Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/P_ku7VQN6Dl8XNNJqgSn1QxE85Y.roa
File: P_ku7VQN6Dl8XNNJqgSn1QxE85Y.roa (raw, json)
Hash identifier: 3cOktOSB4TeNJoudDlG3mMMjJF/bEj8csdIurvxOC+0=
Subject key identifier: 3F:F9:2E:ED:54:0D:E8:39:7C:5C:D3:49:AA:04:A7:D5:0C:44:F3:96
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 018CC56EC7592D670A18361F3513986FB4E4
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/P_ku7VQN6Dl8XNNJqgSn1QxE85Y.roa
Signing time: Mon 01 Jan 2024 14:30:20 +0000
ROA not before: Mon 01 Jan 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48590
IP address blocks: 195.70.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c7:59:2d:67:0a:18:36:1f:35:13:98:6f:b4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Jan 1 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ff92eed540de8397c5cd349aa04a7d50c44f396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:cc:c8:a7:08:dd:f1:59:49:c9:95:f5:37:
61:f6:f1:5c:6d:7b:b4:5f:08:07:0d:76:9f:8d:49:
7d:98:0b:34:57:08:12:4f:17:da:7b:88:50:e0:db:
82:42:1b:f6:cc:ca:78:53:c1:d0:0f:fd:b3:9b:2c:
aa:e6:d0:08:98:72:8d:93:f2:ae:d8:0f:5a:7a:b1:
0d:9f:99:f3:30:36:91:82:3c:74:95:6d:9d:4b:44:
68:7d:71:88:a4:87:f6:6a:c4:48:03:7e:15:4d:0a:
55:e3:6f:3a:ef:0b:8d:00:1e:06:1c:e5:95:1b:dd:
0a:c4:e9:a4:e4:5b:3e:04:5b:41:51:b8:77:f8:63:
be:68:cf:4d:3d:67:15:5a:4b:92:5f:a2:ea:a3:d9:
07:e2:c0:40:58:71:0b:62:08:53:d3:43:19:1f:c4:
f0:e4:fb:2e:12:a6:58:e5:80:17:67:65:e7:50:e7:
29:a3:f4:09:9d:89:d0:f0:fc:c4:5c:b0:02:f3:8e:
fa:64:74:48:f7:1e:da:40:66:9d:b3:d2:47:d1:73:
d2:90:79:ba:70:d2:12:3b:c8:7c:81:6e:3b:8a:1b:
5b:1a:f4:da:ee:38:85:e6:a3:07:cb:e3:b3:ce:b0:
58:43:f0:f2:55:ec:47:81:f5:07:9f:1b:0c:de:1c:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:2E:ED:54:0D:E8:39:7C:5C:D3:49:AA:04:A7:D5:0C:44:F3:96
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/P_ku7VQN6Dl8XNNJqgSn1QxE85Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.70.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:24:42:a9:97:7e:77:75:33:96:85:44:e0:cc:3a:48:e8:44:
06:a6:b7:6f:94:e5:5f:54:9a:3a:af:92:e4:be:58:53:61:47:
d0:3d:49:8e:ff:eb:fe:ce:b5:35:13:21:d1:82:19:56:ea:0e:
c7:4e:9b:f7:a5:b3:9a:b7:fb:13:6d:3a:59:f0:8c:6b:82:50:
ed:4a:1c:48:70:e5:73:54:d8:ea:7a:24:22:a9:89:80:03:34:
c6:d2:b9:a5:68:ab:22:8c:69:72:dc:6f:08:59:bd:3d:13:f5:
e3:62:8b:e9:45:6a:d1:14:ef:a8:98:6d:93:7a:be:6f:c5:c8:
55:1c:eb:b2:4d:a8:bf:a9:4d:84:1e:9b:e5:52:55:cc:a6:f2:
4a:50:8c:da:e4:87:ad:9d:18:be:33:2c:f0:2c:da:6b:2a:a3:
cd:3e:1f:4e:02:19:e0:a6:40:f4:87:80:19:9e:7c:5f:2e:be:
bb:ee:36:db:f9:a3:d3:6d:63:7a:f9:16:c3:dd:0e:26:55:fb:
6c:25:ff:5d:71:a7:9f:f5:a2:80:de:37:60:fa:40:a5:ee:70:
22:c9:22:66:32:6b:39:8b:90:29:ed:35:b4:63:76:e8:97:ba:
61:bd:75:08:6f:4e:69:94:f1:3e:1e:fa:e9:ed:5a:21:99:2a:
e4:cb:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:37:22 2024 by rpki-client on console-ams.rpki-client.org