Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/4aKlfJSEo3895cQHIftsD5wVLq4.roa
File: 4aKlfJSEo3895cQHIftsD5wVLq4.roa (raw, json)
Hash identifier: izAFDnG2gnnCQRSPMORpvEdGfTxmV52a2I5wd18Zf5Y=
Subject key identifier: E1:A2:A5:7C:94:84:A3:7F:3D:E5:C4:07:21:FB:6C:0F:9C:15:2E:AE
Certificate issuer: /CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Certificate serial: 018CC9BC808B3A26F89E8D34343B32A9CE32
Authority key identifier: DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/4aKlfJSEo3895cQHIftsD5wVLq4.roa
Signing time: Tue 02 Jan 2024 10:33:43 +0000
ROA not before: Tue 02 Jan 2024 10:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42184
IP address blocks: 195.66.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:80:8b:3a:26:f8:9e:8d:34:34:3b:32:a9:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf0ff365d4bd908de902eeda03b279c2f809d3
Validity
Not Before: Jan 2 10:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1a2a57c9484a37f3de5c40721fb6c0f9c152eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:6f:35:dd:81:33:05:2c:0b:8d:a9:9f:b5:
9d:59:30:09:b7:4f:6d:5e:f0:0c:5a:1a:ad:d2:43:
e2:38:3e:90:45:dd:da:1a:ae:d1:92:4c:95:20:43:
36:ee:5e:23:c5:d6:e6:70:da:93:5a:41:f6:75:68:
50:8b:30:53:e5:3d:98:9f:a3:86:49:fd:f4:38:72:
41:bb:7a:31:e2:47:eb:e4:64:a8:e2:42:d9:95:ae:
20:c9:32:67:81:c1:16:a6:66:ab:07:0c:b3:fe:55:
a3:7a:7b:ac:22:c5:38:1b:fe:f9:79:bf:2a:83:5a:
c5:d4:e7:ef:75:dc:9f:aa:4d:8c:12:66:87:2d:84:
b1:d9:7b:ad:73:9c:3c:a3:d4:86:20:26:d8:33:87:
61:7c:70:9f:10:1a:1d:3e:27:99:28:c7:5b:9c:4c:
79:b4:ce:cb:24:96:c7:9a:56:0a:ea:2e:de:10:a8:
fd:e2:2d:47:fd:01:1b:46:e0:8a:ff:9f:ec:c2:58:
ac:de:24:ac:8c:aa:d9:21:5e:98:ba:8c:11:87:77:
e0:46:18:5a:fc:26:67:88:47:6d:6d:6a:eb:d0:6d:
f8:f2:1c:0a:87:7e:fe:e3:c9:ba:d0:94:90:20:4c:
c0:e3:ed:91:11:41:db:cd:dd:24:bc:c8:cf:7f:84:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A2:A5:7C:94:84:A3:7F:3D:E5:C4:07:21:FB:6C:0F:9C:15:2E:AE
X509v3 Authority Key Identifier:
keyid:DA:AF:0F:F3:65:D4:BD:90:8D:E9:02:EE:DA:03:B2:79:C2:F8:09:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8P82XUvZCN6QLu2gOyecL4CdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/4aKlfJSEo3895cQHIftsD5wVLq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/779260-7be9-4b66-9df0-409176f846d3/1/2q8P82XUvZCN6QLu2gOyecL4CdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.121.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b3:fe:a4:8b:2c:e3:fa:7f:be:a0:db:77:38:ad:65:a2:5d:
cc:1c:e1:e0:5e:d7:19:c4:6c:c8:12:99:6a:6f:f4:fe:91:43:
c8:40:95:b6:b4:bc:df:c7:cd:fc:fa:21:a5:0a:9c:ca:e6:44:
d4:7c:c5:36:2b:66:01:8b:c9:0e:7e:5b:19:41:97:8e:03:a9:
14:6b:d3:82:62:61:f0:0c:b9:d9:20:05:ae:04:23:09:87:0a:
48:aa:0a:74:65:2d:db:7f:d1:be:08:8e:d3:6f:d3:5d:96:e2:
f0:8b:37:91:8e:43:b0:b2:88:df:9f:9d:a4:a6:08:10:4b:b5:
80:30:7c:8e:54:4d:be:a1:ce:24:a3:b2:af:80:88:ee:50:cf:
95:9b:da:66:3f:d7:c2:9c:bc:4f:1c:c3:e7:5c:9f:f3:75:b5:
e2:68:77:f0:af:5d:dd:2f:74:7b:33:1c:4f:80:19:05:e7:dc:
f6:ac:8b:fb:2d:ff:9a:15:74:3a:9c:4a:9d:71:d0:96:de:1a:
32:de:3f:b6:11:17:c8:e9:ce:b8:2e:7d:20:b5:19:01:63:d4:
29:47:e5:73:b8:52:cf:e8:a2:de:13:4e:a4:d8:94:49:e5:f1:
a6:e7:6d:e6:5a:f9:8c:1e:41:19:6d:05:53:c6:c9:7d:a0:7c:
8a:74:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:30:22 2024 by rpki-client on console-fra.rpki-client.org