Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/_GF_0tu4yox_uLhzvTlhL1COC1k.roa
File: _GF_0tu4yox_uLhzvTlhL1COC1k.roa (raw, json)
Hash identifier: jh1ONXAjA7pMUhWZrMfooif1eY/iIBdqld7EsOqPfmA=
Subject key identifier: FC:61:7F:D2:DB:B8:CA:8C:7F:B8:B8:73:BD:39:61:2F:50:8E:0B:59
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 01919EBCDB3BDE8F316DCA7B6344B7183D75
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/_GF_0tu4yox_uLhzvTlhL1COC1k.roa
Signing time: Thu 29 Aug 2024 15:24:22 +0000
ROA not before: Thu 29 Aug 2024 15:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213291
IP address blocks: 195.242.8.0/21 maxlen: 24
195.242.16.0/20 maxlen: 24
2a13:5947::/40 maxlen: 48
2a13:5947:130::/48 maxlen: 48
2a13:5947:150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:bc:db:3b:de:8f:31:6d:ca:7b:63:44:b7:18:3d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Aug 29 15:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc617fd2dbb8ca8c7fb8b873bd39612f508e0b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cc:39:65:45:28:d0:ba:a4:6f:7b:dc:52:cd:
fd:e8:a0:31:ba:41:08:3e:77:c6:4f:19:73:d1:5a:
3b:6a:b2:c3:e0:4b:fd:69:c7:79:a6:d3:07:c1:f2:
0e:b9:2e:10:09:5c:60:16:e9:a1:58:8b:72:81:27:
4e:90:81:79:25:8b:f2:9f:3c:71:19:96:b0:74:37:
1c:0d:47:1d:49:21:9f:f7:6e:3b:a7:36:32:b4:5f:
c5:e0:dc:d9:1b:d5:c3:ba:b6:a0:e5:ba:59:16:ad:
b3:96:41:e6:e6:34:f2:be:2a:a0:03:e0:a1:73:a7:
3e:e0:c6:eb:e9:d8:f3:e0:be:20:52:84:ef:02:44:
42:28:9a:ed:56:a4:05:e5:f1:64:b9:36:4a:2b:70:
c6:42:de:e6:e8:a5:b7:7b:c1:1e:39:d0:50:ae:ee:
ac:55:5b:ac:4d:ec:45:3b:c1:a8:1f:4d:ea:cd:13:
66:82:7a:eb:3d:b8:7b:0f:ba:41:c8:08:4c:b7:c6:
5a:d4:1e:f4:39:4a:b2:9e:a4:a8:8a:b5:9f:94:ba:
a7:9f:99:58:e0:bf:77:90:2d:16:b8:f8:6f:29:4b:
bb:d0:c7:57:a8:65:b9:40:bf:85:78:6b:00:85:d5:
7a:2a:97:70:f7:d6:e3:37:0d:7d:08:53:18:75:b0:
f3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:61:7F:D2:DB:B8:CA:8C:7F:B8:B8:73:BD:39:61:2F:50:8E:0B:59
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/_GF_0tu4yox_uLhzvTlhL1COC1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.8.0-195.242.31.255
IPv6:
2a13:5947::/40
2a13:5947:130::/48
2a13:5947:150::/48
Signature Algorithm: sha256WithRSAEncryption
87:30:6d:50:07:44:dc:80:a1:f6:53:16:7b:c0:ca:b2:62:ca:
03:ae:bb:9c:62:6c:2c:ba:f1:45:77:a2:98:00:44:da:42:5d:
92:7a:8a:1f:5b:df:34:8e:2b:e7:14:2c:8e:64:2a:e3:de:23:
7f:2b:6b:09:b5:0e:b1:48:82:ac:77:6c:2e:7d:2f:38:c9:07:
26:e7:d0:86:30:24:97:96:4e:5f:b7:c8:fb:bb:6f:80:8c:d9:
c2:8b:43:26:c2:12:b4:5d:3a:21:82:67:6e:7c:2c:ca:8e:7c:
f9:a9:9f:d1:9a:7d:65:e2:8c:71:da:5c:1e:e3:c9:6f:6e:ff:
66:60:d9:5b:33:bd:d4:db:ca:fc:5c:12:f6:64:dc:8d:b7:51:
38:4d:fb:79:6d:25:b4:73:92:ca:b4:00:cf:49:10:4e:cb:1d:
94:a0:c5:82:39:17:ba:69:40:b0:be:c7:e8:89:65:f2:9f:e9:
64:b8:40:14:89:13:aa:95:97:55:30:5b:27:3e:43:56:42:52:
29:0e:03:ff:1a:b0:19:fd:d4:1a:0c:35:40:d6:c4:d0:68:76:
05:26:3e:13:19:07:8c:46:7b:27:04:33:2d:60:ec:2b:90:64:
20:91:68:24:e6:5f:22:35:a5:8e:2d:c0:d1:5e:20:be:79:37:
6e:30:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:31:28 2024 by rpki-client on console-ams.rpki-client.org