Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/siUFn8nF2_v0pXvfrmTXFm72W0w.roa
File: siUFn8nF2_v0pXvfrmTXFm72W0w.roa (raw, json)
Hash identifier: YYdj7lRgP7809z8dKt1XRtREmfypU6O148oC4ojKjaE=
Subject key identifier: B2:25:05:9F:C9:C5:DB:FB:F4:A5:7B:DF:AE:64:D7:16:6E:F6:5B:4C
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 018CC802310414AC0430EF392DF4073E9B75
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/siUFn8nF2_v0pXvfrmTXFm72W0w.roa
Signing time: Tue 02 Jan 2024 02:30:36 +0000
ROA not before: Tue 02 Jan 2024 02:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12350
IP address blocks: 195.13.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:31:04:14:ac:04:30:ef:39:2d:f4:07:3e:9b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Jan 2 02:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b225059fc9c5dbfbf4a57bdfae64d7166ef65b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:bb:b2:81:88:70:9d:78:ef:65:5b:99:a3:
c6:40:8f:7f:3d:eb:55:7a:cc:62:6c:ea:9d:43:4c:
4c:ff:73:da:65:ff:41:90:0d:76:0d:30:49:71:84:
45:69:5c:7b:9f:f1:a8:5e:87:bf:b3:52:49:43:59:
6d:f8:d3:76:12:b3:21:27:e8:f5:81:70:54:34:a2:
ad:ed:2e:33:55:14:84:e2:d3:ef:01:87:ae:80:0e:
10:90:3a:57:5e:0c:ea:be:c7:23:f0:a3:5a:32:f8:
26:d8:d0:ca:03:80:02:75:5a:46:5a:cd:d7:01:95:
4e:7f:78:98:63:9d:b4:4d:87:2e:f0:9f:14:f9:4e:
75:4c:27:42:42:8a:dd:15:a5:bb:6f:0d:3e:c7:4f:
56:02:18:04:7f:34:16:78:89:5a:5a:89:85:89:1c:
38:03:47:1f:af:a8:5e:ee:4e:a7:ab:df:37:1f:b1:
f4:1d:b4:70:cb:36:15:56:81:fc:7d:0a:f2:61:25:
fd:cc:80:cf:e1:2b:16:5a:eb:5e:74:ea:ba:10:d1:
64:07:2b:0b:5e:86:24:27:1c:78:9a:95:a5:1b:39:
a0:9e:b6:76:93:95:db:92:b4:fd:f1:9f:5c:15:ba:
69:af:e6:f8:92:1f:c4:2d:d4:2f:2a:cf:58:0d:8d:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:25:05:9F:C9:C5:DB:FB:F4:A5:7B:DF:AE:64:D7:16:6E:F6:5B:4C
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/siUFn8nF2_v0pXvfrmTXFm72W0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.13.52.0/23
Signature Algorithm: sha256WithRSAEncryption
85:82:96:68:f7:08:29:f4:5d:db:8f:7d:f4:3b:b0:8e:ec:da:
15:e8:e4:8a:06:cb:de:20:d7:31:ff:59:2b:7e:ec:a0:a9:c0:
bb:fe:c1:cc:cc:4d:51:d2:02:40:84:5e:bd:0d:92:7d:ee:62:
11:a9:54:70:6b:07:47:e9:f2:0f:66:66:27:69:46:d8:f1:a9:
43:cd:98:29:46:a3:69:56:68:3f:a1:45:87:5b:e5:f3:58:24:
be:9d:c1:18:30:2b:98:4b:7f:e0:e0:7b:2f:2a:4a:31:32:99:
0a:fe:05:a5:f8:94:d0:e9:1b:58:12:ff:2c:5f:bc:9e:49:96:
f7:ad:97:21:91:22:23:51:f9:1d:93:01:ef:79:79:4b:bc:bd:
98:50:66:5f:3f:f7:ec:1b:16:69:98:04:dc:69:da:b6:a4:77:
21:ed:b9:ff:ba:a4:93:89:c8:fc:f9:b1:ef:76:6e:97:46:f4:
da:e8:07:31:30:c6:87:c8:12:e9:6f:a6:09:b6:10:31:eb:34:
f7:5a:ee:13:3a:04:dd:23:1e:b8:a3:98:98:c9:f8:94:8c:d1:
bd:66:94:05:ad:6a:7f:55:e6:a9:2e:a8:70:d7:f5:ba:90:75:
05:e2:ad:7b:de:a2:6d:22:4c:77:c0:96:f0:c8:54:a5:6f:f9:
7d:10:a5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:03:41 2024 by rpki-client on console-ams.rpki-client.org