Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/5mw6sUz8PjLmnmu6txDsnPEk550.roa
File: 5mw6sUz8PjLmnmu6txDsnPEk550.roa (raw, json)
Hash identifier: 7cTqbcDxUOcVK6V2YP0EwHaeU0+/ZZvMf9tF+qm4Mg8=
Subject key identifier: E6:6C:3A:B1:4C:FC:3E:32:E6:9E:6B:BA:B7:10:EC:9C:F1:24:E7:9D
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 018CC79525E6E428159E62EB1ED822EF8558
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/5mw6sUz8PjLmnmu6txDsnPEk550.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202220
IP address blocks: 195.82.166.0/24 maxlen: 24
195.82.162.0/24 maxlen: 24
83.230.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:25:e6:e4:28:15:9e:62:eb:1e:d8:22:ef:85:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e66c3ab14cfc3e32e69e6bbab710ec9cf124e79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:cb:e4:76:21:68:bd:79:22:9b:06:d5:ae:
79:f5:28:0a:d8:1d:ab:d9:d0:e1:c8:f4:35:c4:a9:
55:b3:bc:66:a5:fb:04:7c:86:cd:b1:76:f5:d3:16:
47:3d:7e:03:a0:a9:b8:4a:13:44:0f:0b:7c:74:aa:
5f:e9:c2:43:42:35:37:80:f9:d0:b8:8d:5f:50:b8:
10:7e:48:46:3d:6d:8a:4c:09:bb:93:df:31:23:d8:
fe:8e:24:4d:6d:3f:e5:67:76:5a:d9:8c:8c:5c:68:
99:47:53:33:e0:a8:0c:11:09:5a:bf:a2:69:b6:00:
ea:c4:97:19:77:5e:b4:2e:d4:db:ab:4b:8b:45:1d:
98:12:da:b5:30:6e:de:c2:23:62:30:3b:f4:2b:a3:
7f:41:74:b0:b0:53:cc:5c:46:c3:be:70:f5:57:ce:
4b:49:7d:c0:77:6c:1c:f7:1e:75:c6:94:b5:18:4e:
6e:85:ec:9b:9b:25:9e:6c:5e:19:47:5f:cb:de:c8:
bf:17:4b:91:90:37:4e:cb:1b:bf:97:b4:50:10:50:
c0:32:8f:14:da:9f:9e:91:97:86:da:30:12:85:85:
da:cc:9b:6b:a6:c5:17:19:85:12:03:80:13:dd:58:
a6:7d:8b:de:fe:e4:6e:84:61:b7:2f:7b:f4:d5:52:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:3A:B1:4C:FC:3E:32:E6:9E:6B:BA:B7:10:EC:9C:F1:24:E7:9D
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/5mw6sUz8PjLmnmu6txDsnPEk550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.14.0/24
195.82.162.0/24
195.82.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5b:31:a4:56:1e:56:e0:49:e4:48:2d:59:52:9a:2a:2b:80:
69:c1:55:dd:10:73:ea:d8:99:f5:5a:b1:77:ac:26:c7:9e:98:
49:d4:a3:1f:2c:76:3d:2e:e5:51:e5:10:a6:fb:50:69:7e:b3:
65:e9:25:38:4d:f3:ad:40:93:34:ba:c3:76:1a:07:e8:9b:aa:
e2:2c:ca:e0:bc:b3:6a:e0:ed:06:ad:ae:5a:03:d3:5d:88:43:
b3:b7:bb:a6:52:8d:19:c0:6d:93:d1:7e:20:bd:52:96:6d:a0:
26:1d:ac:39:9b:50:cf:b0:ec:79:68:72:c9:5e:78:11:d4:35:
28:3b:99:69:37:bc:1b:12:9e:9c:1f:e4:ce:55:f3:2f:0e:fc:
ab:b7:3f:85:77:1b:10:8e:81:40:3b:34:55:41:9b:ce:e5:ca:
ba:2d:5c:34:80:02:4a:fe:c7:2b:4b:1a:c6:6c:7f:91:1e:fe:
3c:85:db:82:d4:c9:99:46:c2:c6:e2:79:61:2c:02:bb:32:99:
bc:c7:a9:53:43:82:9d:f2:8b:ce:0e:ea:70:1b:20:06:70:79:
17:1e:0d:0a:cc:2c:d6:1c:89:63:c2:6f:99:d0:59:13:20:c3:
04:9a:23:3f:be:60:60:c0:a0:4d:d8:fe:0c:68:a4:6d:71:ee:
36:92:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 08:55:49 2024 by rpki-client on console-ams.rpki-client.org