Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/IAaDdl7wcIKVADTRMTUgdu3FyTc.roa
File: IAaDdl7wcIKVADTRMTUgdu3FyTc.roa (raw, json)
Hash identifier: NuzauLzh44joC5UpB8owLTvXGEdLBuc/jWAj4ly6Oiw=
Subject key identifier: 20:06:83:76:5E:F0:70:82:95:00:34:D1:31:35:20:76:ED:C5:C9:37
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018CC7955BD7788239FD23534F1BF4D2F9C7
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/IAaDdl7wcIKVADTRMTUgdu3FyTc.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201924
IP address blocks: 195.146.0.0/24 maxlen: 24
195.146.1.0/24 maxlen: 24
195.146.2.0/24 maxlen: 24
195.146.4.0/24 maxlen: 24
195.146.7.0/24 maxlen: 24
195.146.5.0/24 maxlen: 24
195.146.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5b:d7:78:82:39:fd:23:53:4f:1b:f4:d2:f9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=200683765ef07082950034d131352076edc5c937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:6d:51:fa:57:3b:b5:03:21:80:9d:fd:4f:
da:29:01:22:a7:f8:28:79:3c:44:be:49:31:f4:e3:
a7:eb:64:f0:64:de:8a:8e:13:99:c6:32:c8:71:a2:
ca:c0:7d:11:ad:15:cd:2b:f7:ed:05:20:18:ce:78:
9c:e9:56:dc:1b:75:94:b2:bf:f1:47:ae:ff:56:74:
9e:70:b1:29:07:d2:7f:35:0f:39:93:0e:ac:90:8a:
f2:54:c5:0e:45:17:75:96:a5:8f:dc:e3:96:27:a6:
eb:45:1e:91:03:db:90:bc:4a:e7:41:92:10:c7:15:
f0:24:3a:20:53:e1:be:23:eb:38:d6:0e:6a:77:ee:
5e:40:30:bb:03:af:f2:f8:a3:e0:fe:8b:0d:a8:db:
47:15:2b:24:88:c8:05:78:6e:24:20:3b:6a:c8:44:
40:76:ed:fb:41:78:cb:dd:38:93:82:2d:38:88:d5:
63:26:dd:3a:38:36:d7:6c:e3:d2:23:68:4d:f9:05:
55:a2:07:48:c5:b5:60:d5:d1:50:eb:f7:49:80:dd:
45:af:60:b2:76:7a:f5:64:04:29:19:4d:2c:fe:1e:
9b:f1:c2:47:07:f5:e8:e9:54:1e:01:6b:6d:a4:d3:
ce:ee:f9:9b:39:39:44:20:35:70:36:f6:f0:04:46:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:83:76:5E:F0:70:82:95:00:34:D1:31:35:20:76:ED:C5:C9:37
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/IAaDdl7wcIKVADTRMTUgdu3FyTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.0.0-195.146.2.255
195.146.4.0/22
Signature Algorithm: sha256WithRSAEncryption
91:5a:2d:31:db:16:b1:68:ba:47:f1:d4:1e:ae:8f:43:61:63:
36:12:b1:7f:04:31:02:38:94:fa:60:af:03:0d:c6:5c:eb:9a:
8a:cc:34:a5:48:56:86:7b:cd:af:be:12:db:28:a9:09:a1:c8:
0d:74:bd:06:ab:74:2a:f6:50:e1:0f:9c:50:4a:99:3c:e7:b5:
94:9e:86:1b:03:ec:b3:75:fc:f2:39:90:d3:1e:d9:50:d1:82:
64:07:ef:2d:45:56:35:7b:0b:ed:3c:fa:e5:74:5f:70:0e:c8:
f0:f2:09:de:c9:d2:95:61:81:e2:65:36:c6:9f:d0:93:59:31:
5c:14:5e:6c:ca:14:c6:f9:41:32:fc:a8:57:17:e6:e6:1c:71:
31:51:13:bb:85:83:98:38:4d:71:0a:4d:d4:5b:d3:80:42:8f:
5d:df:c9:dc:ce:66:df:ed:f2:97:d3:0f:24:21:f9:c1:38:e9:
9b:b6:2e:76:c5:26:e3:ed:12:a2:38:27:0c:01:aa:ff:31:0f:
05:89:86:20:62:ea:02:e3:a1:81:ba:1b:0b:0c:fd:ca:30:35:
6e:1a:67:af:0d:f9:c0:00:07:69:d0:a5:c3:66:60:4f:71:ee:
18:cd:04:06:bd:0f:3b:08:d8:79:a3:df:7e:51:14:79:87:a4:
2f:5b:54:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:29 2024 by rpki-client on console-fra.rpki-client.org