Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/E9QVO0dwJVW-SprLVsl43h1uAxc.roa
File: E9QVO0dwJVW-SprLVsl43h1uAxc.roa (raw, json)
Hash identifier: xRI0aPYVA2QVLcyiiHzJ4aNkPLyjBTxNshq5C7Cp+j4=
Subject key identifier: 13:D4:15:3B:47:70:25:55:BE:4A:9A:CB:56:C9:78:DE:1D:6E:03:17
Certificate issuer: /CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Certificate serial: 018CCA296B78031D58C7E4E7B33C10A98314
Authority key identifier: 9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/E9QVO0dwJVW-SprLVsl43h1uAxc.roa
Signing time: Tue 02 Jan 2024 12:32:41 +0000
ROA not before: Tue 02 Jan 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 195.95.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:6b:78:03:1d:58:c7:e4:e7:b3:3c:10:a9:83:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ecb222b8126a21df32d015e4c4853957d1d9744
Validity
Not Before: Jan 2 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13d4153b47702555be4a9acb56c978de1d6e0317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:b5:fb:b0:c3:34:70:9d:ca:cc:5e:8b:c8:
0c:7c:f6:c5:73:a7:72:75:66:f2:8f:a3:d9:8d:1a:
d1:14:19:8f:56:5b:9a:90:d4:af:27:e3:70:06:cb:
b4:99:52:01:fa:2e:fc:31:62:0e:ee:d2:71:1a:4d:
86:b1:d6:54:17:65:1f:b5:43:c4:d6:ee:00:e8:c7:
dc:87:76:c6:4a:6d:e5:6d:9e:68:5c:e2:b0:dd:da:
e8:04:40:06:4b:4f:6b:30:9c:cb:a8:9d:07:dc:5f:
98:dd:8b:e0:4e:84:f9:f6:a6:0b:b2:2c:14:fc:11:
66:cb:b7:5c:c9:09:ca:14:e5:12:fd:7c:da:ac:63:
c2:5b:59:fb:e1:cb:e9:8c:c2:b8:06:40:d1:f7:79:
c2:eb:59:63:30:ff:00:3f:21:1a:7a:fe:ab:d9:72:
2c:33:46:2d:49:16:53:70:a5:58:6f:91:4c:be:5a:
f5:98:b9:a7:f1:91:69:82:39:5d:b7:d2:a8:84:02:
a4:70:bd:cd:3f:5c:85:6d:f0:e7:d3:a3:e3:1b:47:
bf:62:22:a2:9a:38:c0:c9:04:6c:17:06:7f:eb:7b:
da:58:be:a2:7a:92:a5:74:15:94:78:e7:f0:73:7b:
61:eb:07:d7:88:f0:26:19:30:2f:04:71:8a:2b:e3:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:15:3B:47:70:25:55:BE:4A:9A:CB:56:C9:78:DE:1D:6E:03:17
X509v3 Authority Key Identifier:
keyid:9E:CB:22:2B:81:26:A2:1D:F3:2D:01:5E:4C:48:53:95:7D:1D:97:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nssiK4Emoh3zLQFeTEhTlX0dl0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/E9QVO0dwJVW-SprLVsl43h1uAxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b4f29a-a709-42ba-9632-58e4f24fabea/1/nssiK4Emoh3zLQFeTEhTlX0dl0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:83:e6:e5:4f:6d:73:e5:d8:76:d6:1b:7e:d4:42:0e:2c:7d:
5f:7c:a8:4b:16:65:9c:4e:f1:9b:99:e0:d8:c1:be:dd:bb:6f:
0b:b7:1f:1e:7a:ff:ce:95:95:c4:77:f2:bc:2d:3b:8d:fd:5d:
b9:5a:12:72:2d:e2:e2:8f:9e:e7:c5:a7:8a:db:a4:6b:f3:30:
02:58:37:0c:59:5f:bb:7f:59:e5:61:d2:37:15:d1:89:19:0d:
f2:34:cd:da:4d:27:73:a4:7e:0f:87:bb:a9:82:92:a7:06:67:
1a:a9:8a:50:d8:f6:c6:4b:d4:96:43:a7:c8:64:d8:4f:82:22:
ef:d0:42:61:68:ff:32:c3:6c:40:15:91:6a:91:46:04:45:c8:
1f:2c:3e:fb:da:cd:9e:5c:7b:7d:13:8e:8b:93:87:13:10:ac:
ae:b8:4a:bb:e8:57:10:42:02:dc:af:3d:dd:af:4e:f9:09:19:
9e:3a:c9:45:9e:14:25:8f:28:e8:7f:0e:28:4a:d8:4c:0e:d5:
1f:0c:09:1f:7a:56:2b:f3:61:93:6f:50:91:fa:11:64:30:23:
61:f3:87:2b:1b:50:6a:70:bb:ce:1e:96:39:e6:a5:3f:bb:39:
f8:d1:b7:97:29:b8:89:e3:10:8c:58:f5:d3:82:4d:fb:eb:54:
43:af:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:06:54 2024 by rpki-client on console-ams.rpki-client.org