Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/4ijE6IgHMU_4FD59IgEPFqezREc.roa
File: 4ijE6IgHMU_4FD59IgEPFqezREc.roa (raw, json)
Hash identifier: /NaCGNB4SUQzsnK0T28ZmjNozakmt8IoXghurYoP07Q=
Subject key identifier: E2:28:C4:E8:88:07:31:4F:F8:14:3E:7D:22:01:0F:16:A7:B3:44:47
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018F0C3E6DBFCD4D1261EF78729426B1FBBA
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/4ijE6IgHMU_4FD59IgEPFqezREc.roa
Signing time: Tue 23 Apr 2024 18:36:08 +0000
ROA not before: Tue 23 Apr 2024 18:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 195.95.200.0/24 maxlen: 24
195.95.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:3e:6d:bf:cd:4d:12:61:ef:78:72:94:26:b1:fb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Apr 23 18:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e228c4e88807314ff8143e7d22010f16a7b34447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:b4:61:21:a3:f8:ff:ab:cd:58:a2:36:02:
a2:56:41:9e:a6:d0:a1:08:18:91:ea:09:04:ec:1b:
43:1f:48:ad:dc:7a:29:8b:a4:b0:47:da:7d:dc:46:
1c:33:89:13:b9:ae:f5:5b:41:aa:d8:35:0e:6c:a5:
84:6b:eb:60:95:c3:33:33:16:a3:d3:b1:1e:c6:85:
fd:cd:98:93:3e:7b:bc:72:b4:13:22:85:d2:ea:72:
e1:4d:76:c4:54:e7:47:09:c2:af:5e:1f:1a:4c:89:
a1:d0:14:d4:44:96:fb:8c:4e:aa:00:c6:38:ee:a7:
0f:66:7f:56:c3:19:2d:4f:81:e7:d3:f8:d3:ec:d3:
75:6e:66:47:f1:bf:da:83:26:ba:25:19:c9:1b:ef:
26:99:48:56:64:95:31:e8:aa:08:28:37:62:e9:81:
34:90:94:ab:48:55:b2:07:37:a1:bf:30:50:90:23:
a0:f6:ab:78:a0:f3:97:00:5b:74:27:fc:b7:cc:97:
4b:4a:ee:1f:37:b9:43:8d:10:a8:fe:b3:df:4c:02:
84:49:71:82:a7:a0:72:94:9f:ed:f6:8f:60:30:7c:
e3:94:45:b8:0a:13:4e:72:9e:c1:b0:a6:43:83:f8:
b2:b6:34:8c:8e:20:56:5b:f1:f1:94:78:45:88:1e:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:C4:E8:88:07:31:4F:F8:14:3E:7D:22:01:0F:16:A7:B3:44:47
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/4ijE6IgHMU_4FD59IgEPFqezREc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.200.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:52:f9:33:5d:ac:08:61:79:ae:b8:a3:84:01:3a:a1:01:ed:
f7:55:ba:55:de:c1:47:41:4b:d3:13:64:24:46:ed:a5:3d:4a:
45:81:3d:90:a0:35:2a:cc:ad:59:a5:88:ff:0d:8b:7c:55:97:
88:03:b6:01:b6:07:d5:cb:04:73:21:56:0e:de:ed:95:88:3d:
c1:af:5c:e0:e9:bf:b5:6f:28:6e:d1:59:b9:28:b2:70:47:61:
bc:96:b6:cf:f6:74:ec:d5:c2:23:e4:70:24:db:3c:d9:a2:30:
b9:fd:10:2b:3d:3e:79:45:c5:cb:19:1d:6b:79:36:de:53:1c:
9f:25:43:bb:9e:3f:75:7d:95:cd:50:32:aa:ab:00:44:55:67:
23:24:2a:d6:d2:70:96:88:b6:e9:28:68:8a:fa:d0:41:85:f5:
46:94:cc:ca:36:03:64:4d:49:02:c6:13:51:25:cc:7f:1a:08:
36:3c:4c:db:94:a9:a9:d5:ed:66:a2:41:bd:87:9f:9d:9b:be:
d4:88:b9:97:f8:56:97:af:9f:73:70:9f:ef:cd:03:d9:86:2a:
54:06:a7:1b:c0:88:38:4e:53:26:44:5b:91:61:a1:8b:ab:54:
dc:b1:fe:c6:3b:f0:a5:06:e4:26:9d:03:86:7c:1f:bb:bf:d4:
72:9c:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:01:38 2024 by rpki-client on console-fra.rpki-client.org