Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/AfytqL7NTYaPxWLZxUQ5w70T2Yc.roa
File: AfytqL7NTYaPxWLZxUQ5w70T2Yc.roa (raw, json)
Hash identifier: AxxYjWK/smfLt+rY0JJ60YGa2ldDlQaRge9q3qA4JlM=
Subject key identifier: 01:FC:AD:A8:BE:CD:4D:86:8F:C5:62:D9:C5:44:39:C3:BD:13:D9:87
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018DEC8D6E318E1FBF579FDC82D6F79ABC74
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/AfytqL7NTYaPxWLZxUQ5w70T2Yc.roa
Signing time: Tue 27 Feb 2024 21:51:48 +0000
ROA not before: Tue 27 Feb 2024 21:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 195.14.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:8d:6e:31:8e:1f:bf:57:9f:dc:82:d6:f7:9a:bc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Feb 27 21:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01fcada8becd4d868fc562d9c54439c3bd13d987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:24:1b:38:dc:2f:68:4b:31:a1:d1:a0:05:
a5:2c:70:8e:1d:40:e8:d6:03:48:97:06:c8:81:2b:
84:17:0f:85:6c:51:c3:b0:76:c0:e1:1d:3c:b6:c6:
aa:a4:3e:e4:27:35:57:31:e7:67:f9:bf:41:c5:d6:
54:11:ad:5f:af:da:31:7c:44:34:d6:94:4b:42:32:
fd:96:ec:d7:4a:a1:cc:1f:0f:1e:86:0c:b9:6b:33:
7f:92:37:1e:d3:02:c9:86:ec:32:c6:de:ca:5a:9a:
75:1b:2a:0a:f8:17:74:37:85:ab:bb:0d:ba:98:cb:
e8:82:0f:48:ad:50:db:19:fb:c2:9c:15:11:b2:3f:
fc:d3:0c:b8:93:b3:d9:2b:ac:6a:a5:00:20:d6:52:
bc:72:28:df:a5:23:7c:b9:50:0a:74:30:c1:75:9b:
a1:24:09:a1:6a:ef:ea:ad:6b:4d:e4:4e:c7:51:8f:
c9:42:64:96:b9:03:2e:ac:32:fc:0c:51:3d:ed:c4:
54:63:d1:cf:12:b8:de:e2:94:2f:97:12:49:c0:c4:
0a:5d:79:d9:21:91:77:7c:7e:07:92:2f:a3:4f:b5:
2b:f1:00:e4:9d:d4:53:40:b9:7f:f1:cb:60:08:a1:
b6:44:6f:40:fa:7f:54:16:76:b9:18:24:c8:26:b9:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FC:AD:A8:BE:CD:4D:86:8F:C5:62:D9:C5:44:39:C3:BD:13:D9:87
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/AfytqL7NTYaPxWLZxUQ5w70T2Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e3:15:84:e8:07:e8:d4:97:26:dd:3b:91:59:6d:96:09:f5:
d6:ef:b9:8f:04:d7:5a:d9:db:ac:c1:b8:9f:f7:6c:ba:bf:0a:
28:32:bd:09:ef:a0:45:31:76:29:0d:12:a2:27:28:ca:c3:1b:
a2:0b:e5:2b:f9:50:05:cb:e7:35:d3:c5:f9:dd:d8:1b:4c:a4:
1b:28:87:f3:9d:b4:c0:e9:c3:74:ff:57:2f:aa:e1:11:b8:ad:
ce:91:fb:b4:0c:6c:e6:56:2a:d8:89:46:43:82:5b:ba:61:1e:
52:11:85:e2:b2:16:f6:e4:b7:2d:84:0d:46:8c:2f:d9:5c:ae:
4b:69:4e:5b:95:a1:41:e1:bc:03:84:f8:e8:26:33:a7:68:44:
99:83:69:c3:85:d3:49:cc:f3:50:db:a5:b9:9b:97:9d:24:b0:
2a:69:41:09:a3:a4:c4:78:fe:b7:40:25:fe:8d:14:43:4f:81:
81:af:f6:15:c9:04:39:e8:8c:c1:0b:0d:50:91:64:5e:d5:b4:
37:34:65:75:35:bc:dc:25:c1:e4:b9:2b:dd:a3:7b:f3:fe:ef:
86:47:e2:1e:44:81:7c:76:8b:46:00:17:ea:d0:32:66:a7:98:
b4:d0:04:9d:7c:ed:fa:69:bc:a5:7c:32:bb:ee:01:e1:07:0f:
fa:a2:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 20:47:12 2024 by rpki-client on console-fra.rpki-client.org