Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/T_o0IAswKPwE52TyswMIu64IhT0.roa
File: T_o0IAswKPwE52TyswMIu64IhT0.roa (raw, json)
Hash identifier: TWCPQ7RH5F7DsZ48NeYnRq8IfFgToEzE4Mqi/ek6HNE=
Subject key identifier: 4F:FA:34:20:0B:30:28:FC:04:E7:64:F2:B3:03:08:BB:AE:08:85:3D
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC49250AF56FAE64A787F826A1BF38C17
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/T_o0IAswKPwE52TyswMIu64IhT0.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61975
IP address blocks: 95.158.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:50:af:56:fa:e6:4a:78:7f:82:6a:1b:f3:8c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ffa34200b3028fc04e764f2b30308bbae08853d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:19:ee:d7:a9:b0:0b:86:d2:d3:97:0f:54:
e8:47:3b:7a:b4:3e:83:b6:c0:cc:b9:0d:2f:5d:d9:
ba:0c:fb:c8:66:e7:37:2f:51:af:d8:fe:83:42:53:
87:99:7a:cc:54:0b:9f:4b:a1:04:06:b6:15:19:09:
d2:b6:16:ce:2b:43:94:89:8e:ef:a1:9b:59:d4:4c:
78:5e:45:53:f3:cb:9c:23:9b:0e:e7:2f:0d:ad:db:
1f:3a:f9:87:d3:c6:17:67:f2:96:5e:11:f5:54:d8:
aa:ca:dd:54:9b:49:21:9f:32:6a:36:19:24:9f:a1:
b8:2c:e8:f5:5b:48:4f:e2:e8:ff:59:41:cd:3c:c7:
75:cb:8a:52:70:27:f9:52:4a:45:8e:f3:96:fb:5b:
47:e6:90:77:fa:a1:59:e9:f8:b0:41:4b:54:6d:22:
71:28:49:9a:eb:e7:61:f4:cb:17:54:e6:b7:db:e0:
b1:6c:15:4b:1c:b0:51:6b:6c:81:14:8b:da:a1:97:
94:1f:cf:c7:76:cd:67:3f:e2:4b:07:40:b2:70:90:
f2:c1:cd:dc:e6:0d:74:8e:e2:de:5c:0d:da:68:cf:
5e:d0:54:08:56:41:4f:9a:4d:f0:bb:c5:53:aa:60:
54:bc:f6:6c:d3:1e:75:5f:20:04:e6:2a:35:e3:6e:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FA:34:20:0B:30:28:FC:04:E7:64:F2:B3:03:08:BB:AE:08:85:3D
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/T_o0IAswKPwE52TyswMIu64IhT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7c:51:2e:e0:53:eb:88:de:fb:72:cd:15:88:4c:44:56:3b:
dc:a5:33:5e:4a:de:90:2e:49:ca:28:a7:a2:b5:e0:3e:d6:e9:
3c:63:43:04:7c:50:22:6a:99:3a:14:d9:28:ba:59:86:59:0a:
a1:e0:79:91:e9:a8:79:27:13:60:0e:f5:0b:44:5a:6b:88:9a:
08:3c:7e:06:83:72:8c:e8:cc:53:15:d1:44:f0:c8:3e:23:3f:
c0:4d:c8:d3:bd:12:46:f2:45:42:a3:41:1e:7c:b7:f4:3e:92:
43:ed:98:9b:9f:08:28:1f:e6:d6:72:84:58:65:dc:d8:33:17:
9a:e2:63:b8:d4:fb:45:75:8b:ac:37:9a:5e:04:8f:fa:10:cc:
a6:fb:6a:a8:45:70:a7:a4:97:37:b8:69:5e:41:ba:43:e0:f8:
dd:07:13:a2:5f:d9:22:be:cd:ce:78:62:5b:eb:ef:75:b1:d0:
74:ff:43:c3:a0:98:3e:71:65:89:52:a0:4d:fe:0a:1b:37:25:
46:44:d6:3b:b8:b5:82:dc:7d:74:34:34:d9:f8:00:97:0e:c6:
a1:85:ea:98:78:7a:c3:e5:34:ba:a9:1d:f0:4c:ad:a2:63:26:
95:22:2f:4a:52:be:81:e4:a9:b6:31:83:56:99:fc:f0:b8:c2:
aa:d1:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:54:37 2024 by rpki-client on console-ams.rpki-client.org