Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/rcNi5kLaobveiWdxcJo_qEqWuR4.roa
File: rcNi5kLaobveiWdxcJo_qEqWuR4.roa (raw, json)
Hash identifier: i9NFO+D6aGvupoiOsx769mtS/BRAd1ZBPSQDevj5Joo=
Subject key identifier: AD:C3:62:E6:42:DA:A1:BB:DE:89:67:71:70:9A:3F:A8:4A:96:B9:1E
Certificate issuer: /CN=e9938a1e9011f2269e67a63da380019d296d9983
Certificate serial: 018CC3B708B09751E9E8D99457BBCE1D4DF9
Authority key identifier: E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/rcNi5kLaobveiWdxcJo_qEqWuR4.roa
Signing time: Mon 01 Jan 2024 06:30:01 +0000
ROA not before: Mon 01 Jan 2024 06:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29051
IP address blocks: 195.47.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:08:b0:97:51:e9:e8:d9:94:57:bb:ce:1d:4d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9938a1e9011f2269e67a63da380019d296d9983
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adc362e642daa1bbde896771709a3fa84a96b91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:96:c6:81:a6:10:ce:34:20:b4:4c:99:e0:
d6:be:21:33:f0:22:3a:02:a2:23:c5:f5:8f:ec:ca:
1b:ec:41:25:0f:4f:05:48:60:e2:c7:1e:17:cb:20:
45:06:75:14:3a:bf:bc:d0:d4:d7:05:a5:6d:ec:52:
03:b1:0c:49:ab:c1:53:75:94:b9:69:9d:bf:27:60:
3c:93:19:a7:83:2c:41:8b:ff:16:fa:81:08:7b:1b:
32:3b:62:01:a4:3c:c7:02:c6:0c:f9:0d:b6:0b:49:
87:47:4c:8a:4c:70:ca:cf:cd:3f:98:63:ab:0f:c2:
98:de:d2:8b:8e:74:18:aa:97:1c:e7:71:d7:5b:59:
dd:21:df:9e:3e:de:79:cd:4c:bd:b1:b3:8c:d9:98:
74:6a:b0:e3:94:b8:88:31:68:53:8f:74:54:be:3d:
b7:a8:1e:f8:ed:37:1d:d1:03:fc:5b:14:47:73:77:
36:15:30:dc:0a:5e:ed:a5:0a:f8:e7:dc:92:f5:18:
c6:e3:c1:cb:b8:db:00:68:7d:0c:de:54:0a:42:d5:
15:25:90:28:64:9a:ea:44:b4:95:04:f6:48:f7:f7:
22:b2:c3:2a:1d:68:c8:f3:6e:05:c4:0c:7c:fa:e0:
0a:4c:c1:c6:54:0c:38:b5:b7:f1:3f:57:8b:9c:a4:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C3:62:E6:42:DA:A1:BB:DE:89:67:71:70:9A:3F:A8:4A:96:B9:1E
X509v3 Authority Key Identifier:
keyid:E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/rcNi5kLaobveiWdxcJo_qEqWuR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2a:9f:f7:16:b9:c0:82:f8:0c:20:2d:75:3f:d0:73:a7:86:
fb:b0:56:e9:19:15:05:31:c5:5a:39:78:97:c9:fa:0a:ae:23:
1c:a2:bf:7b:01:6b:f3:f2:56:56:d1:cd:10:ec:15:c7:5d:5a:
12:74:94:e4:ff:b3:d9:86:13:bc:07:02:60:e2:22:3e:69:67:
fc:db:6d:22:47:65:14:be:a7:d3:d1:9f:bd:cb:e6:ae:d8:14:
32:43:6d:4c:4a:55:65:68:1a:3e:5f:89:d3:d3:5b:41:86:dd:
5e:7c:4e:ad:a5:b2:f5:0b:e7:d6:d3:39:8f:66:c9:f6:72:03:
a3:4e:b2:55:f6:3c:ed:0b:52:2f:7c:4e:f9:58:39:11:19:e0:
b3:a2:bb:51:4c:d4:96:d2:dd:89:e1:47:d3:fa:4c:d1:ca:b8:
c3:25:19:e8:9c:10:ce:bf:b5:b7:cc:9a:05:be:af:10:42:23:
f8:74:11:99:17:72:d3:eb:fd:d5:0c:fd:38:3f:06:d7:51:42:
25:f2:7a:4d:43:5e:92:95:f0:47:0c:47:93:89:81:72:91:d2:
e6:ef:00:77:dc:8b:09:26:f2:1a:68:39:f8:01:60:4a:1e:c8:
6d:b0:e7:52:f7:f6:02:b6:6f:04:dc:d4:2b:77:da:9d:c2:e9:
9f:9d:61:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:50:27 2024 by rpki-client on console-ams.rpki-client.org