Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/48A5UTvM9kHjYizTlFJZbeO3T8U.roa
File: 48A5UTvM9kHjYizTlFJZbeO3T8U.roa (raw, json)
Hash identifier: mv+fuXM2We3m8H92I/SCvwrsUfVnIVQGWqEuExpW838=
Subject key identifier: E3:C0:39:51:3B:CC:F6:41:E3:62:2C:D3:94:52:59:6D:E3:B7:4F:C5
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 018CC56E02D7E5520D8A9FC53690AC166921
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/48A5UTvM9kHjYizTlFJZbeO3T8U.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15557
IP address blocks: 195.234.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:02:d7:e5:52:0d:8a:9f:c5:36:90:ac:16:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3c039513bccf641e3622cd39452596de3b74fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:c2:d7:a5:4a:24:af:c6:84:ee:6e:96:68:
fc:a6:1b:07:f8:58:c7:3f:b6:cd:47:fb:62:1b:50:
2c:2a:97:b9:f4:77:1e:c3:8d:a7:7d:e5:e2:30:16:
f0:9a:cd:d3:88:b5:f0:6d:b1:18:15:57:24:9d:f7:
39:25:2b:b8:15:f7:cd:55:57:f5:eb:92:25:82:5f:
63:e8:2d:3a:04:fe:5c:d1:90:e3:28:d0:d0:44:01:
df:79:0e:5f:63:61:64:29:ba:18:cd:ec:e4:8d:ab:
eb:8c:cb:7a:82:46:e2:23:8d:6b:d7:1e:f9:13:04:
d3:5d:94:8c:b0:7a:d4:ed:17:86:20:8b:22:51:fc:
9a:15:d9:e1:e0:d2:4e:f1:75:a0:80:29:5d:4d:74:
8a:9a:1e:97:0d:44:07:36:ad:6d:56:90:4f:47:07:
75:20:3c:9d:00:99:2a:9f:bb:7a:6e:d0:63:c5:9a:
2d:d3:9e:1f:95:e3:b7:b3:66:58:d5:0c:d1:69:c2:
fb:f3:d9:8b:2c:89:ff:fc:b1:3e:fc:cf:bd:18:14:
d4:93:37:a0:75:0e:81:b3:4b:70:78:70:70:7d:b5:
cf:bb:88:1f:fb:d2:0c:44:ea:55:17:f4:1e:65:44:
cb:70:4e:15:50:c8:f7:4b:45:a1:be:76:9c:a0:0e:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C0:39:51:3B:CC:F6:41:E3:62:2C:D3:94:52:59:6D:E3:B7:4F:C5
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/48A5UTvM9kHjYizTlFJZbeO3T8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.41.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ad:f0:1e:e9:ee:c0:db:db:d1:85:7a:35:8d:ab:0f:9a:a4:
f5:af:c6:0f:06:57:8f:d6:c6:e4:1d:d6:1d:b1:d3:b4:41:bb:
2e:6c:3d:9d:3c:c8:2c:84:7f:33:21:ca:22:5e:54:b1:57:c5:
37:e5:00:a6:e0:38:1b:99:94:2d:e1:ef:54:83:82:c5:02:83:
fa:ed:26:89:21:b0:35:08:83:4c:4a:b8:23:40:a9:e2:0b:c1:
b4:fa:af:4c:01:23:08:d2:95:ce:c5:7b:f8:bc:64:77:7a:06:
b5:7c:f1:94:e9:81:4d:4f:42:06:fb:b2:52:2e:8c:d8:cc:11:
38:b8:c2:83:10:2a:37:54:3e:57:d7:e9:ff:67:9e:2b:da:f8:
e6:73:bb:3f:51:63:50:74:72:4e:51:36:50:cd:f6:4f:fa:8e:
8c:09:0c:a1:e0:b6:e8:c0:93:42:50:dd:19:f5:3c:1e:b5:c3:
8d:c5:af:1c:cf:b2:b2:33:69:2f:78:d2:c2:7c:c3:92:b6:69:
e6:a5:a5:2f:93:ef:2f:c0:2d:ce:66:e8:6c:80:9e:c4:bc:7b:
ac:99:a2:95:d4:fd:db:c6:6f:f2:0c:26:fa:03:39:b1:83:11:
5a:e1:f5:0a:47:61:27:41:44:72:72:8a:d9:e6:3f:a4:a3:e9:
e1:54:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:57:32 2024 by rpki-client on console-ams.rpki-client.org