Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/4yY4mMsmmsRFpFMKfH685azAc6A.roa
File: 4yY4mMsmmsRFpFMKfH685azAc6A.roa (raw, json)
Hash identifier: zys86IbUhv15F6BGtpp6dKIhbX0gLZJU7Voixb3dvA4=
Subject key identifier: E3:26:38:98:CB:26:9A:C4:45:A4:53:0A:7C:7E:BC:E5:AC:C0:73:A0
Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial: 018CC725DF987FC42946BC84C01EACC55081
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/4yY4mMsmmsRFpFMKfH685azAc6A.roa
Signing time: Mon 01 Jan 2024 22:29:57 +0000
ROA not before: Mon 01 Jan 2024 22:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51738
IP address blocks: 195.162.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:df:98:7f:c4:29:46:bc:84:c0:1e:ac:c5:50:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Validity
Not Before: Jan 1 22:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3263898cb269ac445a4530a7c7ebce5acc073a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:0e:11:f8:5b:88:9b:5e:8f:89:d7:4e:55:
16:fe:6b:02:d5:a7:a0:da:8b:92:78:39:0e:79:a8:
2e:3f:e3:87:3e:b3:5b:e7:7b:d4:8b:03:4e:d5:62:
a4:d5:8e:eb:f7:4a:c3:9b:d0:8f:c8:60:ac:90:9f:
c7:a8:1f:24:66:05:2a:ba:8c:bb:55:fa:48:be:16:
d7:17:c9:5d:a7:28:ce:ae:fb:d4:54:6c:ea:76:70:
bf:a5:f2:06:cf:65:42:35:a9:85:a7:f3:30:1f:7a:
a7:6c:45:fa:b7:aa:ac:99:31:22:30:6d:4f:05:af:
0a:f7:81:7e:4d:23:b5:2b:f2:a5:7e:c0:40:d8:92:
b3:0b:27:fc:bf:41:b5:74:f9:cd:08:c8:cc:69:ba:
53:49:f6:8f:9e:02:87:e1:b3:6a:56:84:cd:e2:7e:
ab:d6:dc:6f:35:d4:1a:6b:fa:e6:54:4d:98:4e:3b:
2c:a9:16:0c:da:22:de:99:01:46:d5:25:b1:d0:a9:
0b:16:12:d9:3a:3c:24:76:4d:27:79:23:f8:e0:c0:
dd:ee:5d:ad:70:46:f3:40:d6:cc:3e:bf:57:e3:ad:
de:a9:51:2f:9b:71:7c:cd:eb:79:87:e0:69:60:49:
7a:3e:22:4b:0b:8e:d4:f1:71:07:63:5d:8e:ea:bf:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:38:98:CB:26:9A:C4:45:A4:53:0A:7C:7E:BC:E5:AC:C0:73:A0
X509v3 Authority Key Identifier:
keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/4yY4mMsmmsRFpFMKfH685azAc6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.64.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:81:28:1f:82:69:0e:6e:19:ab:d9:be:85:cf:e4:bb:92:69:
f1:d4:24:de:3d:4c:90:64:35:06:2f:20:dd:81:f0:77:9a:ea:
67:c6:08:10:1f:a4:f1:22:d7:c1:e6:de:a0:ba:ec:37:17:93:
b1:07:5c:7b:d3:ac:92:95:45:d6:32:85:be:0b:45:6c:ca:e7:
12:9f:3e:fe:ed:44:18:41:56:24:20:3d:6d:88:56:f1:ce:f4:
21:19:1c:43:b6:93:e2:57:5d:a9:3d:33:6c:2d:0f:4b:12:ce:
b3:d3:bd:3d:b9:40:d5:70:b5:72:06:df:59:10:94:8b:e9:b8:
06:41:f2:c2:2d:65:cc:f0:91:b6:9d:40:e3:d5:1a:92:8a:52:
1b:30:bf:da:21:a1:96:34:72:a2:66:03:25:c4:e4:63:df:98:
2b:3d:04:8b:38:01:c6:a5:14:43:1e:33:71:0e:71:7d:5b:2f:
9b:fc:63:27:c8:46:51:81:4a:af:a6:c9:9e:f1:a8:08:2b:04:
6d:6a:95:ad:83:77:71:4e:76:44:2e:65:07:e9:c6:14:e4:a1:
4e:3e:b0:c4:1a:4c:72:e1:db:a8:c4:c0:30:f2:3c:33:49:24:
a8:fc:b3:4f:2b:78:5d:5b:c1:aa:51:b4:33:90:59:b6:03:b0:
d2:cb:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:29:33 2024 by rpki-client on console-fra.rpki-client.org