Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/lay4JTJjYQTlZVZoiyBTYAR-6Z0.roa
File: lay4JTJjYQTlZVZoiyBTYAR-6Z0.roa (raw, json)
Hash identifier: yGjEKQ33hmPTu0Qz7msG3Zstw0ETx+WeilNkF/Na9pY=
Subject key identifier: 95:AC:B8:25:32:63:61:04:E5:65:56:68:8B:20:53:60:04:7E:E9:9D
Certificate issuer: /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial: 018CC492F84BDCC5A76A0C857FB47BA26B70
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/lay4JTJjYQTlZVZoiyBTYAR-6Z0.roa
Signing time: Mon 01 Jan 2024 10:30:15 +0000
ROA not before: Mon 01 Jan 2024 10:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50508
IP address blocks: 193.105.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:f8:4b:dc:c5:a7:6a:0c:85:7f:b4:7b:a2:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Validity
Not Before: Jan 1 10:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95acb82532636104e56556688b205360047ee99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:47:47:43:d6:ec:b5:68:28:1d:e6:89:28:
c7:aa:d6:0d:43:f3:bc:fd:b8:5c:14:13:ea:f3:e5:
c3:e1:f1:1d:7d:17:41:3b:c3:d0:0c:0b:08:e7:21:
64:37:04:85:88:2e:5f:08:17:c4:b5:a7:73:90:c1:
d8:19:f0:b9:63:51:a3:14:dc:e2:62:1f:18:82:31:
79:b6:61:be:00:14:6f:e4:eb:5d:31:4e:8c:de:12:
58:1e:31:85:26:01:04:00:76:40:1f:86:92:65:5f:
c1:2d:e7:62:d5:63:75:dd:62:67:e6:09:9e:cc:bc:
13:91:0a:f0:b0:0d:5a:1f:62:08:8f:cf:2d:f6:69:
96:d3:36:ca:7c:03:05:72:89:5b:f6:68:d7:30:53:
05:1f:b8:5b:50:ff:ef:91:d2:82:59:79:6d:d3:d2:
06:92:2f:f4:f5:4c:cf:b4:f9:fa:11:82:e9:0b:66:
fb:62:7e:07:88:77:f2:47:3b:ad:71:ae:8c:90:7d:
dc:4d:45:cf:78:9e:4f:c7:1b:c7:61:44:12:28:d8:
e8:19:37:2a:c7:03:b6:76:7e:3d:40:fb:21:30:68:
25:66:17:81:3e:d5:d2:b1:15:48:dc:48:2c:7d:86:
82:62:9d:73:73:06:30:c2:2d:c1:65:4f:7a:d2:d6:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:B8:25:32:63:61:04:E5:65:56:68:8B:20:53:60:04:7E:E9:9D
X509v3 Authority Key Identifier:
keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/lay4JTJjYQTlZVZoiyBTYAR-6Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.87.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f7:09:27:73:ef:56:8c:35:a1:d3:40:82:8f:7e:00:5d:ad:
d7:ff:8e:87:92:8a:15:7e:ed:bc:c1:0a:f7:e1:df:ed:c3:9f:
6f:35:b9:1c:c0:59:2c:d3:ba:88:af:41:fb:cc:7e:02:1e:03:
d0:22:d4:2a:b9:7a:a4:f2:f1:ac:20:dd:f2:69:f1:04:d8:60:
2d:f9:ec:31:4e:2f:49:42:b4:0d:65:b0:5d:90:d0:b0:3a:56:
73:10:71:e1:0e:24:42:22:8a:65:83:c4:97:26:a8:c2:4f:03:
f9:0a:47:e8:09:db:36:94:b5:4a:d0:79:a2:99:89:e4:da:64:
28:07:12:e4:8f:af:10:d7:f1:34:8a:3d:5c:67:9b:26:3f:c8:
d4:fd:2c:6f:68:c1:33:97:6b:6e:15:89:c4:20:0b:de:96:a4:
28:98:55:ac:f4:57:69:a8:f0:d7:c7:5e:97:b6:c3:52:08:98:
da:45:3f:a3:6b:e0:5a:ed:d2:bd:76:37:83:fd:49:fb:9c:e3:
2a:a9:7f:a9:7d:7b:80:2b:12:69:0c:9d:74:5f:c3:11:cf:b2:
9e:03:46:d0:7f:d5:16:29:4c:cf:5f:9f:2f:e6:6a:53:82:cf:
4a:31:ae:96:84:45:5a:1d:11:dd:4b:d6:52:eb:03:a7:a7:a0:
43:9f:fe:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 03:00:48 2024 by rpki-client on console-ams.rpki-client.org