Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/PhV_tsKZnei58iwXwDeSLep-nrU.roa
File: PhV_tsKZnei58iwXwDeSLep-nrU.roa (raw, json)
Hash identifier: bJ7n3SxAZ1X19PAYACWN/fXzFCykPAc9KpkO29LxdiY=
Subject key identifier: 3E:15:7F:B6:C2:99:9D:E8:B9:F2:2C:17:C0:37:92:2D:EA:7E:9E:B5
Certificate issuer: /CN=9666c238f7ffdacf15c802e320b52e0980869cec
Certificate serial: 018CC5DC323CE02A121F9A9F467435ACD98D
Authority key identifier: 96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/PhV_tsKZnei58iwXwDeSLep-nrU.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197864
IP address blocks: 195.225.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:32:3c:e0:2a:12:1f:9a:9f:46:74:35:ac:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9666c238f7ffdacf15c802e320b52e0980869cec
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e157fb6c2999de8b9f22c17c037922dea7e9eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:a9:c4:fe:03:c8:7c:e0:64:16:02:e5:4a:
82:a5:3b:c0:eb:fa:b9:53:4c:d9:9e:a2:64:7d:6f:
92:93:2d:29:19:60:82:c7:c6:04:bc:fc:ca:6e:e0:
a3:5e:d9:36:f4:db:06:fe:80:11:c2:0a:02:0e:60:
14:a1:24:e6:50:f0:bf:b8:5f:7a:52:02:bd:c7:ac:
35:7d:09:a3:c3:0f:b6:62:a7:22:08:84:21:01:24:
44:9c:c8:26:0c:af:48:99:ad:dc:05:83:86:99:94:
db:ea:04:b7:d7:ae:49:3e:07:5d:9b:f1:d1:d9:e2:
96:b1:89:66:50:41:76:eb:0d:da:f3:2f:30:dd:f3:
6a:95:17:fc:d0:07:24:f8:57:66:6d:63:61:96:a6:
e6:40:db:4d:a5:7e:4e:c0:4f:26:c7:1f:dc:42:2f:
4f:6f:f2:46:0c:a9:e7:0c:17:5a:b6:6a:41:f5:02:
f1:fc:fe:a4:e2:38:4e:3a:59:dd:ec:29:c9:e8:d3:
5f:9a:fe:21:a5:24:a7:f1:d4:db:22:bd:c8:b3:20:
1d:d2:96:aa:dd:db:6a:71:e6:5a:25:36:a1:f1:8b:
75:2e:a3:17:a1:b1:37:ef:f8:1b:f6:9a:45:d4:a5:
2d:36:21:10:33:2e:a3:3e:64:ac:56:a6:5f:97:66:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:7F:B6:C2:99:9D:E8:B9:F2:2C:17:C0:37:92:2D:EA:7E:9E:B5
X509v3 Authority Key Identifier:
keyid:96:66:C2:38:F7:FF:DA:CF:15:C8:02:E3:20:B5:2E:09:80:86:9C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmbCOPf_2s8VyALjILUuCYCGnOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/PhV_tsKZnei58iwXwDeSLep-nrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/50753a-91aa-447b-b232-a000d769e026/1/lmbCOPf_2s8VyALjILUuCYCGnOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b1:a0:1c:81:db:56:98:85:a8:30:bd:d8:ee:96:d3:54:7d:
1f:05:19:fe:f3:49:da:40:4c:00:7a:85:f5:d6:23:e4:38:6b:
44:01:08:61:d1:35:09:ad:c5:3f:b1:d6:38:87:64:6d:99:e4:
a3:e2:22:ff:01:a7:da:f6:9f:f4:82:54:fe:6e:e9:f1:59:a5:
ff:76:b9:4d:30:cc:96:23:66:7d:ca:66:8d:c7:3c:a3:10:3f:
62:ef:fd:cd:3d:ea:96:d0:29:de:0b:37:20:bb:d7:28:0c:fe:
00:28:20:b1:2e:51:d4:aa:cd:fc:66:68:d0:4e:39:a6:27:70:
4b:da:29:69:8a:bd:32:12:57:77:6c:35:5e:85:1e:17:2e:fa:
f8:7f:03:9a:d6:48:90:f5:12:0f:0b:05:92:d6:07:0d:3e:aa:
1a:86:f9:e5:c6:6c:69:74:4f:75:71:53:60:d3:c9:d1:7c:95:
a6:af:80:ad:49:b2:24:8f:f4:4b:66:b1:fa:86:95:3d:7a:e2:
aa:f6:c4:d5:7f:bb:3c:e8:00:b3:93:3b:cb:a6:fd:43:d9:d6:
f1:22:72:03:d6:41:24:32:44:e5:5f:8c:51:8e:5a:40:72:db:
9c:81:24:bc:91:de:53:27:71:97:08:e9:2e:6e:48:9e:b1:4a:
5a:63:b8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:52:26 2024 by rpki-client on console-ams.rpki-client.org