Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/rlmFc7ewYJYj76dOBtYBUnKpLLY.roa
File: rlmFc7ewYJYj76dOBtYBUnKpLLY.roa (raw, json)
Hash identifier: dofM/4e70ddHS6mpl7g+RuHvt/RQuUUD4bSsHWM/Fdw=
Subject key identifier: AE:59:85:73:B7:B0:60:96:23:EF:A7:4E:06:D6:01:52:72:A9:2C:B6
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 018CC2DAFF8752D1606AA2FC6FF440726A74
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/rlmFc7ewYJYj76dOBtYBUnKpLLY.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47196
IP address blocks: 195.22.149.0/24 maxlen: 24
195.22.152.0/24 maxlen: 24
195.22.148.0/24 maxlen: 24
195.22.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ff:87:52:d1:60:6a:a2:fc:6f:f4:40:72:6a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae598573b7b0609623efa74e06d6015272a92cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:b9:bb:82:a8:1f:89:2e:ad:4e:48:bf:bb:
c0:e1:ee:2e:b9:4e:a7:7b:a7:a2:05:4d:bf:48:3c:
e6:84:93:e1:dc:1b:43:2a:d3:87:4a:ca:33:bc:3d:
d8:83:2c:99:7d:73:69:26:23:aa:51:b2:9d:3b:f5:
8e:d5:92:36:0c:2c:90:81:48:e6:73:04:e6:22:f2:
94:44:1b:cc:3e:24:aa:96:23:3f:9b:57:9a:4e:2e:
d2:e7:24:3b:ee:85:e6:99:4c:e3:55:d0:87:11:8b:
e9:f4:a2:83:e0:a6:c3:99:73:65:9e:d8:af:40:e1:
9b:20:9e:fb:90:75:fb:12:cd:81:95:55:64:f5:c2:
61:6f:ba:10:24:65:6c:c7:73:8f:fe:05:e0:08:fb:
30:a6:b4:30:e8:50:f9:77:5d:4f:9f:ca:2a:4b:9d:
61:3b:23:93:02:b4:1c:a8:c2:d8:fe:97:0f:0b:35:
a9:44:ff:13:08:5c:5c:b6:6e:45:18:43:62:66:4e:
02:2f:01:11:1d:a9:b4:53:1d:51:51:55:23:ff:7a:
69:7d:21:06:7f:33:cc:97:bd:c5:1c:e9:ae:61:99:
b8:78:c0:b4:13:e8:f5:48:34:3f:1f:d3:cb:3e:ee:
08:6f:23:78:96:6d:58:ae:f3:e3:c3:67:c0:06:3b:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:85:73:B7:B0:60:96:23:EF:A7:4E:06:D6:01:52:72:A9:2C:B6
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/rlmFc7ewYJYj76dOBtYBUnKpLLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.148.0/23
195.22.152.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:79:c0:63:c2:05:ca:10:79:b6:a9:96:92:7e:01:fd:8d:a0:
45:54:6e:68:27:b6:87:37:a8:ad:45:ea:6f:19:30:99:c2:50:
2c:52:cb:ba:c2:5d:cd:f5:39:09:15:b8:6d:f5:b4:f0:a1:69:
20:6e:65:16:61:c1:07:e2:a0:93:c7:a5:c8:e1:12:39:5a:e1:
03:11:4a:1f:2a:33:06:cd:81:d5:41:9c:26:2e:ab:bb:b3:2f:
64:5f:04:db:87:da:b9:4e:07:55:9b:51:e9:e3:e6:0b:1d:37:
41:7d:f5:28:35:e6:4e:9f:11:62:91:5a:9e:e5:dc:be:8f:2a:
33:60:11:39:e5:6c:fd:bd:27:55:26:44:0e:0a:68:ab:18:f9:
1a:e1:95:50:10:a3:e7:f9:f2:b9:68:65:b6:d5:ea:c2:75:19:
dd:e9:a3:b5:4c:ac:48:d1:7e:4f:be:4c:11:ee:02:66:4e:68:
3a:14:7c:9c:c0:08:a1:34:81:1a:55:cb:8d:2e:7b:47:58:57:
7f:f1:4e:ab:46:c5:fb:4a:17:d3:07:ea:75:18:0f:04:2f:0a:
ed:3f:9e:9f:b1:c4:19:c0:51:48:b6:c7:3a:09:23:35:ab:4f:
4d:1b:7e:b5:59:b6:4c:f6:ce:fb:c4:c9:a5:a2:67:b3:60:3c:
84:13:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:19:45 2024 by rpki-client on console-fra.rpki-client.org