Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/EstPW8ur7eW2pe0PjMvcRjkhJGk.roa
File: EstPW8ur7eW2pe0PjMvcRjkhJGk.roa (raw, json)
Hash identifier: mfRL4GzDBUUT1Xoe3yZqlzClXcNM3AOR1idcLo/oPNE=
Subject key identifier: 12:CB:4F:5B:CB:AB:ED:E5:B6:A5:ED:0F:8C:CB:DC:46:39:21:24:69
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 018E6B6464DE2894E833842761FE181720DB
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/EstPW8ur7eW2pe0PjMvcRjkhJGk.roa
Signing time: Sat 23 Mar 2024 12:58:45 +0000
ROA not before: Sat 23 Mar 2024 12:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48161
IP address blocks: 195.20.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6b:64:64:de:28:94:e8:33:84:27:61:fe:18:17:20:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Mar 23 12:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12cb4f5bcbabede5b6a5ed0f8ccbdc4639212469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:a8:c6:41:06:ea:d6:dc:cf:80:86:11:56:
30:8c:cf:c5:17:d9:25:b2:f6:5c:01:7d:94:39:6e:
db:9a:e8:7f:b7:4f:8a:72:35:d2:bb:95:27:1e:6e:
9d:6b:39:91:a9:3e:82:44:ae:8d:dc:9d:3e:69:4c:
54:f6:fd:01:99:3b:b0:0e:05:c1:c0:66:6e:af:ff:
50:3a:98:40:26:c2:ee:08:cd:e2:b9:f4:66:7a:f6:
aa:ad:c4:a3:a5:a2:cc:be:f7:09:0e:9d:de:08:10:
bf:4a:cc:7f:c8:c9:0b:4e:e4:0a:6f:32:c9:10:ca:
a5:d2:92:37:4f:03:b3:63:1d:53:f7:67:b0:af:97:
2b:c0:c2:c7:13:c4:ae:54:50:53:d4:63:47:99:cf:
c5:88:ff:bc:e1:e0:67:37:bd:46:ff:aa:59:b3:bf:
9c:58:46:ea:9b:55:28:31:6a:9a:a9:db:b3:b8:1b:
ef:b5:e0:f0:f4:c7:7c:ea:82:9b:69:68:e6:dc:41:
d9:6e:16:51:84:95:11:6e:73:d7:70:19:b5:14:b7:
5f:97:01:a1:79:fd:90:2c:2e:55:41:f0:64:8f:18:
f1:8c:7d:b6:2b:3a:25:4c:09:84:6c:a5:bc:14:ec:
4d:ed:fb:7c:f8:15:45:d2:38:8c:7f:21:f8:a4:92:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:4F:5B:CB:AB:ED:E5:B6:A5:ED:0F:8C:CB:DC:46:39:21:24:69
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/EstPW8ur7eW2pe0PjMvcRjkhJGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.202.0/23
Signature Algorithm: sha256WithRSAEncryption
19:06:bc:a8:a6:ba:f9:69:cb:7d:33:29:f0:b5:30:40:b8:7b:
86:41:d2:bc:0c:8e:b1:c7:52:de:44:0c:65:9a:af:fc:91:15:
9e:66:18:38:ce:95:37:47:51:cc:ef:f3:c0:c8:74:91:0f:bd:
ff:3e:d7:80:2e:f1:02:40:57:42:27:62:bf:b9:ab:2c:60:f6:
ba:35:98:09:ca:0a:31:e1:b8:91:22:16:5c:37:a4:97:8b:9f:
cd:6f:1b:d6:d9:a6:8f:10:da:60:a6:59:cf:43:b7:05:4b:a4:
5d:fc:88:be:c9:c5:0d:fb:eb:d4:06:6d:09:0b:fb:3c:58:b3:
a8:26:93:b9:e7:86:26:74:89:20:31:2f:d9:06:21:51:5e:df:
6a:24:67:c3:5a:59:d0:25:0b:2b:26:54:f8:60:9a:5d:75:ee:
ce:f2:25:d6:b4:78:b3:9b:3d:7c:c5:45:cf:35:15:9a:6a:ba:
5e:58:61:5a:f9:0f:8e:c9:8c:0e:68:59:c3:19:a7:06:08:6e:
98:f6:fd:57:ea:5d:4c:fb:c9:0e:b3:f3:5f:42:b8:97:2b:d3:
d9:7b:e5:ab:04:03:15:5b:18:4e:48:0f:74:bf:ef:d3:40:cb:
8c:53:65:44:07:dd:f7:10:cd:e6:e3:74:a1:00:a0:f1:94:e4:
b2:ea:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:45:30 2024 by rpki-client on console-fra.rpki-client.org