Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/W2VhAEgCj81N7Fcfw7FQT9yT9eg.roa
File: W2VhAEgCj81N7Fcfw7FQT9yT9eg.roa (raw, json)
Hash identifier: fxi2DoEdmbvk1jREowre/cj7fyQrwjbegjUDNvaXIzA=
Subject key identifier: 5B:65:61:00:48:02:8F:CD:4D:EC:57:1F:C3:B1:50:4F:DC:93:F5:E8
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 018CF90A987FFD1CE41FB7AEDDF287CD99DE
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/W2VhAEgCj81N7Fcfw7FQT9yT9eg.roa
Signing time: Thu 11 Jan 2024 15:01:10 +0000
ROA not before: Thu 11 Jan 2024 15:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15962
IP address blocks: 195.78.44.0/23 maxlen: 23
195.3.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:0a:98:7f:fd:1c:e4:1f:b7:ae:dd:f2:87:cd:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Jan 11 15:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b65610048028fcd4dec571fc3b1504fdc93f5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:50:b9:cb:cf:bc:56:22:77:8b:da:a5:b2:
d5:1a:6e:5d:c1:c7:ad:86:fd:3f:6d:76:97:d2:f8:
e9:e7:92:11:6f:00:dc:db:93:20:ea:ed:ec:d5:ec:
24:2d:7d:16:44:bd:03:3a:2c:a4:39:f9:24:4a:e8:
af:1b:5d:fd:7c:32:7e:99:d7:2c:b4:61:db:e2:c1:
0e:a6:e3:4e:f8:9b:ee:41:9c:90:15:92:88:95:96:
88:46:6a:e1:87:3a:ae:d6:6a:5f:04:1d:c6:ce:c0:
6a:69:fe:5b:c2:da:66:74:ec:e5:bf:82:41:e1:f6:
6a:11:44:d4:8b:90:25:88:b0:4d:8e:f3:df:44:07:
65:a1:b2:dc:5e:34:93:ed:e5:d8:e6:80:0e:d0:fe:
15:78:14:92:ca:ad:be:88:af:e5:c9:96:2c:21:28:
94:0f:20:fc:9f:86:7f:98:6f:32:83:a4:1d:75:f9:
ba:90:38:1c:cd:85:05:c4:47:b8:57:42:2a:af:8c:
b7:61:26:69:92:b8:5a:4a:c2:8e:13:f0:24:25:f6:
bf:5b:64:4d:ee:99:30:36:2f:77:e4:e3:e7:2e:2f:
6d:28:c2:fe:db:15:22:3d:72:36:27:6a:3b:8c:3c:
41:19:d3:ad:c5:63:56:b2:40:84:a4:3b:c5:42:dc:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:61:00:48:02:8F:CD:4D:EC:57:1F:C3:B1:50:4F:DC:93:F5:E8
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/W2VhAEgCj81N7Fcfw7FQT9yT9eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.3.168.0/22
195.78.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:ea:14:31:f6:57:eb:59:45:13:04:88:4d:57:8e:16:4a:7a:
b1:94:42:a2:8c:7a:6e:e7:c3:17:71:73:28:f3:66:32:d5:6b:
ee:97:71:d5:1b:b0:02:c0:36:64:4a:9a:28:32:79:80:a6:89:
c4:df:f7:0e:c2:f8:8d:7d:1f:b1:85:64:b4:a1:ae:22:bd:28:
01:81:24:f8:23:31:e6:3e:b4:63:44:38:3f:81:c0:dd:f2:6f:
e4:44:9d:09:84:3e:cb:48:35:48:52:73:74:5d:cb:17:0f:e0:
2e:83:22:4c:3b:04:97:b2:3e:b0:c0:2b:af:ac:08:1a:07:f9:
ee:fc:f9:c8:4e:2d:a8:c4:39:09:08:c1:18:61:d7:8d:22:75:
4b:74:4b:65:12:d7:c8:e3:66:47:fc:be:9c:a4:be:fc:8d:a3:
26:c6:b3:5d:cb:f9:a9:2f:c9:c6:6d:c2:ec:fc:9c:79:a3:d6:
23:ca:3f:48:d9:32:f7:bd:2e:7d:e5:02:7e:43:f2:70:24:06:
b9:d8:d0:50:25:8e:de:09:59:c9:69:e8:07:b1:cb:cb:3d:a2:
d7:4e:70:e8:e8:fd:97:b0:4b:b5:c1:92:c3:28:05:92:2f:3e:
f8:f3:ca:47:29:f2:ef:4f:c6:1d:d5:43:49:0e:83:67:9b:0e:
0e:b4:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:27:51 2024 by rpki-client on console-ams.rpki-client.org