Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/ExOhs3Q1STMU49pYKZgPqymCNK8.roa
File: ExOhs3Q1STMU49pYKZgPqymCNK8.roa (raw, json)
Hash identifier: ZtxLkG+3P5o8qzYkH5Li9sLyLqmpXn3wi3g/2UXJ/Fs=
Subject key identifier: 13:13:A1:B3:74:35:49:33:14:E3:DA:58:29:98:0F:AB:29:82:34:AF
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 018CC26D47954947E04147F969CD6B24F9A2
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/ExOhs3Q1STMU49pYKZgPqymCNK8.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47411
IP address blocks: 195.43.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:95:49:47:e0:41:47:f9:69:cd:6b:24:f9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1313a1b37435493314e3da5829980fab298234af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7e:d1:81:4a:c4:7b:33:85:85:c5:d4:4e:30:
29:ce:41:ba:49:e4:76:e7:ea:39:22:ee:31:ab:e9:
00:c0:62:91:06:d9:c4:5c:ec:da:0c:99:2e:f6:6f:
7b:b2:7d:97:5d:0a:3b:72:03:0b:fc:7c:55:79:5f:
46:fb:a0:e1:19:7c:03:30:5d:39:b6:37:1f:c7:60:
d6:6e:6d:aa:70:a5:65:8c:0d:c1:1e:0f:e5:87:87:
b7:c9:aa:63:24:cf:d9:78:69:bd:28:24:1f:d1:f9:
e7:06:97:03:fc:2f:75:9c:b5:6c:67:5f:13:76:07:
cf:7b:5c:4d:06:de:0c:3e:50:cc:03:95:02:9f:7f:
bb:a1:a4:18:3e:9e:64:1a:4b:99:5d:99:b5:40:ef:
39:66:bd:19:1f:17:73:a3:80:31:d8:1c:e8:de:de:
ed:27:85:bd:86:57:cf:6f:6b:4c:e2:58:67:76:ca:
d8:f4:82:21:5b:c1:d7:14:a3:a7:7d:3e:d3:5a:fb:
eb:9b:75:81:7f:94:73:88:6b:94:04:3e:89:05:ae:
83:50:7a:b4:07:6d:05:38:43:bf:7c:2d:a3:ec:f6:
1b:92:d6:03:04:ee:12:c4:43:85:ce:f1:45:a5:e5:
c7:81:9e:43:af:c4:30:83:af:ad:11:32:47:49:2d:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:13:A1:B3:74:35:49:33:14:E3:DA:58:29:98:0F:AB:29:82:34:AF
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/ExOhs3Q1STMU49pYKZgPqymCNK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.152.0/24
Signature Algorithm: sha256WithRSAEncryption
38:59:37:c6:56:c1:62:5d:2a:d0:b8:34:f4:67:e3:df:ec:44:
4d:07:bc:17:8d:43:b2:f2:7e:f2:cd:1d:1d:ca:35:cf:c1:30:
43:ec:a9:02:b0:84:e8:04:44:b5:32:b7:39:67:f0:2f:27:81:
71:0d:58:ad:1f:bd:3f:5a:43:9d:24:3c:20:6b:9b:f7:18:a1:
a4:81:9e:46:b4:77:e8:36:86:f3:05:9d:9b:8d:eb:b4:5a:3c:
79:49:f8:89:54:8c:e8:df:43:3b:78:82:a8:5f:3e:e6:72:49:
4e:b3:be:d8:79:a7:8b:fd:f6:32:ec:aa:77:da:7e:1e:5a:f0:
3b:6e:33:af:5d:1a:b0:97:7a:fc:d9:68:42:8b:82:ef:01:85:
29:9f:67:81:7e:f7:ab:11:b3:8e:68:ed:84:94:57:86:1c:25:
5a:42:af:52:67:62:9d:e5:51:60:1a:b6:19:39:cc:ee:81:59:
fd:cf:e3:e3:bb:db:9a:0a:e3:6e:34:c0:97:f0:06:83:36:49:
dd:51:44:d3:2f:2e:04:fa:d4:fb:43:48:9d:03:6f:a0:f0:dc:
ed:43:c3:97:8e:86:31:9a:a4:88:3c:57:9b:5b:31:b0:04:19:
0e:2b:87:db:76:a2:6f:cb:4f:38:b1:b2:3a:10:d8:fe:62:84:
af:42:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:06:27 2024 by rpki-client on console-fra.rpki-client.org