Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/EDgSaZwV4G-vCadph_HbcA1FV9I.roa
File: EDgSaZwV4G-vCadph_HbcA1FV9I.roa (raw, json)
Hash identifier: y0G1Yovm9AiF27/VRAzxCkVWRIxa7rz8Hf75po8bnqM=
Subject key identifier: 10:38:12:69:9C:15:E0:6F:AF:09:A7:69:87:F1:DB:70:0D:45:57:D2
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 018CC726BA7D226387ABCE732D16E075759C
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/EDgSaZwV4G-vCadph_HbcA1FV9I.roa
Signing time: Mon 01 Jan 2024 22:30:53 +0000
ROA not before: Mon 01 Jan 2024 22:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207496
IP address blocks: 195.162.6.0/23 maxlen: 23
195.177.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ba:7d:22:63:87:ab:ce:73:2d:16:e0:75:75:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Jan 1 22:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=103812699c15e06faf09a76987f1db700d4557d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:53:c9:e9:ba:03:14:c8:f3:04:fc:00:98:
44:d0:bf:5d:87:a5:1e:96:cc:07:77:71:94:0c:bd:
27:de:01:5f:f9:f2:86:d8:13:dd:1a:ba:8b:dd:a6:
6a:c5:f3:69:53:07:85:b2:e1:03:b4:c1:b3:be:ff:
03:c3:25:20:e6:1a:1c:3e:9f:a0:77:a8:a9:be:97:
5c:5e:78:43:9f:42:70:fd:50:a7:d3:c7:6c:68:15:
8a:80:04:12:b9:18:da:22:9a:18:1b:09:95:da:0b:
ba:94:28:11:5d:60:ab:13:6e:4e:c7:84:93:3b:5b:
95:8f:34:ab:c2:ea:9b:4e:14:14:17:54:af:16:0e:
c3:10:42:81:5d:fe:47:62:76:f0:c3:84:3a:b7:3e:
9a:65:a6:1e:f5:d4:55:43:9d:6d:d2:c0:3c:f0:40:
68:f3:9b:45:1f:d9:a1:e9:cf:99:9e:08:e0:2d:1a:
d4:32:0c:61:12:a5:23:51:f2:5f:7d:38:fa:1e:d3:
64:5b:95:ba:dd:c0:f8:7c:cc:ba:42:79:2d:29:64:
fa:23:b4:1b:41:9a:65:d7:33:a1:10:5e:19:ea:fe:
b8:88:e3:24:52:6b:73:70:cc:a6:11:2e:75:26:0c:
af:8e:9d:79:3e:57:d6:d6:87:30:cc:c7:ca:3f:c0:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:12:69:9C:15:E0:6F:AF:09:A7:69:87:F1:DB:70:0D:45:57:D2
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/EDgSaZwV4G-vCadph_HbcA1FV9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.6.0/23
195.177.194.0/23
Signature Algorithm: sha256WithRSAEncryption
07:b6:98:1f:c0:c0:13:33:80:76:3b:09:0a:e4:7f:20:17:6f:
0e:2e:4d:18:0e:75:f0:8a:e5:9b:13:5b:e8:1a:fe:93:d1:87:
2b:66:54:b0:71:37:7b:b5:7e:2e:80:f0:91:91:b5:05:6e:df:
dd:1d:15:d9:46:29:20:f5:1d:67:30:ae:d2:1c:08:7d:59:f5:
fe:3c:ba:fc:dd:5f:f5:e5:37:ab:84:38:28:4b:23:a2:4e:4d:
b9:50:17:27:3e:2b:f6:0e:c2:d2:84:65:d6:dc:32:6f:45:0c:
59:64:da:3c:6e:32:30:e9:d1:84:c7:b0:2a:13:d3:50:40:81:
63:37:e3:eb:47:59:94:25:8d:14:6d:da:95:31:de:39:51:0e:
a3:27:3c:68:64:00:d6:85:e5:83:24:05:04:5e:54:fa:20:30:
30:d5:97:f9:96:b0:22:6c:95:13:1b:ff:5f:99:45:47:66:f1:
d5:26:f4:81:aa:3a:5e:c6:6d:17:8c:59:fe:d3:b2:42:cc:dc:
ab:7b:20:75:ae:65:8d:7b:41:3e:0d:6a:dd:9f:89:95:5d:80:
39:06:2c:5d:04:ed:43:2b:6d:a7:7c:00:a4:1c:3d:54:2f:0c:
c7:08:53:72:08:42:c6:98:61:29:87:e4:98:9b:43:1b:16:b9:
d9:8d:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:14 2024 by rpki-client on console-fra.rpki-client.org