Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/pPIHbeNc62COyhxM6odIW3K025c.roa
File: pPIHbeNc62COyhxM6odIW3K025c.roa (raw, json)
Hash identifier: shu/5GmsXglrUQ5SYHSksaHwRxDDoZS6NDum2JTRhEs=
Subject key identifier: A4:F2:07:6D:E3:5C:EB:60:8E:CA:1C:4C:EA:87:48:5B:72:B4:DB:97
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0191A392A77812F5E71C4D9115A057C49CA9
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/pPIHbeNc62COyhxM6odIW3K025c.roa
Signing time: Fri 30 Aug 2024 13:56:23 +0000
ROA not before: Fri 30 Aug 2024 13:56:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 195.216.162.0/23 maxlen: 23
195.216.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a3:92:a7:78:12:f5:e7:1c:4d:91:15:a0:57:c4:9c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 30 13:56:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4f2076de35ceb608eca1c4cea87485b72b4db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:96:a7:b6:8c:f6:02:f3:5e:39:a0:6e:b7:
bd:60:03:6b:2a:70:04:06:ca:a9:a4:79:e0:6e:74:
e1:43:c0:b1:cd:50:df:d6:88:fc:78:dd:13:a5:40:
14:23:02:8d:e5:e4:27:c2:41:ea:89:38:fa:73:de:
5d:63:8e:5c:a6:5b:2e:c1:f7:2b:c9:a1:71:f2:f3:
14:d6:82:7f:4a:84:ab:57:64:8c:5b:2c:35:a8:8f:
b4:c5:42:bc:b0:0b:d8:49:03:ff:4b:c2:de:07:96:
27:14:9b:f5:3c:88:8e:70:f8:ec:39:c1:aa:76:77:
6e:f5:82:54:c6:83:46:ca:8c:11:5e:89:6c:01:3d:
8a:2c:c7:6e:39:ef:7c:91:6c:06:33:32:4a:d8:bc:
eb:bb:d2:df:5e:ab:29:41:d2:ff:7c:bd:a5:70:92:
1d:e8:f3:41:3e:6e:29:c9:e8:4d:46:ce:84:46:3c:
c2:25:b0:1f:79:70:d7:a6:aa:ed:c6:63:3a:d8:92:
dd:be:ef:f7:31:c3:ea:8d:bd:9e:ab:fc:aa:c3:02:
09:47:b4:d9:53:b5:3b:0c:19:18:d6:33:fb:f4:46:
68:3b:a9:ef:61:2d:37:77:ea:ed:cd:19:4e:09:8c:
0f:cf:e8:74:5d:09:01:5f:d6:f1:b3:2a:88:8e:dc:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F2:07:6D:E3:5C:EB:60:8E:CA:1C:4C:EA:87:48:5B:72:B4:DB:97
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/pPIHbeNc62COyhxM6odIW3K025c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.162.0/23
195.216.168.0/21
Signature Algorithm: sha256WithRSAEncryption
27:ad:4e:92:e0:40:33:94:0e:bc:8a:27:77:1c:4b:da:35:0d:
ae:30:95:a8:35:fc:47:68:2f:fa:c4:16:e4:27:13:fc:89:3b:
d9:53:d9:7f:57:ad:24:79:61:36:c4:8c:b5:d0:18:58:40:44:
81:13:1d:eb:43:b1:f9:ed:f0:fd:8a:2a:fe:87:c8:e4:c7:bf:
35:83:6e:e2:8a:0a:f1:79:82:c4:cf:7f:07:ab:10:a1:fe:a7:
46:e7:11:e4:73:6a:bd:b4:b7:d5:cc:1d:ae:fb:c3:f0:d4:af:
87:52:63:9f:90:04:36:37:df:d0:18:93:01:d2:7c:7a:9f:5d:
ea:49:f0:47:3f:0d:e8:64:45:86:e6:4e:08:7e:8a:42:15:16:
9b:de:b4:4e:da:8e:d5:c1:e1:ed:3b:c5:69:56:fc:4e:6b:55:
60:4d:43:b4:b2:d4:95:35:d9:89:97:fc:29:1e:02:07:93:2c:
c2:16:ac:bd:36:0b:17:e5:36:a2:1d:7b:a7:75:2f:72:d1:22:
c7:6d:b1:3b:c7:60:a6:44:fd:09:8c:01:f5:f1:e0:17:a0:6b:
f6:01:d8:03:8c:7f:8a:a1:cc:d7:7f:9e:16:47:b5:cc:db:31:
4f:06:63:0e:c0:07:59:b4:9b:13:5d:c8:c0:28:4b:c7:b7:ce:
f0:41:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:46 2024 by rpki-client on console-ams.rpki-client.org