Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/T88hGFTPP89gz5ghn9t50LrGfrs.roa
File: T88hGFTPP89gz5ghn9t50LrGfrs.roa (raw, json)
Hash identifier: e9eQ0tq+mU/HHAkoWAn3Gcs0kFuruauTIL/FEV76kq4=
Subject key identifier: 4F:CF:21:18:54:CF:3F:CF:60:CF:98:21:9F:DB:79:D0:BA:C6:7E:BB
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D30A9D060614B282FAAEB7E1BC9C360EB
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/T88hGFTPP89gz5ghn9t50LrGfrs.roa
Signing time: Mon 22 Jan 2024 10:14:11 +0000
ROA not before: Mon 22 Jan 2024 10:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210158
IP address blocks: 195.235.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:a9:d0:60:61:4b:28:2f:aa:eb:7e:1b:c9:c3:60:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 22 10:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fcf211854cf3fcf60cf98219fdb79d0bac67ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:8f:31:a0:b3:7e:ac:45:85:b5:1f:4d:a5:
cb:f5:3a:9c:cb:2d:55:b0:b9:cd:37:72:bf:ba:09:
fa:bb:cc:01:25:d4:55:3c:1f:74:22:b1:32:88:ff:
0c:0c:3d:9a:ad:f6:41:3d:0f:13:4c:b3:20:00:50:
09:25:5d:71:9a:13:6a:33:75:40:1c:bf:e0:d5:4d:
82:4b:c4:f2:ea:38:48:40:ef:d5:ac:a8:ca:63:5f:
ed:a9:2a:24:20:9d:12:c3:0c:fc:bb:d8:a8:f0:01:
ae:95:3e:86:07:22:7e:8d:fe:c4:1a:b9:c1:4b:38:
03:86:45:8a:24:69:e3:d7:21:6d:19:c5:63:c6:01:
e7:fc:f6:e0:9b:72:52:ba:11:52:fc:e7:77:5f:b6:
85:b1:c9:c8:61:a0:e2:e7:8c:e0:a2:e6:5c:9e:59:
cd:37:89:bc:35:ec:07:59:31:ca:a3:0e:e7:9d:21:
a7:01:fd:fe:e9:6c:d2:08:c6:fb:4a:03:c9:78:f5:
21:05:e6:f6:b8:f2:46:f1:be:78:a6:b7:dd:51:92:
91:03:16:e9:96:08:c4:41:7f:cb:e5:06:6d:22:2e:
57:57:c0:a3:2c:b6:6f:de:a0:95:91:d7:1e:34:d3:
91:d9:08:da:76:1c:57:86:69:32:2a:97:47:be:89:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:21:18:54:CF:3F:CF:60:CF:98:21:9F:DB:79:D0:BA:C6:7E:BB
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/T88hGFTPP89gz5ghn9t50LrGfrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.235.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e2:91:e9:c9:e9:95:dc:1c:84:51:fa:c8:a0:fb:b6:fc:93:
17:61:b8:95:30:f7:1c:cc:d5:d9:af:d0:fb:72:7e:82:dc:10:
7a:b9:a9:9a:c3:5c:1c:99:ef:c1:7c:a5:96:b0:f2:a7:6d:93:
7b:d5:89:0a:b6:01:6e:28:2f:51:5b:1c:41:a3:39:e9:16:cc:
1a:46:ed:3e:a2:45:9c:6a:b2:2e:0e:a3:8e:51:de:8a:cc:40:
06:6c:90:c7:70:8c:90:07:fd:de:4b:13:70:31:10:3d:dc:0e:
db:92:e4:3f:53:a9:86:57:8f:32:6b:7d:9c:30:9a:19:16:73:
79:a6:ed:32:84:9f:df:a1:93:4f:c2:51:0e:38:33:dc:3d:12:
f9:05:2c:35:17:bb:63:17:65:a2:7b:ba:21:05:c2:99:75:9c:
32:04:88:41:7a:4e:c5:75:25:7b:07:1d:c0:2b:bc:99:41:ca:
b7:25:e5:d3:ca:40:4c:34:72:d1:06:91:c8:9c:d3:c3:a2:3d:
02:d8:63:25:57:67:3a:f4:a9:e7:22:5d:f4:fa:31:69:38:1f:
72:c5:e6:c9:d4:7c:96:e1:c5:37:4e:6b:7b:5f:30:f2:d0:f7:
36:18:63:b8:4d:d2:5f:5e:27:5d:63:d7:33:05:23:f9:93:90:
e4:85:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:57:58 2024 by rpki-client on console-ams.rpki-client.org