Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ieonFT5TOnSAzKbpQfurbnfxz9s.roa
File: ieonFT5TOnSAzKbpQfurbnfxz9s.roa (raw, json)
Hash identifier: Nc+JFRbKcRjAMnv9vDZ93xnsHe0VezQCPPKJSl8EPR0=
Subject key identifier: 89:EA:27:15:3E:53:3A:74:80:CC:A6:E9:41:FB:AB:6E:77:F1:CF:DB
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 018FC93643692A8F8ED02C20AFAD5603F5AD
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ieonFT5TOnSAzKbpQfurbnfxz9s.roa
Signing time: Thu 30 May 2024 11:15:27 +0000
ROA not before: Thu 30 May 2024 11:15:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 195.234.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:36:43:69:2a:8f:8e:d0:2c:20:af:ad:56:03:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: May 30 11:15:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89ea27153e533a7480cca6e941fbab6e77f1cfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:ea:49:5a:9e:26:49:a8:d6:b1:57:54:e4:
24:60:68:b9:a8:65:bb:65:77:53:c0:da:dd:63:bb:
08:b3:38:9c:a0:2c:5b:b9:d8:93:8c:73:78:20:8a:
f8:7a:cb:09:31:f9:3e:84:11:ee:e7:dc:f3:48:a0:
35:e1:02:17:75:d7:92:fa:f3:4e:61:4d:42:40:88:
9f:7c:eb:ed:7a:a7:c3:89:81:c6:b0:f2:49:83:89:
a7:45:9a:9d:bf:22:2f:23:54:54:d2:50:3e:2f:1b:
25:fc:f3:fd:f5:48:95:0b:35:d0:0c:ca:aa:b4:7a:
35:07:13:2f:ca:c1:98:06:c9:c6:17:7c:ff:f4:61:
08:f9:70:e7:c6:25:73:7e:8a:5e:bf:77:43:21:6b:
21:ff:c6:eb:9b:c9:23:90:47:37:a5:43:6d:33:6c:
2a:62:ea:79:b9:d2:bd:91:80:3f:c4:86:07:17:f2:
4c:c5:29:81:c3:2b:d5:95:03:09:16:a9:fc:0c:6e:
4c:de:66:6b:ec:be:10:0c:74:ec:79:4f:3f:17:24:
e0:94:d5:84:b1:47:32:28:3f:5f:52:95:d6:ed:b7:
c2:63:e3:30:c8:d2:53:37:29:73:36:e4:4f:f8:d1:
fe:3b:a7:7a:e2:5f:1d:c3:ec:bb:b9:15:6d:2d:2b:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:27:15:3E:53:3A:74:80:CC:A6:E9:41:FB:AB:6E:77:F1:CF:DB
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ieonFT5TOnSAzKbpQfurbnfxz9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:59:ff:eb:db:1f:f6:33:84:ac:4b:95:40:2c:37:71:2a:02:
03:18:94:80:80:d7:c2:f2:b4:8a:29:9d:3b:b4:3b:b3:4c:06:
b7:9a:e7:89:1c:a4:a0:dd:36:86:4c:7b:9b:d7:37:2c:d5:57:
2b:8b:e3:df:7a:74:39:da:fd:68:de:1d:9b:f0:2f:18:12:b2:
67:8a:09:ca:62:58:b1:52:9f:6f:74:1d:9a:0c:e1:05:10:c4:
99:8e:12:92:38:7f:68:e0:bc:ac:5b:6d:5e:75:7f:fe:fe:26:
23:4a:d8:57:ce:93:85:ae:09:0b:fa:1a:05:f5:a5:bb:0e:a2:
4b:c3:97:46:40:33:83:28:ec:eb:f9:7e:3e:79:c2:7d:f9:87:
fe:ae:09:a6:02:c7:1b:07:b4:e3:cd:85:14:ed:da:9b:69:60:
90:46:f8:76:68:30:0c:ee:1a:fd:4c:3b:4a:55:35:a4:e9:69:
63:8b:8d:af:7e:68:e8:14:80:e7:eb:f7:36:f6:b3:99:bb:8e:
84:85:3c:66:c0:43:d5:b0:bd:f5:03:15:9b:6d:03:90:9a:86:
9d:95:e1:54:b7:dc:98:99:cb:01:1f:eb:ef:cc:85:0e:ec:4c:
a1:c7:34:45:f3:3c:66:71:aa:50:a1:3a:8b:2e:37:59:f0:8e:
17:4d:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:55:27 2024 by rpki-client on console-fra.rpki-client.org