Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/6eEgdezUPaGpyEeQZnkd6XVCKX8.roa
File: 6eEgdezUPaGpyEeQZnkd6XVCKX8.roa (raw, json)
Hash identifier: LuqlF9smRAzyT70c+uIFkKzb5aitIrzj1hy/LIKKC9M=
Subject key identifier: E9:E1:20:75:EC:D4:3D:A1:A9:C8:47:90:66:79:1D:E9:75:42:29:7F
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 018CC5006C8CB8EB5897F290C4527AB2E3C1
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/6eEgdezUPaGpyEeQZnkd6XVCKX8.roa
Signing time: Mon 01 Jan 2024 12:29:48 +0000
ROA not before: Mon 01 Jan 2024 12:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42068
IP address blocks: 195.242.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:6c:8c:b8:eb:58:97:f2:90:c4:52:7a:b2:e3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jan 1 12:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9e12075ecd43da1a9c8479066791de97542297f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:10:11:21:f4:1d:f4:5c:ef:5a:a3:c7:35:
fc:74:b1:26:20:4d:4e:86:ab:43:3b:5c:cd:a4:83:
0e:87:28:e2:b0:73:68:54:63:07:92:e3:5d:54:1d:
aa:20:08:fc:3c:fe:3a:e5:76:15:04:69:c4:fd:33:
3b:ce:90:5a:57:a4:29:f1:e5:b7:e7:2d:4a:09:9c:
20:15:dd:e9:43:82:02:2c:64:0a:1e:e0:bf:d0:e5:
39:60:27:99:d0:f8:c2:fc:36:89:04:1f:c0:fd:b5:
04:4f:8e:e6:c3:5b:b4:16:87:31:fe:ad:f5:4f:33:
1b:e1:2d:07:e3:ad:45:07:c3:6e:32:c8:33:7d:13:
c2:63:0a:3d:5d:0e:88:28:8b:24:1a:a6:64:58:f0:
d2:f8:01:be:32:7b:5a:46:fa:c2:39:c8:ad:00:7c:
f5:b5:b7:6b:11:ff:67:c6:6d:06:69:c3:df:a7:e6:
f0:f7:92:9e:bd:0f:55:cb:8c:73:94:d5:1b:9d:4f:
9e:3b:04:a4:fa:44:41:9c:f2:59:10:f6:d7:1e:65:
4d:4e:b0:9e:ef:c7:a1:b4:8e:4f:af:07:cf:81:e3:
f3:c0:71:58:0d:3e:69:89:85:62:8c:08:fa:cc:db:
4e:62:fb:b5:9c:0f:86:f8:f3:d6:0a:01:0e:0f:b7:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:20:75:EC:D4:3D:A1:A9:C8:47:90:66:79:1D:E9:75:42:29:7F
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/6eEgdezUPaGpyEeQZnkd6XVCKX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.150.0/23
Signature Algorithm: sha256WithRSAEncryption
39:42:43:9b:f7:52:f2:47:28:e0:65:9b:cf:6c:23:f9:19:3c:
a2:09:61:5f:9c:82:7a:3e:66:a2:42:f4:c3:fa:e6:cf:e8:b5:
6d:6f:69:ed:c7:91:7d:ab:53:77:09:a9:7f:09:57:e0:1f:cc:
fa:ef:ce:5d:be:e0:e4:84:fa:72:50:1f:91:d0:a8:fc:00:9d:
96:f5:90:78:e2:b6:12:b4:2d:a5:fb:ae:da:10:4c:18:fe:78:
3e:95:8d:9e:15:b3:ae:75:13:ee:a3:75:50:a3:60:03:db:a5:
41:66:82:56:51:7a:f1:a3:e8:b2:d0:f6:e8:fa:98:21:7a:a0:
95:54:86:31:24:e3:a5:8b:c5:28:52:57:41:45:56:7e:76:67:
70:54:38:ce:2b:20:3f:34:17:c2:88:8c:71:88:7e:01:40:a0:
d6:c8:d2:90:16:25:5a:51:00:3f:dc:0f:01:b7:17:50:31:79:
31:d1:50:9f:27:06:95:a5:96:ca:38:16:05:06:77:34:21:9b:
06:7c:ff:b9:45:b6:67:ce:be:dd:c8:0a:9b:ac:de:2a:6b:79:
e1:83:6e:a9:36:17:c8:49:aa:db:04:a9:c6:de:06:06:c3:69:
eb:b4:83:f6:5f:42:a7:50:bd:b3:cf:75:83:9b:ba:04:b6:d3:
b1:25:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:05 2024 by rpki-client on console-ams.rpki-client.org