Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/pTTXmjRmjQvvYJ5mgf7-KuTgpCc.roa
File: pTTXmjRmjQvvYJ5mgf7-KuTgpCc.roa (raw, json)
Hash identifier: zxaJVXwD3IYH+EmaTEeDHSSO56WWcVfs/JBiIzGvMn0=
Subject key identifier: A5:34:D7:9A:34:66:8D:0B:EF:60:9E:66:81:FE:FE:2A:E4:E0:A4:27
Certificate issuer: /CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Certificate serial: 018DF9852240A45866C9CA86EADDE4E6FFCA
Authority key identifier: 2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/pTTXmjRmjQvvYJ5mgf7-KuTgpCc.roa
Signing time: Fri 01 Mar 2024 10:17:48 +0000
ROA not before: Fri 01 Mar 2024 10:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48753
IP address blocks: 195.20.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:85:22:40:a4:58:66:c9:ca:86:ea:dd:e4:e6:ff:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Validity
Not Before: Mar 1 10:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a534d79a34668d0bef609e6681fefe2ae4e0a427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:e8:b6:89:cb:e4:5c:e7:15:87:f8:82:c6:
5e:58:02:27:97:3c:c1:e2:ff:55:37:a1:21:20:c3:
dd:5e:00:22:d0:77:5e:e6:ea:49:6a:85:05:03:59:
7a:6e:19:4d:25:df:4b:d1:0f:de:57:2b:f1:22:49:
e2:39:f5:30:8d:86:9a:eb:91:f7:54:dc:cf:8a:f5:
93:64:a9:97:cf:0b:a0:3e:b3:3d:a3:bd:36:f5:6a:
17:ae:13:e4:fb:fb:dc:4a:45:22:17:99:28:66:d1:
34:7b:3b:8b:a5:20:1b:d6:dc:1e:76:b6:0b:b9:6e:
5e:5c:cd:88:93:36:d4:4e:6b:52:e6:d4:cf:80:2c:
79:aa:49:75:82:51:65:51:78:87:46:6c:14:e5:1f:
73:e3:7f:7d:0a:62:35:7c:15:fb:dc:6a:2e:5c:c6:
5f:b2:b8:3f:40:3c:fd:e4:74:6d:fb:b9:f7:e8:a0:
49:dc:46:02:64:8d:92:26:ac:08:75:ab:75:51:9a:
99:fc:68:9b:12:53:2f:8c:5c:25:de:52:54:6a:ca:
23:f9:55:45:fb:35:36:75:e2:40:72:70:11:be:de:
de:5f:be:62:36:44:28:9b:6d:26:18:ca:86:33:7f:
17:12:fa:37:7e:7e:45:46:1a:19:9c:33:82:a0:3e:
41:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:D7:9A:34:66:8D:0B:EF:60:9E:66:81:FE:FE:2A:E4:E0:A4:27
X509v3 Authority Key Identifier:
keyid:2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/pTTXmjRmjQvvYJ5mgf7-KuTgpCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.18.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cc:21:cb:39:3b:64:6c:67:5e:60:01:f9:d4:71:e0:8e:3c:
4a:6a:23:8e:f5:d5:f5:5f:78:aa:f0:88:ab:e6:68:9d:03:f4:
f5:7e:d7:4e:6a:7d:eb:e7:73:b6:b5:c2:da:93:3a:9e:f6:e9:
ba:43:a8:08:e0:93:f7:3b:2c:ef:2f:b6:0f:36:df:9d:1b:e6:
1c:11:f7:17:59:50:b2:52:b5:db:e8:8f:9f:27:6e:00:97:c5:
69:2a:9d:55:06:4c:d8:7e:fc:b3:64:45:fd:e7:09:89:c1:40:
35:6a:88:75:04:b5:48:60:df:26:cc:7e:31:6e:50:76:7a:81:
c7:b0:eb:6c:3a:4a:e7:a6:4b:0c:a0:49:64:3c:e7:cd:b4:eb:
a2:fa:d1:0d:58:24:40:e7:0f:cb:cf:0c:38:e5:8b:70:13:4f:
b0:36:cb:a3:f6:65:3a:88:97:af:42:0d:66:45:33:bd:bc:e8:
42:10:81:bf:3c:16:1b:8e:62:58:58:b9:0c:46:bf:2c:ac:81:
a3:40:67:36:0a:2c:b3:55:3c:07:22:94:f8:b7:f1:1d:d8:a4:
bd:40:27:e9:f8:59:a0:36:f7:0a:ac:79:45:80:11:68:83:aa:
0c:e3:a1:9f:4c:6d:07:1e:37:82:51:c0:47:5d:d4:45:3f:87:
ce:8f:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 08:05:20 2024 by rpki-client on console-ams.rpki-client.org