Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/B6ncujToGuPy4UvwSycnxZctItI.roa
File: B6ncujToGuPy4UvwSycnxZctItI.roa (raw, json)
Hash identifier: IHUbWUCLzBgJpdSMd2pHNwm5yG5U01jT+0unqaED8gU=
Subject key identifier: 07:A9:DC:BA:34:E8:1A:E3:F2:E1:4B:F0:4B:27:27:C5:97:2D:22:D2
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 019161E23E9575A72B31EE44AAD8AA8ABAA6
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/B6ncujToGuPy4UvwSycnxZctItI.roa
Signing time: Sat 17 Aug 2024 19:48:22 +0000
ROA not before: Sat 17 Aug 2024 19:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201150
IP address blocks: 195.5.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:61:e2:3e:95:75:a7:2b:31:ee:44:aa:d8:aa:8a:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: Aug 17 19:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07a9dcba34e81ae3f2e14bf04b2727c5972d22d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:85:f2:7d:ca:ec:43:c8:db:e5:c8:b1:33:
96:3d:38:8e:57:59:0c:2e:94:6d:aa:e2:30:93:9f:
a0:4c:ae:ac:16:8b:d0:82:d3:bf:d9:58:af:01:12:
af:69:da:0c:5c:43:7b:2f:cf:ae:7d:90:3f:4a:0a:
73:4f:21:00:cf:f6:ad:b0:f6:a8:cb:4f:e9:4c:f7:
e9:50:5b:03:3b:be:c9:a7:9e:65:d3:67:6a:0c:a9:
aa:40:eb:58:13:fc:73:62:f2:fb:59:30:c5:79:0c:
13:23:0a:da:8a:06:1b:40:3d:6c:aa:3c:0c:b3:cb:
c8:d3:e8:b5:73:49:8b:87:ef:b4:f2:53:a5:a0:c4:
20:0c:0a:62:8e:d1:69:51:48:90:fd:4c:a2:3d:0d:
8a:4f:6f:38:6e:ce:53:f9:74:f9:9c:1f:96:42:ba:
81:0c:5e:07:6a:30:da:9f:c3:3c:5b:d2:f4:6c:0c:
dd:0b:4e:97:ab:99:c0:15:fc:9d:39:e7:15:d8:10:
d6:cb:62:c8:f5:fa:e1:20:c4:6b:a7:85:74:1b:4d:
fd:6b:86:88:da:eb:01:8a:6f:40:ca:5e:f0:6e:13:
15:61:b4:cb:1f:8b:26:b0:1c:38:6d:64:78:55:a2:
17:db:29:de:5a:f5:c9:af:fb:9d:bb:8c:1d:4e:13:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:DC:BA:34:E8:1A:E3:F2:E1:4B:F0:4B:27:27:C5:97:2D:22:D2
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/B6ncujToGuPy4UvwSycnxZctItI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5a:91:4c:70:dd:43:b4:f5:40:1e:60:d6:84:b7:64:fb:41:
3f:47:44:38:ce:a1:1f:0c:6a:c1:d2:48:3d:fd:1c:21:38:fc:
c1:ef:ed:fd:0a:8a:a0:05:99:5f:06:06:fa:9d:e5:c4:e8:3d:
f2:6b:c6:16:36:a6:4d:31:09:8c:44:fa:f7:14:4f:09:39:4f:
f2:eb:e2:59:58:7e:f1:37:48:96:0e:7c:4b:48:a5:e1:54:82:
69:82:58:e9:67:cb:31:4a:12:9f:3b:2c:a2:25:18:e4:95:91:
e6:65:22:e7:6d:a4:f0:88:6a:b4:2f:4f:69:76:e5:62:fb:f3:
05:9a:87:3a:78:09:14:56:92:ac:e5:ca:b0:e3:bf:94:22:ea:
88:98:c8:e2:29:70:df:9b:5e:4a:ff:2b:16:55:7e:4e:ac:e0:
41:9a:5e:fe:da:83:19:22:5d:43:46:53:20:7a:0b:a7:9a:ee:
4d:74:d7:af:e0:32:19:1e:a2:b7:92:ec:79:e1:53:20:a9:c4:
72:d2:59:f9:88:54:18:0b:e2:36:f4:68:5f:bf:ec:7d:eb:cf:
4f:fb:8a:9f:16:76:29:f2:8b:dc:bf:98:46:d0:8d:4c:9e:a2:
4e:28:4e:bc:5a:57:97:39:fc:11:d6:18:7a:c6:10:5c:6d:40:
8a:fb:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:27 2024 by rpki-client on console-ams.rpki-client.org