Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/sCbFYcKoRagln4YYIS2Anq3QgQw.roa
File: sCbFYcKoRagln4YYIS2Anq3QgQw.roa (raw, json)
Hash identifier: QVYHTg5mb/bjGDeCh9hvq7dTGCuDvnJ8wSKHu+HQnF8=
Subject key identifier: B0:26:C5:61:C2:A8:45:A8:25:9F:86:18:21:2D:80:9E:AD:D0:81:0C
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 018CC26CF0874EEE5FEB9ED6987B78709B98
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/sCbFYcKoRagln4YYIS2Anq3QgQw.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41513
IP address blocks: 195.3.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f0:87:4e:ee:5f:eb:9e:d6:98:7b:78:70:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b026c561c2a845a8259f8618212d809eadd0810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:64:ca:8d:33:4b:24:e1:e5:4d:af:9c:55:
dc:d2:17:8c:59:94:5e:2c:3a:0c:17:64:ef:f9:f3:
b2:b1:d8:be:21:db:fa:33:14:b1:b4:02:08:cf:8e:
d2:6e:50:50:08:7b:89:d4:43:a7:72:22:f1:e4:2e:
9b:b9:1d:23:93:53:f0:b5:b1:49:4d:4f:87:4e:4f:
21:f9:fd:76:06:f6:64:06:25:e5:f6:27:5b:7d:1e:
8e:51:cf:86:37:55:d1:82:3a:a6:0a:21:be:e8:03:
39:0d:42:25:24:82:01:0e:f8:8e:1c:30:27:17:99:
b7:8b:68:6d:d5:74:21:45:ba:f6:e2:94:23:0f:f9:
f0:88:b9:d1:5e:59:bf:0d:e3:6e:7c:69:79:44:bf:
45:1d:3d:d4:9e:39:ea:d5:8f:9d:49:e7:22:72:4d:
c7:81:76:92:f9:43:75:d7:6d:f4:49:b0:c3:6a:23:
c5:4c:1a:0d:1a:e6:05:c0:a8:1d:0f:50:e7:43:7a:
9f:03:4e:f6:4a:b7:42:7a:25:e4:04:61:05:f0:2c:
e9:71:41:4b:3f:03:cc:ec:f8:ed:66:7e:4a:59:1f:
7b:94:9c:d4:da:ef:83:f1:33:64:35:f6:1e:40:5f:
c5:b9:61:32:1e:29:d7:06:12:c1:f5:54:c8:32:ab:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:C5:61:C2:A8:45:A8:25:9F:86:18:21:2D:80:9E:AD:D0:81:0C
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/sCbFYcKoRagln4YYIS2Anq3QgQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.3.224.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:a8:c9:20:6b:7f:af:66:8e:3e:d4:68:01:3c:6b:0e:b5:ad:
9e:c8:b5:9f:70:54:32:89:68:a6:d0:ef:7b:a2:25:38:19:a2:
f1:3e:34:6e:17:e8:54:28:67:be:4e:59:af:e1:0a:72:ac:7f:
fb:c7:e1:77:eb:4d:54:5c:1c:19:5a:b9:e5:0b:48:b9:36:b3:
41:8b:45:e5:e5:5a:ba:2e:5d:b0:ea:80:bf:29:41:c2:2f:f1:
d4:91:49:9b:37:dc:4b:21:2c:ce:01:8f:3b:16:69:11:c6:1d:
b8:a9:a3:6f:76:f3:34:f4:f2:e5:35:f7:47:fc:1b:f9:9f:30:
89:48:44:98:6e:fa:c2:08:d9:76:c1:e7:e9:35:81:a4:2a:52:
44:85:fa:ba:a6:96:1f:82:8c:de:f6:0b:a4:8a:90:cf:85:0e:
b1:e7:ec:4d:19:cd:ce:f8:60:f6:c3:cc:29:59:81:3c:cf:c2:
67:4c:c1:cc:68:7a:b4:09:3d:00:26:23:b2:15:a6:25:78:5e:
b6:57:6f:0f:6f:0d:ee:99:3c:24:17:42:1b:64:b3:05:ea:e5:
64:c1:6c:fc:51:31:b1:63:e2:6b:6c:0d:8a:70:bb:a0:ac:2b:
73:35:98:88:d2:67:c0:ea:3e:a6:3c:1b:3f:6f:ac:c2:f0:d7:
91:ff:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:21:28 2024 by rpki-client on console-ams.rpki-client.org