Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/weqeyiOHVsou7kz948_1DCWId6I.roa
File: weqeyiOHVsou7kz948_1DCWId6I.roa (raw, json)
Hash identifier: aB9gPT/+PDZLfO60AeZLeSqijJQhMvBRdoYXXLGCW/E=
Subject key identifier: C1:EA:9E:CA:23:87:56:CA:2E:EE:4C:FD:E3:CF:F5:0C:25:88:77:A2
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0191D6DCA086F424AFC5FE5917EA80326B9D
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/weqeyiOHVsou7kz948_1DCWId6I.roa
Signing time: Mon 09 Sep 2024 12:57:48 +0000
ROA not before: Mon 09 Sep 2024 12:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208635
IP address blocks: 195.53.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:dc:a0:86:f4:24:af:c5:fe:59:17:ea:80:32:6b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Sep 9 12:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ea9eca238756ca2eee4cfde3cff50c258877a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:6b:08:b2:44:4e:5c:5f:de:cb:d5:ae:69:
0b:da:f1:9a:dc:2e:92:6e:80:52:76:7b:71:1f:4a:
c6:69:e2:40:1e:69:0e:b9:e8:33:19:5b:cb:da:cd:
2b:82:69:e1:85:cd:26:be:9b:04:ec:61:1c:3e:11:
c6:31:26:26:8d:e7:c3:5a:fc:bd:7e:3b:6f:a0:f4:
b9:fe:70:44:ea:6f:5b:64:74:0e:3f:dd:d3:bb:b3:
5f:26:8c:89:24:8c:5f:e3:f0:88:6d:ed:15:fc:d8:
ea:4c:2f:de:71:bd:38:a6:34:54:c4:09:9b:fd:9c:
7d:27:ed:b2:5b:6a:3c:f2:18:00:0a:f8:bd:da:c4:
8e:ab:88:2b:fb:ca:d8:ac:e5:e0:c2:0d:0b:2c:3a:
81:87:37:b4:9b:f5:fb:66:7c:6c:0e:2c:55:cf:c5:
9e:37:a7:17:fb:3c:98:d8:92:bc:5d:1b:92:75:96:
b0:1f:c5:12:5d:12:3b:72:28:e0:38:3b:ba:37:ad:
00:ea:b0:18:0c:e7:cc:c1:7c:e7:c1:a6:79:95:db:
5f:d3:72:1f:8c:ca:90:cf:b8:6c:ad:1a:84:9a:32:
e5:b7:11:b0:d1:c1:7c:b9:68:5c:ac:a7:ae:20:b5:
fb:33:dd:bd:b7:02:ea:56:07:00:0a:90:0a:45:f3:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:9E:CA:23:87:56:CA:2E:EE:4C:FD:E3:CF:F5:0C:25:88:77:A2
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/weqeyiOHVsou7kz948_1DCWId6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c2:7f:ac:eb:6e:91:04:ea:23:7f:f4:45:2e:20:7d:06:62:
3b:ff:86:26:ea:15:98:d9:57:f4:e6:6f:ae:ac:dd:a5:cb:91:
34:a2:22:c1:84:96:8b:7d:87:db:a1:59:74:fc:c8:e9:88:6f:
c6:75:3a:a6:34:3d:09:04:6a:0e:ea:14:32:00:9f:10:01:24:
fd:9f:78:d3:92:97:8b:d7:3e:78:11:a4:d3:25:6d:fe:22:e8:
ca:8b:3f:9e:1f:1c:5a:eb:3e:5c:bb:f3:d3:9b:c7:e2:6b:f9:
d2:3a:bb:63:49:f7:db:ac:72:19:3b:8a:67:dc:93:6e:1b:70:
cb:1b:bd:b8:ed:96:31:00:98:5c:1c:54:98:bd:d5:ef:34:b9:
be:76:23:ea:9c:cf:bf:d8:e0:a8:21:f4:3e:1d:26:b4:78:40:
e9:fe:b6:54:07:3a:de:26:6c:12:53:56:f4:aa:d8:67:1f:0d:
5e:13:e8:4c:03:4a:14:24:b4:0b:3d:d9:52:90:6f:39:d4:d7:
3f:60:ff:b1:a1:82:b1:29:84:b7:dc:c3:26:66:da:a7:08:65:
35:42:52:30:d3:70:e2:75:ae:58:81:54:f3:d6:74:4f:c0:7a:
45:76:71:24:c2:01:d0:1e:ea:d6:7f:47:d1:39:52:2e:40:d9:
a5:ef:a6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:12:22 2024 by rpki-client on console-ams.rpki-client.org