Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Viio46hYEPd5DDotfUUDidLPOH0.roa
File: Viio46hYEPd5DDotfUUDidLPOH0.roa (raw, json)
Hash identifier: t6Ry/9tdNFBRi8YNaeWBS4PkhhtPnjZJAeQ2sbc6dXs=
Subject key identifier: 56:28:A8:E3:A8:58:10:F7:79:0C:3A:2D:7D:45:03:89:D2:CF:38:7D
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 018E08F0E42C2AE3A9B21D9DE3F783C876A7
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Viio46hYEPd5DDotfUUDidLPOH0.roa
Signing time: Mon 04 Mar 2024 10:09:48 +0000
ROA not before: Mon 04 Mar 2024 10:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211309
IP address blocks: 195.64.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:f0:e4:2c:2a:e3:a9:b2:1d:9d:e3:f7:83:c8:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Mar 4 10:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5628a8e3a85810f7790c3a2d7d450389d2cf387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:35:71:e9:4c:24:ae:0a:81:b0:98:78:be:
42:5d:1a:ca:f6:08:f1:52:20:e7:22:65:31:17:61:
85:f8:6d:a3:73:89:24:a7:c3:56:01:fb:07:59:2e:
ea:6b:9d:2e:68:f6:a0:27:89:39:7b:66:1a:42:57:
c6:fa:5b:42:b4:35:2a:2e:27:1a:e3:14:97:8c:db:
a1:f9:94:44:bb:da:83:69:6c:28:4c:7a:71:62:4e:
e5:4c:99:72:01:40:bb:a1:c5:25:f1:2e:20:9e:56:
a1:ae:2e:55:92:16:11:58:8d:7b:1a:b2:d3:b2:8c:
49:12:2a:49:51:40:67:18:c0:21:e4:6d:e3:5b:37:
e6:9a:36:9d:fb:81:de:e1:d5:f0:35:49:a3:2f:77:
13:ac:ee:e1:54:21:58:28:49:fe:43:bf:0b:7b:aa:
16:e4:b2:06:9d:b6:9e:75:59:48:01:af:dd:a2:24:
13:85:a1:49:8a:d1:67:85:82:ca:60:66:50:60:90:
bb:99:be:32:c4:bc:55:9f:6a:b4:41:5a:82:ef:8d:
8e:6a:15:7f:15:a8:08:fa:23:6d:19:66:41:c4:89:
f8:1d:59:f9:c8:d4:6f:76:c5:6c:36:a4:e4:6e:df:
23:57:a0:90:b7:ce:f8:c5:fa:57:45:d1:06:f1:32:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:28:A8:E3:A8:58:10:F7:79:0C:3A:2D:7D:45:03:89:D2:CF:38:7D
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Viio46hYEPd5DDotfUUDidLPOH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.118.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d1:30:9e:e8:f0:e9:08:32:a8:44:c1:e2:f7:34:9d:78:ef:
b4:8b:4e:9f:6b:76:0b:7d:e7:58:89:bf:2c:32:cd:59:27:b9:
27:c5:0a:26:82:a5:c6:dd:bf:d3:a1:0d:e7:c5:e7:9b:7a:0e:
6d:ad:18:cd:b1:66:33:fc:d8:9f:97:43:a1:98:40:8d:c3:3e:
0c:ee:fd:5c:a8:1c:4a:80:3a:1d:51:91:8c:18:c8:eb:28:38:
fc:9b:c1:9d:f8:de:99:06:34:c1:2b:97:e4:1b:cd:b2:b8:77:
19:ae:d6:9b:09:11:d0:64:62:e3:7c:27:db:02:62:01:20:3a:
4b:75:c7:9d:95:16:50:8f:03:2d:08:43:b9:17:41:f8:a4:51:
0f:82:26:7d:2a:ce:44:6d:c2:ad:0e:ad:b7:3e:ab:40:d8:c9:
93:d9:26:c8:0f:eb:44:66:b2:cb:1f:7c:50:ef:ea:11:0b:8c:
55:99:2f:cf:a3:f4:bd:69:8c:3a:da:53:a3:b1:9c:19:a8:fa:
f7:57:cb:1c:6b:93:eb:b5:6c:f5:2c:36:f9:4a:90:e8:a3:f7:
0e:f6:9a:75:01:a1:a5:a2:c9:4f:a2:0f:1d:bd:f2:d1:06:70:
52:09:df:3e:7e:12:70:8b:73:9d:33:53:b2:6b:22:38:f0:d4:
ab:5e:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:48 2024 by rpki-client on console-fra.rpki-client.org