Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/EXDyXW6wNu1Wa5jQu3iA4t3gbwY.roa
File: EXDyXW6wNu1Wa5jQu3iA4t3gbwY.roa (raw, json)
Hash identifier: 84HBOgJp4gCIXPl5CNQr/w9Rn5c9jxQZhYB7PhHhUls=
Subject key identifier: 11:70:F2:5D:6E:B0:36:ED:56:6B:98:D0:BB:78:80:E2:DD:E0:6F:06
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018CC26D1A5E681A4ACCEBDF4109C7BA6EA2
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/EXDyXW6wNu1Wa5jQu3iA4t3gbwY.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42403
IP address blocks: 195.209.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1a:5e:68:1a:4a:cc:eb:df:41:09:c7:ba:6e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1170f25d6eb036ed566b98d0bb7880e2dde06f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:49:c7:ad:91:4d:e0:18:07:79:78:08:8d:
5c:46:c7:c2:34:b6:82:58:96:30:f7:3f:dd:97:6d:
85:1e:dc:36:05:8e:ac:2e:9f:87:f2:0c:64:db:df:
f6:34:71:35:5a:8f:d2:a6:2c:6e:65:f8:f9:32:59:
d4:2c:2a:96:0e:9f:93:92:31:9d:e0:f7:f2:35:93:
f2:1f:12:17:05:87:36:2e:c6:9c:d3:fb:a6:80:0d:
54:0e:0b:0d:d0:d9:1a:bd:44:3f:7b:fe:91:11:5f:
19:e2:99:e0:10:6a:1c:ef:f3:fa:dc:19:42:32:17:
98:fa:fc:c6:ad:28:ee:28:09:7e:b3:c0:3e:f2:1e:
fc:bb:38:d9:75:1e:ae:ff:8e:f2:93:84:16:59:d9:
e0:ca:64:c6:0b:ec:01:18:cf:aa:e2:a6:f0:88:ec:
6f:18:57:dd:7e:a7:5c:98:2a:c2:ac:89:32:61:52:
9e:1f:a2:b9:fe:83:0b:19:94:ca:9d:06:cc:48:1b:
ed:5e:1a:54:54:9c:2e:4e:44:64:49:0d:53:c9:01:
c6:95:1f:0d:f3:d0:07:d5:5f:ae:8b:14:bb:b8:a4:
72:6c:18:4d:30:2b:e4:78:00:78:9f:6a:b7:67:ab:
77:1f:91:b8:83:43:30:3b:22:0d:77:6d:ae:af:23:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:F2:5D:6E:B0:36:ED:56:6B:98:D0:BB:78:80:E2:DD:E0:6F:06
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/EXDyXW6wNu1Wa5jQu3iA4t3gbwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.209.16.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ff:d0:d5:4f:af:1a:90:78:9c:d3:d0:13:96:d4:da:c1:f6:
8e:f7:f1:8e:28:3d:aa:8c:ab:20:ba:93:bf:90:78:2d:17:28:
5f:a9:a8:6b:ea:e3:40:26:55:d7:41:db:31:97:63:47:4a:7c:
66:30:c4:f6:97:82:02:19:10:b2:5c:71:be:18:e4:38:d5:f7:
06:1f:8d:0c:d7:99:2f:aa:f9:35:ad:2f:7f:5d:72:33:fd:e5:
e7:cc:62:93:fa:0e:37:46:18:da:ec:9f:cd:f2:15:56:c4:be:
38:a6:a0:d4:b6:74:d9:44:9b:df:c2:ef:f5:8b:4b:d6:d5:6a:
c2:94:11:be:f5:90:ff:65:74:28:8b:8c:0b:76:4d:28:c9:55:
1b:e5:fe:4b:95:6a:f2:a4:78:b7:cb:29:28:d5:4d:b8:64:3e:
50:0e:a8:d7:1b:2d:74:dc:9a:05:cb:b2:70:cc:53:4f:31:6e:
b2:94:48:41:6f:29:02:3e:00:ac:bc:6a:d0:5b:45:03:6f:da:
98:c5:05:d4:32:d2:2c:8c:55:6d:1c:c8:1a:c2:b2:f4:93:68:
87:7b:01:bb:89:15:ea:f6:4c:32:c6:8e:80:dd:53:6d:c4:86:
8d:3f:2c:8e:96:33:19:16:d2:12:c7:cc:70:bf:2a:96:ef:0c:
f9:a5:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 09:07:39 2024 by rpki-client on console-fra.rpki-client.org