab:77:1d:14:85:84:c2:
19:5b:6d:73:ae:0c:3e:92:40:12:48:6e:9f:d7:8b:d8:8f:03:
77:20:e7:f7:3f:74:21:69:b4:c3:e9:5f:00:d9:07:20:bb:4b:
5b:a6:a9:0d:df:0f:97:40:0d:bc:2b:0a:81:40:97:68:d6:66:
5a:2d:1e:42:8b:4b:ca:f6:71:fb:d9:3b:c8:67:13:f2:a3:9a:
1e:44:68:17:fc:0d:05:5e:d5:96:25:69:c1:a8:ad:96:32:d2:
11:65:57:24:19:c8:4b:cb:40:5e:07:0b:08:c1:ec:91:85:48:
69:4f:26:93:f4:0d:20:17:b7:42:4e:b1:49:bc:6d:d3:87:f7:
ab:91:8d:46:67:08:1d:20:2b:90:64:32:e5:de:3e:5f:ec:00:
2d:b5:29:78:c4:b4:d2:81:e9:3a:8d:55:5c:db:ba:fc:7b:06:
50:b3:c9:bd:b2:d3:bb:ad:35:3a:a2:b9:f0:38:7b:fc:14:ab:
20:0d:51:94:8f:e8:34:f2:23:0a:64:67:a8:e1:e5:80:dd:f6:
d2:18:fe:6e:90:6b:cd:ec:e4:3d:28:58:83:b8:5b:d7:22:a1:
dd:26:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:47 2024 by rpki-client on console-ams.rpki-client.org