Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/0Ghaxxck7EaxOBAnTnbPjaDfDxI.roa
File: 0Ghaxxck7EaxOBAnTnbPjaDfDxI.roa (raw, json)
Hash identifier: nn/na35GPpBioYwuN5gcd0Khq5O1C/l9jUHgUIAnKGg=
Subject key identifier: D0:68:5A:C7:17:24:EC:46:B1:38:10:27:4E:76:CF:8D:A0:DF:0F:12
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 0191FAEF8D6CF730B332935601D426793876
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/0Ghaxxck7EaxOBAnTnbPjaDfDxI.roa
Signing time: Mon 16 Sep 2024 13:04:48 +0000
ROA not before: Mon 16 Sep 2024 13:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50300
IP address blocks: 195.60.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:ef:8d:6c:f7:30:b3:32:93:56:01:d4:26:79:38:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Sep 16 13:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0685ac71724ec46b13810274e76cf8da0df0f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:a9:19:4c:00:ca:72:9a:82:34:d1:25:b5:
c6:47:85:06:0c:4f:f2:ed:a4:0c:a3:dd:af:8e:89:
40:5d:a1:82:c0:41:da:58:82:c2:d5:c4:24:e9:1c:
05:75:2b:d2:d0:d9:3c:d9:d6:97:a9:8c:28:e6:bc:
99:b3:fa:8f:8b:c2:49:7a:a9:1a:51:65:0b:99:86:
09:2f:49:d4:b4:32:40:9c:57:cc:09:fd:17:99:07:
6b:34:30:60:bf:c1:03:65:c9:0c:69:e7:bd:9a:34:
ad:9f:c4:9a:57:0d:89:77:3c:74:8e:d4:19:48:f1:
33:35:07:30:63:8b:9b:40:42:4b:49:dc:cb:ac:40:
78:92:ec:42:da:64:a8:01:fd:17:58:f7:26:2a:db:
56:a7:6f:d3:d5:b4:43:40:75:e0:b7:ed:81:f6:1c:
6a:52:fe:5a:1c:ad:25:d1:f7:c3:8c:66:1f:d5:be:
3f:0a:53:99:f2:83:ce:e0:f5:53:f0:81:e6:bd:df:
28:3a:1c:96:2b:ad:f9:cb:62:a5:22:f4:ea:c3:cc:
4b:87:ce:2c:79:7f:8f:2c:cd:45:cd:21:9a:b0:53:
04:54:00:ae:2b:94:c9:1e:31:14:d3:29:78:d2:96:
f5:b9:d4:54:64:bb:0b:7a:3b:8e:c5:e2:9f:9a:10:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:5A:C7:17:24:EC:46:B1:38:10:27:4E:76:CF:8D:A0:DF:0F:12
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/0Ghaxxck7EaxOBAnTnbPjaDfDxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.173.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:46:f3:75:f0:78:ba:26:c3:b6:5b:68:9e:79:a3:b2:05:2a:
6c:6d:98:ec:03:c7:6b:79:ca:18:d0:03:2b:d2:aa:3e:5e:96:
9e:08:3d:59:57:b4:03:83:04:3f:7e:15:19:20:8d:9b:36:55:
ed:06:54:51:50:4b:de:42:69:06:4b:fb:af:04:a5:50:50:3c:
3d:1e:fb:2e:71:54:1e:10:92:8d:6e:c7:4c:70:49:39:ab:ed:
44:cd:0a:23:02:1b:63:aa:5f:a1:53:bd:56:97:9f:26:b0:9d:
1c:e8:8b:90:1c:79:af:5e:39:52:6f:60:d3:8c:39:39:ce:b1:
50:4f:80:d3:5f:b5:ab:87:09:e0:c0:7a:09:ac:d8:d0:16:94:
38:bd:b7:e3:3d:d0:e2:69:87:8d:96:aa:b4:a8:85:0e:b5:9a:
99:0a:f9:4e:13:47:d5:9e:6a:a4:c4:c5:30:5c:59:c8:8d:fb:
d9:81:5e:b5:f0:8f:b7:c4:09:db:57:72:27:8c:a8:ad:ed:f5:
33:da:32:98:ca:94:85:a5:ae:72:68:b9:6b:73:47:a8:bc:08:
26:cb:10:28:a4:98:0b:19:ad:25:ea:e3:5d:1b:da:f5:c6:ee:
88:58:bc:32:5e:1e:92:8b:8e:cb:9d:12:92:90:82:44:5c:63:
d6:23:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:31 2024 by rpki-client on console-fra.rpki-client.org