Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/rTvw0iFsazeCFb0CogbUj3xy4Aw.roa
File: rTvw0iFsazeCFb0CogbUj3xy4Aw.roa (raw, json)
Hash identifier: WOcK2x7p3vznuIYgPkTrJD3DL0lp1k2/SRuiTDOul/Y=
Subject key identifier: AD:3B:F0:D2:21:6C:6B:37:82:15:BD:02:A2:06:D4:8F:7C:72:E0:0C
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 018CC86F34E7FCA997DD065F5033555C03D2
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/rTvw0iFsazeCFb0CogbUj3xy4Aw.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207640
IP address blocks: 195.69.140.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:34:e7:fc:a9:97:dd:06:5f:50:33:55:5c:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad3bf0d2216c6b378215bd02a206d48f7c72e00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:57:c1:1c:28:51:18:04:92:ff:99:f0:d8:
22:6c:58:4a:42:16:52:49:35:9a:dd:84:57:64:7e:
64:34:e9:0e:34:d4:19:fa:43:8a:ff:9a:b5:4a:65:
83:c0:c9:f6:f4:c5:7b:6b:31:d2:1c:a9:80:67:ab:
56:82:ba:aa:18:d6:eb:e2:15:63:57:23:65:74:cd:
d9:04:93:c6:6c:44:a3:de:11:a4:f7:77:50:18:ff:
3b:b8:34:d3:74:17:9c:24:a1:20:7d:d1:88:6c:06:
84:80:c3:0b:ba:36:a1:14:db:3d:b9:25:5a:ea:04:
70:3d:b8:08:ab:fb:2f:27:2c:38:0f:77:b1:63:7f:
c1:5f:6d:5e:89:bc:03:0e:50:e5:bc:0f:e7:69:8e:
5e:0f:8f:3d:28:36:5b:af:b3:68:11:f1:7c:fa:ee:
49:f9:ad:81:b6:3c:0d:6e:93:c5:68:28:49:6b:f2:
da:ff:1d:61:e0:95:f2:4e:9a:fa:47:f3:22:ce:b9:
b4:c8:d5:0e:44:e4:07:af:e5:a3:5b:55:68:bb:33:
1b:66:cd:7f:48:39:9f:ab:2a:ea:78:32:60:83:75:
6e:41:fb:d6:ba:e8:d6:ae:bd:73:20:3a:3f:04:13:
f9:be:f2:e8:73:0a:58:db:69:fa:59:cb:4c:6d:d5:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:F0:D2:21:6C:6B:37:82:15:BD:02:A2:06:D4:8F:7C:72:E0:0C
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/rTvw0iFsazeCFb0CogbUj3xy4Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:51:0d:97:33:fa:29:41:a9:11:77:32:35:48:f6:b8:90:65:
2f:69:fa:e6:81:ec:cc:a2:73:3f:4a:5b:2c:b9:85:cf:fc:e7:
44:76:c4:08:90:bd:f0:c1:c8:d0:a2:a2:db:98:aa:ca:b3:98:
76:d6:fe:68:20:f8:cc:d8:aa:52:fb:7a:a7:c1:16:02:39:b1:
55:e9:3f:7a:a0:7c:df:48:53:9b:38:48:73:e8:09:d3:56:2d:
46:47:f2:53:f6:89:28:bd:b0:07:ca:f5:9e:6f:30:d3:eb:f7:
1e:7e:f4:6b:02:1e:65:ea:70:ee:8e:d1:b5:fe:c6:9f:a6:dd:
a4:59:f7:89:15:c3:6f:bb:39:04:f6:65:a9:f3:43:c2:9f:ff:
88:d8:a8:1d:79:d6:61:ec:0e:d8:f5:7b:db:fc:2c:55:c4:70:
65:95:c7:c5:9a:e2:f1:a4:4d:d5:1c:4b:21:8a:95:50:3b:e9:
4e:12:5a:a3:4a:0f:d7:cc:91:43:03:99:2a:01:86:bc:02:94:
60:ef:be:5f:70:1a:20:85:29:57:16:f7:70:70:4e:37:73:3b:
b8:da:2a:18:52:89:27:b5:00:de:f0:dd:09:b5:4f:3f:1a:29:
d8:9a:59:eb:7e:ec:88:21:1b:e1:ae:26:f2:1d:fc:2b:7f:1d:
3d:b1:e1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:09:06 2024 by rpki-client on console-fra.rpki-client.org