Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/0wrjQ-aZBX0Y0hHne0lcEKzSpAU.roa
File: 0wrjQ-aZBX0Y0hHne0lcEKzSpAU.roa (raw, json)
Hash identifier: bpQ+oALdIgKDN8MgT07KJs/paBsG4wNbHAwm6occFQs=
Subject key identifier: D3:0A:E3:43:E6:99:05:7D:18:D2:11:E7:7B:49:5C:10:AC:D2:A4:05
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 018CC64B7410F643B5402C0559202C472E2E
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/0wrjQ-aZBX0Y0hHne0lcEKzSpAU.roa
Signing time: Mon 01 Jan 2024 18:31:22 +0000
ROA not before: Mon 01 Jan 2024 18:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 195.182.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:74:10:f6:43:b5:40:2c:05:59:20:2c:47:2e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jan 1 18:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d30ae343e699057d18d211e77b495c10acd2a405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:ea:d8:53:f5:bd:34:eb:c7:1d:be:aa:42:
fe:a9:5d:df:06:1b:a1:a1:af:76:ab:60:12:f7:bd:
28:e1:7c:4d:67:5d:77:b8:24:37:38:46:0e:16:df:
c5:5e:a3:e9:80:f2:07:25:d9:64:ca:26:bf:e6:2d:
ab:6b:4a:a8:4a:1b:d6:df:fc:4e:4d:4f:ee:31:2b:
ce:6c:57:6f:a1:b5:f7:6d:45:0d:28:39:4b:f0:2a:
7d:3a:82:c4:1f:e3:1c:35:55:ef:2f:58:21:49:36:
78:41:80:4e:fa:5e:11:e6:8d:d0:be:be:ff:84:92:
60:7f:c8:29:f5:3d:3d:68:f2:f3:77:d7:d2:39:db:
9e:5c:09:97:79:4c:d7:d5:98:7d:6b:e8:a6:d3:05:
81:d9:0c:71:82:21:0e:35:b0:e8:d3:bf:cb:0e:2d:
9a:cb:f9:28:ab:3b:5c:df:25:88:16:ca:ae:31:ef:
04:07:f6:25:ed:8d:9a:f6:a8:fa:62:cd:9f:fb:e4:
0e:79:a6:84:ec:4f:47:c6:2e:58:16:7f:d8:f9:89:
27:65:0f:71:82:12:fe:81:26:4f:6e:4c:6e:df:17:
b2:4e:cd:ba:91:53:6f:ff:18:84:0a:68:4e:7c:b3:
1c:5b:05:9f:6f:5e:35:24:29:99:72:d4:e3:79:dd:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:E3:43:E6:99:05:7D:18:D2:11:E7:7B:49:5C:10:AC:D2:A4:05
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/0wrjQ-aZBX0Y0hHne0lcEKzSpAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:db:f9:5e:98:b5:eb:29:1b:71:d7:d8:60:0a:0d:90:f8:cb:
97:fd:61:ff:05:38:3f:0e:20:9c:76:78:78:7b:5e:d8:8d:ed:
be:a9:99:ec:18:db:c3:8c:17:84:21:42:67:20:76:c3:8d:3c:
88:64:ab:a2:dd:ce:1a:c5:e5:90:6f:54:95:ab:9c:b5:d4:ea:
2f:f6:39:8a:bc:55:0f:bd:8d:30:61:9c:03:67:9d:82:1c:59:
12:c0:a1:62:4e:66:cb:0e:c1:77:92:20:f3:1b:f0:45:62:9e:
b1:cf:af:fd:9e:3d:73:59:02:95:64:64:36:17:4d:35:d7:1a:
09:e3:b1:5c:f2:61:05:c0:4b:1c:fe:b8:8d:13:0b:4f:01:a3:
41:5d:9c:22:6b:f7:13:87:48:65:f9:f3:1c:11:0b:c6:d6:23:
e6:b6:4f:df:cd:f8:d1:ac:0f:c5:41:fe:c0:5e:b2:8c:de:97:
df:38:4f:45:34:d5:61:e0:ff:4e:8f:7e:7d:77:8a:3b:98:cf:
90:d1:01:68:45:12:ff:f2:ee:18:66:77:ec:b7:86:45:79:c5:
15:d2:f8:1f:42:04:e3:61:8f:96:9c:da:ee:56:3c:9f:0d:95:
81:c7:d3:30:42:d6:73:39:d3:43:8a:55:15:98:20:42:0b:f0:
50:ad:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 05:36:35 2024 by rpki-client on console-fra.rpki-client.org