Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/viPHRbNvzmTwI6jAnMRIejoeF8c.roa
File: viPHRbNvzmTwI6jAnMRIejoeF8c.roa (raw, json)
Hash identifier: CBwj7HPC8rvk4TMLxXsBMHibGF/OhiK0zkFpvpaQMJk=
Subject key identifier: BE:23:C7:45:B3:6F:CE:64:F0:23:A8:C0:9C:C4:48:7A:3A:1E:17:C7
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348F6EEF3341F363711DA76B079CA56
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/viPHRbNvzmTwI6jAnMRIejoeF8c.roa
Signing time: Mon 01 Jan 2024 04:29:48 +0000
ROA not before: Mon 01 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8700
IP address blocks: 195.251.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f6:ee:f3:34:1f:36:37:11:da:76:b0:79:ca:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be23c745b36fce64f023a8c09cc4487a3a1e17c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:f8:ce:47:90:92:ed:ac:b8:77:a4:ed:86:
1d:e6:73:91:fa:20:9c:35:e8:17:af:af:c7:59:14:
71:b8:39:a2:fc:40:e7:4f:40:8e:53:54:c1:24:7a:
bc:44:91:22:4e:1d:92:ca:1c:76:a9:da:b1:c9:0b:
42:aa:5e:64:b9:9f:06:b4:03:c3:a9:94:0a:09:f6:
66:3b:96:51:06:83:fb:36:8b:65:0a:83:c6:c8:a0:
b9:92:37:49:33:bf:fb:13:63:3f:7b:73:36:78:b1:
f4:8e:d3:f6:14:d4:10:0f:05:17:9a:7e:81:ac:bc:
4d:4d:2d:80:b1:fc:c0:2c:28:28:a4:64:5a:5b:43:
2f:8d:e1:29:6c:9a:d0:e6:67:b4:a0:20:38:f1:fd:
43:17:eb:06:4e:d7:d3:f8:d6:41:c9:36:67:cb:5f:
e9:4e:94:97:bb:ce:d8:e2:2e:aa:3f:2b:c7:6c:7a:
9d:2d:a9:8f:04:83:03:9f:f6:8f:98:8a:49:d2:86:
67:36:9f:3f:12:fe:f2:dd:1d:3a:70:d4:9e:33:0f:
0b:99:14:5a:db:ea:9c:4b:c8:b8:3b:e2:60:ba:2f:
7f:d5:1c:a4:4e:a9:43:79:0c:17:ca:4b:b2:c2:ea:
50:46:60:75:90:41:56:6c:ad:b7:42:9f:05:c0:1a:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:C7:45:B3:6F:CE:64:F0:23:A8:C0:9C:C4:48:7A:3A:1E:17:C7
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/viPHRbNvzmTwI6jAnMRIejoeF8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:18:41:e9:d9:35:1b:17:08:0d:cd:8a:bc:cd:0d:0c:90:c8:
d9:9f:a6:a7:62:df:f6:ec:a5:71:4d:c1:86:d3:02:de:e7:8e:
c4:10:8f:d7:cc:15:cb:67:01:bf:19:f9:62:0e:f6:4b:11:de:
59:4f:89:b8:ad:d3:04:12:1a:8e:de:03:31:08:77:14:d0:7f:
72:9f:5a:38:12:33:2e:b4:8f:8e:3c:fa:e0:f5:c6:32:9b:70:
c1:8d:ea:0e:90:b0:d6:5c:b8:c4:5f:43:62:61:02:77:14:a9:
df:b9:f4:a4:34:cb:d3:cb:82:24:92:10:54:92:e2:63:a5:07:
bf:0b:ab:89:0f:94:66:24:13:8b:1d:c0:d9:66:ac:02:0f:67:
01:ef:3b:87:1e:1d:ee:bc:ce:2d:1a:d6:ff:a5:d5:7f:63:31:
c2:e0:82:ee:4a:0c:3f:3d:07:a5:54:e0:28:84:fd:f1:f6:41:
9d:58:f4:d3:ba:5e:64:01:66:7a:3d:f7:8c:99:a9:87:0d:81:
91:97:88:80:b3:2e:98:13:2b:6c:7b:4c:f7:c5:ab:58:43:73:
43:f4:0e:52:0c:22:41:8e:71:73:d5:53:57:21:6d:02:a8:72:
ab:2c:b4:f6:45:09:2d:25:86:aa:ba:64:b1:b1:f1:9f:ba:4d:
da:4a:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 12:33:31 2024 by rpki-client on console-ams.rpki-client.org