Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/b6qHYzbvVZeCCCJgAdXnisYyJfM.roa
File: b6qHYzbvVZeCCCJgAdXnisYyJfM.roa (raw, json)
Hash identifier: lcAO5nD73q1zQ1rsHwQC3Q/wYO/i2/V+ywEjCT9u2hI=
Subject key identifier: 6F:AA:87:63:36:EF:55:97:82:08:22:60:01:D5:E7:8A:C6:32:25:F3
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 018CC64B7C3C96F98037434143116C4AD7F2
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/b6qHYzbvVZeCCCJgAdXnisYyJfM.roa
Signing time: Mon 01 Jan 2024 18:31:24 +0000
ROA not before: Mon 01 Jan 2024 18:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202299
IP address blocks: 195.5.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:7c:3c:96:f9:80:37:43:41:43:11:6c:4a:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Jan 1 18:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6faa876336ef55978208226001d5e78ac63225f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:37:e8:89:ec:b3:75:52:37:a3:d8:57:72:
e7:30:4a:31:ff:10:b1:25:ff:0d:25:ce:ff:aa:d2:
66:10:da:fc:b8:de:7d:6d:ff:bb:c1:a5:8e:ae:22:
d8:d6:d9:ac:2d:42:b1:9d:c3:86:a4:ae:ab:4c:85:
c7:98:09:ae:74:9e:26:d7:3a:c7:ae:2a:82:2b:75:
04:f4:c5:08:58:95:f3:d3:fa:65:6f:1e:f8:9f:82:
95:b5:7e:14:84:8c:ec:12:bb:bc:88:52:40:e4:0f:
6d:5b:2e:c2:fe:e5:7c:73:79:bd:6e:95:df:80:ee:
49:0a:ae:2e:c3:f3:33:04:03:f1:45:db:1a:50:8f:
44:2f:7f:6a:36:1a:58:7f:fd:09:28:b4:da:cd:95:
b7:c9:c1:37:b7:8f:63:9e:ee:4d:5e:c1:b2:05:80:
37:98:8f:8b:7e:99:f3:c7:7d:51:21:65:6b:79:2b:
87:69:7b:d3:58:71:3f:a4:a9:fd:dd:e9:98:bf:97:
e1:ef:53:6a:6b:4e:32:7e:01:aa:93:1b:ba:b9:0c:
a7:4b:e8:96:1d:01:b7:4c:ef:35:65:b5:d4:19:ed:
d2:95:07:f5:90:5a:ef:e8:f2:cb:ed:6e:4f:65:a1:
a6:5f:9d:63:95:65:8d:37:2e:e5:6f:69:6c:62:65:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:87:63:36:EF:55:97:82:08:22:60:01:D5:E7:8A:C6:32:25:F3
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/b6qHYzbvVZeCCCJgAdXnisYyJfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a6:cb:0b:32:31:8d:58:ca:bb:ca:41:af:77:4b:85:39:9f:
24:c7:33:44:7d:49:f6:3c:f4:79:71:26:d6:2a:89:46:19:6c:
28:73:ef:d1:14:60:c6:03:7f:24:0c:55:2e:24:da:bf:fd:75:
e3:78:c2:09:b0:27:14:1f:9f:33:95:5c:5d:f8:5e:61:b4:d2:
48:a9:76:4d:04:54:b1:53:76:5e:8d:83:4e:1e:dc:12:22:ac:
0a:72:ed:98:77:da:69:30:70:fb:d3:ed:7f:a7:59:6b:3d:5c:
2e:3d:b1:99:1f:3a:f8:ba:83:d7:60:31:80:4f:0d:39:8e:84:
b6:43:e3:bb:72:26:09:42:18:67:ec:6f:97:c5:71:c5:ad:da:
35:de:80:1f:83:9b:0b:2e:76:a9:94:55:1d:4c:5b:22:52:91:
9f:47:e8:92:19:28:5f:d3:46:ec:78:41:4d:9e:d6:f1:b3:47:
76:31:b6:0e:20:6d:08:75:0d:33:f2:3f:10:5f:84:37:1f:05:
9b:3a:82:8e:72:f2:87:9c:e4:d9:67:5c:24:90:84:b1:10:47:
e4:39:58:48:10:1a:7d:c2:22:64:ad:e8:d7:46:e8:f3:92:3f:
d2:1b:22:56:7d:9e:b9:ad:9a:ea:4b:db:2f:60:f3:a8:f3:c2:
93:f3:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:08:34 2024 by rpki-client on console-ams.rpki-client.org