Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/e4yX-6abWdsg8XEmvPZVDhiW_1o.roa
File: e4yX-6abWdsg8XEmvPZVDhiW_1o.roa (raw, json)
Hash identifier: l1Bj1VJfsXYqxqIH9n4FmONv8S5FFxqUmMxxPpG8fdk=
Subject key identifier: 7B:8C:97:FB:A6:9B:59:DB:20:F1:71:26:BC:F6:55:0E:18:96:FF:5A
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 018CC5009A01D6149826DFC2D556327B5AEF
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/e4yX-6abWdsg8XEmvPZVDhiW_1o.roa
Signing time: Mon 01 Jan 2024 12:30:00 +0000
ROA not before: Mon 01 Jan 2024 12:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 195.96.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:9a:01:d6:14:98:26:df:c2:d5:56:32:7b:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Jan 1 12:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b8c97fba69b59db20f17126bcf6550e1896ff5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:9a:c0:ae:0b:51:db:dd:b0:8c:9e:06:f3:
d8:13:e0:c5:03:2e:45:ae:9d:e8:27:83:b2:88:57:
88:58:9d:6e:ce:c6:49:98:6d:ff:6d:c0:27:88:3a:
b5:5f:ce:8f:f2:e9:fb:6a:5d:33:1c:67:ee:24:6a:
8d:02:35:dc:09:14:b4:0d:40:bd:a7:a7:07:74:70:
9d:ec:06:64:8b:8f:eb:91:0f:a1:4b:9c:24:d7:67:
4a:4f:14:1e:f8:f6:94:2b:8e:19:d9:bf:d0:80:90:
ae:5a:11:42:41:5d:41:ea:72:b3:32:a1:22:5d:ba:
2b:f8:ca:ba:67:10:fa:5d:2f:4a:5d:04:66:37:5c:
65:d7:0f:a0:26:71:ff:7c:0a:ea:6e:32:d0:c5:bb:
43:35:64:f7:bc:49:35:d8:09:7b:2a:af:d9:80:30:
70:c8:fa:5e:71:a6:85:22:ac:bf:f9:78:7a:c9:84:
5c:b1:a9:29:4a:cc:4e:e7:76:90:23:c8:0f:ff:e9:
db:fb:fa:d3:02:ae:ba:af:67:11:01:5a:ca:d2:93:
08:0b:f4:30:a0:c6:b0:54:1b:9a:00:65:09:ae:4c:
2d:a3:97:2b:a6:84:e7:c2:00:15:25:63:50:b0:40:
34:34:13:d9:38:d4:ec:1d:98:f7:f1:f2:62:ce:89:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:97:FB:A6:9B:59:DB:20:F1:71:26:BC:F6:55:0E:18:96:FF:5A
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/e4yX-6abWdsg8XEmvPZVDhiW_1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8c:b7:2e:7c:4d:10:16:c9:4f:d2:6e:c3:9b:93:4b:ca:10:
74:f7:ea:a0:d9:5f:cf:f6:63:64:21:ee:f5:8d:1e:b3:7e:50:
0f:f4:b1:ea:89:7a:a3:77:89:5c:da:9e:e2:78:e5:0a:4f:6b:
5c:d1:19:80:d8:89:f5:b4:eb:98:42:f7:12:5a:1b:01:83:f6:
63:9d:a0:8e:e4:72:83:fe:a5:ed:8a:2a:ea:af:74:78:41:4a:
b1:a9:54:29:15:5e:6f:91:26:bd:80:c3:66:53:b5:f3:60:88:
3b:ae:2c:d6:5f:9d:07:0b:9d:77:e6:7c:6d:95:56:d9:ef:bc:
4a:c4:19:69:61:ac:48:b9:59:b2:ab:a6:27:6a:b8:bc:dc:53:
09:7f:35:b7:a2:60:ad:e4:b8:75:eb:10:5a:65:76:8a:96:e9:
a1:10:69:5d:d5:88:cd:65:e2:b1:48:6a:7c:08:9a:30:43:0a:
5b:58:9a:72:27:9a:b5:ca:2f:8e:38:4f:47:7c:e0:57:80:06:
f2:fe:ab:97:3f:5a:5e:2f:0f:27:60:68:52:88:90:b1:e9:a0:
b7:af:90:66:c3:58:0e:ca:12:67:a4:8c:16:0c:da:50:b2:60:
40:41:1f:5f:20:b4:01:5c:e2:d2:68:85:63:4a:1a:57:59:a6:
1e:ef:5a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:43:57 2024 by rpki-client on console-fra.rpki-client.org