Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Q6uUgnqwF1tsvsJggZeRUtjNtRc.roa
File: Q6uUgnqwF1tsvsJggZeRUtjNtRc.roa (raw, json)
Hash identifier: xrKPGXj2RKYeUbtbwtL9V3UVkh6Yg0IiGn5ggG50Zw4=
Subject key identifier: 43:AB:94:82:7A:B0:17:5B:6C:BE:C2:60:81:97:91:52:D8:CD:B5:17
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FBE722AF2F910D6BB30CE66614BCB
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Q6uUgnqwF1tsvsJggZeRUtjNtRc.roa
Signing time: Tue 02 Jan 2024 04:30:15 +0000
ROA not before: Tue 02 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41957
IP address blocks: 195.245.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:be:72:2a:f2:f9:10:d6:bb:30:ce:66:61:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43ab94827ab0175b6cbec26081979152d8cdb517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:75:c7:d5:bb:22:f0:f1:ec:3d:0d:d6:04:
73:c4:e3:dd:bc:44:0f:48:82:2f:d8:34:dc:ed:63:
b2:8f:d9:89:b8:9d:0b:57:27:cc:7a:77:df:81:3a:
44:55:73:b3:88:df:c5:fa:fd:22:cc:77:78:a1:80:
00:10:58:18:33:12:92:5e:07:75:38:ec:0f:52:31:
7e:6d:4a:74:20:a8:2f:78:79:89:22:00:76:de:1a:
f6:7f:93:e3:24:b7:14:c9:c1:0c:b3:58:19:bf:14:
04:97:63:b2:69:9b:d8:44:c3:54:ef:ba:3d:df:02:
36:4b:e4:2a:77:77:fe:d6:03:2a:c2:3e:b7:34:17:
7a:ac:b6:72:c8:91:ff:c2:77:21:43:86:0f:60:c5:
c0:25:bb:fb:11:2e:d6:3c:7d:7b:4b:f0:b7:11:e1:
8d:e1:1b:31:ff:67:78:fb:32:c4:9f:ad:d9:ce:f6:
24:57:d1:03:40:10:0e:e4:92:b7:02:8c:48:c9:4b:
ed:d3:d8:bf:c0:18:4a:16:71:1c:52:87:c4:d6:8b:
b5:f5:fb:6f:a5:df:58:f7:7f:1b:c8:cf:ef:5e:df:
3f:32:e7:36:88:66:cd:38:c6:cf:b0:21:f0:34:60:
74:c8:91:eb:67:68:b9:9c:b5:47:29:a4:dc:3d:2e:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:94:82:7A:B0:17:5B:6C:BE:C2:60:81:97:91:52:D8:CD:B5:17
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/Q6uUgnqwF1tsvsJggZeRUtjNtRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.238.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2b:36:fe:dd:1c:e5:9d:d0:9f:b3:09:1d:32:e2:68:b4:00:
2c:d6:73:11:05:04:0a:31:d9:6f:a1:ec:65:e5:1b:5f:31:96:
52:80:a9:75:d6:93:9e:1a:72:12:c7:e5:29:97:b9:e0:2e:4b:
86:69:65:62:af:4b:58:d0:40:41:e2:03:45:30:e4:e7:22:3f:
57:c8:35:98:2b:5d:83:65:75:b7:5b:a6:2e:52:9a:07:f0:34:
e4:86:ad:45:06:c9:93:33:18:da:dc:71:f6:26:0e:4c:5e:7b:
57:a4:34:42:bb:95:48:0f:57:a1:a2:40:7e:30:54:da:b0:2b:
f4:8c:0b:0e:13:68:85:a8:0f:9c:9a:a7:d9:9f:a5:bf:c4:8e:
d4:ad:c1:27:ee:0b:ae:30:1e:17:c9:6d:9a:c8:33:19:9f:50:
00:d3:0e:53:55:2f:fe:f4:00:4c:d5:98:9e:af:ae:02:c4:5b:
d5:70:06:15:f1:ea:57:e9:2e:63:74:9c:95:74:a9:0b:73:94:
e1:59:3e:c6:b0:03:a4:7a:e4:64:40:01:34:f3:78:89:9e:de:
da:ce:e1:2d:9d:18:62:ee:0a:46:13:38:94:98:ca:ac:b3:92:
d3:42:67:8e:5d:be:5a:20:23:9f:11:e5:38:70:9d:ce:da:97:
f1:bc:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:45 2024 by rpki-client on console-fra.rpki-client.org