Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/16X_1LHoGrsyolbPIJhRZRwpZ90.roa
File: 16X_1LHoGrsyolbPIJhRZRwpZ90.roa (raw, json)
Hash identifier: QrITIlPtPK8BBQKjD/UENeIsxG74ep6HxEq1HvmUpC8=
Subject key identifier: D7:A5:FF:D4:B1:E8:1A:BB:32:A2:56:CF:20:98:51:65:1C:29:67:DD
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 018CC5013A9AB38B346FB75318A07F65CFEB
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/16X_1LHoGrsyolbPIJhRZRwpZ90.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48614
IP address blocks: 195.93.180.0/23 maxlen: 23
193.106.92.0/22 maxlen: 22
185.185.56.0/22 maxlen: 22
2a0b:4880::/48 maxlen: 48
2a0b:4880:1::/48 maxlen: 48
2a0b:4880:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3a:9a:b3:8b:34:6f:b7:53:18:a0:7f:65:cf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7a5ffd4b1e81abb32a256cf209851651c2967dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:a8:d2:30:ac:91:92:ad:19:65:ad:54:1e:
54:a0:d6:c2:87:aa:ee:dd:d2:ad:68:6e:d6:db:97:
d0:14:61:82:37:31:07:18:7c:62:24:7a:10:8d:31:
78:19:11:af:c2:43:0e:14:43:8d:e2:27:ea:14:77:
c6:fc:0e:7f:ba:58:de:e9:0d:64:88:8a:06:3e:22:
2b:6a:21:fe:84:fa:5a:6e:4c:c8:a2:64:e9:8e:9f:
b6:c3:ba:fa:34:85:a5:d0:d1:df:c6:b5:94:2d:63:
4e:4b:dc:4e:7c:82:b6:2f:64:fd:c6:41:7c:f7:1d:
a0:46:b0:8b:77:fc:d7:2f:76:95:91:d3:a2:13:9e:
67:b0:01:71:06:b3:36:91:59:99:89:e3:42:a2:8f:
42:70:5f:5b:35:82:9e:30:83:80:f9:a1:57:59:01:
ed:1d:95:c5:f3:23:26:cd:de:f5:4c:e2:54:6f:24:
ca:5c:28:34:b1:71:6f:52:ef:9b:1e:57:e9:95:27:
90:48:39:44:a6:45:fa:75:fa:37:50:e8:02:f0:f2:
12:ff:41:6d:b6:77:cc:ff:e3:d2:76:03:35:f4:0c:
47:54:ae:ce:09:9c:a6:41:76:61:7d:4b:08:dc:49:
4d:47:de:61:01:e7:b1:f1:0e:1d:ab:d2:82:d6:0c:
67:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A5:FF:D4:B1:E8:1A:BB:32:A2:56:CF:20:98:51:65:1C:29:67:DD
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/16X_1LHoGrsyolbPIJhRZRwpZ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.56.0/22
193.106.92.0/22
195.93.180.0/23
IPv6:
2a0b:4880::-2a0b:4880:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a3:35:c9:9e:aa:6b:0c:c7:b3:e8:08:40:4e:cf:6f:c7:70:95:
37:3c:b1:36:e5:80:b3:37:0d:e4:53:cb:55:b0:1a:7c:d1:ab:
24:7d:95:ee:d9:d5:2a:de:ca:a5:dd:7b:5f:ee:cb:93:ea:4c:
f5:fe:54:73:02:2f:3c:6e:dc:7c:2d:d8:6a:ed:25:32:08:84:
c2:a7:c5:80:39:4c:c0:1f:a5:53:cc:2f:7e:fc:13:88:85:e9:
45:35:75:91:0b:60:e3:f6:19:f7:49:4b:21:ca:8d:a5:97:50:
69:1b:7b:4c:2a:96:a7:16:98:02:2b:62:4e:e4:bb:35:00:a0:
00:7f:5f:13:eb:b1:40:c4:4f:1a:e4:24:d9:d6:53:bc:bb:0f:
dc:07:4c:e6:6f:e8:a2:51:ca:74:64:01:97:80:3e:d0:e0:e3:
cf:d4:65:39:53:35:1c:4c:92:00:3b:17:2d:9c:7b:ae:24:12:
8e:f9:18:c3:ab:71:51:94:87:dc:c1:68:d7:59:f0:30:2e:37:
d4:8a:41:9d:bb:0e:a3:c6:e9:11:16:73:b2:74:67:d1:fd:f7:
c6:7a:4c:39:0f:26:1c:39:28:a4:37:a5:b6:00:6d:8c:ce:ae:
12:68:f0:53:b7:ba:78:fb:d3:d7:c3:e7:fb:4a:37:c7:fd:ce:
94:9c:a5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:27:36 2024 by rpki-client on console-fra.rpki-client.org