Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/xm7G-zewg69fb5cBW_mYGkox6EU.roa
File: xm7G-zewg69fb5cBW_mYGkox6EU.roa (raw, json)
Hash identifier: amccBH4xET5kXDeaayKqv2Tx5xlbdOF6ISg8Q5OHbn4=
Subject key identifier: C6:6E:C6:FB:37:B0:83:AF:5F:6F:97:01:5B:F9:98:1A:4A:31:E8:45
Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Certificate serial: 018CC64A20D18C3B7FE201E91B32DA6C036F
Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/xm7G-zewg69fb5cBW_mYGkox6EU.roa
Signing time: Mon 01 Jan 2024 18:29:55 +0000
ROA not before: Mon 01 Jan 2024 18:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50402
IP address blocks: 195.47.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:20:d1:8c:3b:7f:e2:01:e9:1b:32:da:6c:03:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f
Validity
Not Before: Jan 1 18:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c66ec6fb37b083af5f6f97015bf9981a4a31e845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:4b:d9:17:71:a9:38:c3:95:23:2c:7e:1d:
34:2a:12:48:04:09:77:ad:b5:a1:68:4f:31:3e:fb:
b5:36:8f:4b:ba:50:fe:4f:de:9e:4f:91:26:76:98:
d2:f4:a4:39:ea:14:05:5a:3b:80:1b:f4:44:2b:d7:
41:06:4a:bd:6f:bb:5d:07:a4:6d:d8:72:d3:14:2c:
28:f3:15:0f:ce:27:fe:cc:48:87:d6:0b:ca:7f:1d:
ce:d3:08:ee:e3:37:e1:36:e9:ac:3d:a3:ef:6a:b3:
4f:48:93:53:8f:49:bd:3c:13:e4:89:ee:95:2b:3a:
2b:96:f8:3e:d6:2d:45:38:52:c8:e9:88:dd:14:8f:
f0:87:36:ce:18:df:b6:05:4f:85:4a:af:d4:0d:54:
aa:5c:08:15:2d:26:5c:11:fc:42:f5:d6:e4:96:7b:
5d:ad:40:f6:f4:59:cf:22:a5:6b:be:fc:28:84:35:
91:d0:fd:ac:64:39:b8:01:c8:d7:df:b1:49:d6:e0:
37:a4:23:24:79:de:cc:29:c6:f4:35:56:03:e6:5c:
49:f5:b4:12:fa:e9:b4:d0:41:8d:f4:9e:9d:34:85:
9e:98:d5:22:3d:f6:5a:af:86:fb:2b:eb:b5:1b:ca:
68:51:ff:06:b4:a7:9f:fe:d0:dc:e0:d7:ce:36:6a:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:C6:FB:37:B0:83:AF:5F:6F:97:01:5B:F9:98:1A:4A:31:E8:45
X509v3 Authority Key Identifier:
keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/xm7G-zewg69fb5cBW_mYGkox6EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.214.0/24
Signature Algorithm: sha256WithRSAEncryption
58:43:14:31:1a:b5:39:0b:97:80:d6:8d:50:d1:ff:78:94:2b:
d1:5e:87:42:65:3c:57:8c:5c:29:21:c3:23:68:e6:ac:fa:ef:
ac:5a:b0:60:9b:f5:03:9f:b7:f4:2b:d7:26:f7:f8:35:20:cb:
b4:cb:de:c1:8c:ba:f9:0f:2b:7c:0c:c5:8b:99:b4:ec:2b:a7:
7e:92:f7:96:ab:fa:bd:1d:d2:d8:cc:ec:a1:b7:bb:ab:9a:4a:
a8:04:9a:a4:60:e6:86:f9:65:2a:85:1f:df:78:bf:ce:13:e2:
f2:59:05:b9:4a:69:c4:6b:85:28:f4:96:92:da:0e:d9:01:02:
9d:cf:ab:52:03:10:ac:7c:62:da:b8:18:e0:17:a1:4a:3f:07:
10:2c:24:23:42:e4:de:e0:ec:3e:3b:25:77:e1:9b:83:5e:60:
fa:aa:23:bd:ee:94:10:03:63:26:04:1e:c2:58:c0:b7:bf:f0:
6c:b6:c7:3b:cf:11:38:23:29:cc:4e:95:7a:4e:c8:58:21:72:
6c:43:0d:00:c0:31:27:f2:d5:19:fd:ac:87:88:32:8e:88:af:
2e:46:ea:43:35:94:52:58:0f:9d:ea:7a:2c:d9:b6:0a:35:22:
64:84:ab:76:eb:4b:c7:e9:7d:48:ed:f2:0f:04:02:14:a6:76:
28:e6:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:02:37 2024 by rpki-client on console-fra.rpki-client.org