Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/7tbdN44NRTxHfJ52JY-aNVGMLR4.roa
File: 7tbdN44NRTxHfJ52JY-aNVGMLR4.roa (raw, json)
Hash identifier: 5QC0n4tdXyvD2w5BdjdZOsqxBbF8GPvCfvGxtsB2om4=
Subject key identifier: EE:D6:DD:37:8E:0D:45:3C:47:7C:9E:76:25:8F:9A:35:51:8C:2D:1E
Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Certificate serial: 018CC94E6F2A446C2EFC8146B04EB52B7069
Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/7tbdN44NRTxHfJ52JY-aNVGMLR4.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47382
IP address blocks: 195.43.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6f:2a:44:6c:2e:fc:81:46:b0:4e:b5:2b:70:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed6dd378e0d453c477c9e76258f9a35518c2d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:5e:47:85:f1:76:50:28:4c:d6:76:fa:d6:
1d:d0:d3:fd:a3:ff:8a:ca:c0:04:60:71:0e:b1:5a:
e0:9f:a7:ad:cf:b0:9a:8e:90:8f:c2:c9:22:38:a3:
b3:bb:82:5c:5b:ad:e5:2a:94:53:61:36:18:32:ba:
ea:b3:d0:0e:1d:42:17:ce:db:e2:3d:91:20:fe:4b:
4a:b2:43:50:34:48:63:bd:8d:be:46:14:50:2e:58:
2c:e7:f4:0e:91:7f:ae:e5:d2:38:05:8a:14:46:7d:
2a:9e:8e:c9:d2:e9:bc:d8:2d:20:d5:84:47:9f:66:
cb:80:24:b0:25:47:5c:b6:a3:3b:bb:c4:d5:a7:13:
e7:0e:c5:7e:b2:75:2a:d5:1c:2e:49:03:59:d0:3f:
00:02:69:2b:b6:c6:33:e6:23:e9:39:55:8d:95:21:
fd:56:70:b5:99:cd:ef:95:5b:c8:73:f6:00:2f:0a:
bc:84:17:52:45:89:0c:4c:24:9b:7d:02:52:5f:61:
de:5e:0d:5b:98:9c:80:51:a8:9c:f3:02:c9:07:1a:
ac:5f:ac:a9:6a:2c:df:f4:39:5e:a8:b2:4a:54:1c:
4c:2d:36:4d:e1:6f:19:30:83:71:19:a3:28:4c:15:
81:0e:e1:66:de:00:e3:42:38:e6:0f:34:0f:85:9a:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:DD:37:8E:0D:45:3C:47:7C:9E:76:25:8F:9A:35:51:8C:2D:1E
X509v3 Authority Key Identifier:
keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/7tbdN44NRTxHfJ52JY-aNVGMLR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c5:20:50:b8:06:fa:d3:1d:0c:de:84:f8:c3:b5:53:b3:c5:
1f:0b:65:30:09:a0:cc:dc:b9:92:6e:0f:88:fc:b6:8b:dc:bc:
af:6c:41:bb:22:57:ce:8c:65:81:53:d6:22:72:6d:ca:a3:7b:
0a:73:30:b6:28:0a:51:32:fe:e8:48:d6:92:06:98:ec:bf:94:
49:1f:05:cf:b7:53:4e:42:32:e7:32:f6:8d:1c:55:d3:69:14:
93:26:db:0f:c4:83:16:a3:b6:7e:29:6b:72:3e:b1:d7:a7:b8:
e6:df:54:b4:c4:3d:a4:c9:7e:d1:81:25:1d:05:59:a9:62:5f:
e6:a3:15:95:8c:76:ee:c0:ff:f7:9e:dc:ab:3e:bd:c4:9b:0b:
b8:bd:0d:c3:aa:6e:82:4f:3f:f6:57:b4:38:4a:ac:ff:d2:19:
6c:bd:a9:35:fa:10:16:a1:06:07:2f:65:c2:a1:15:97:7f:2b:
6d:a7:f3:02:81:c8:36:63:23:4c:ec:49:9f:01:c0:27:55:d3:
05:b6:d0:b8:d0:3b:42:20:6c:d5:ff:20:48:a0:98:49:88:3d:
50:ed:e5:51:5a:b1:1c:ce:95:39:5c:9b:74:34:e7:fb:b1:03:
11:77:b4:b0:7e:96:5d:dc:a6:9d:9d:1e:f1:33:05:0c:3f:ec:
24:f9:4a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:06:00 2024 by rpki-client on console-ams.rpki-client.org