Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/f0sMAF1dn3EW2_d9g2NwQjj5EkE.roa
File: f0sMAF1dn3EW2_d9g2NwQjj5EkE.roa (raw, json)
Hash identifier: OQ2wOXsoJcNgnLg+XKAhnlWHZLtcryfsMa+E7twO12c=
Subject key identifier: 7F:4B:0C:00:5D:5D:9F:71:16:DB:F7:7D:83:63:70:42:38:F9:12:41
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018CC64B68F24D3B4D836A97D0DD994EFABB
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/f0sMAF1dn3EW2_d9g2NwQjj5EkE.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216050
IP address blocks: 195.222.124.0/24 maxlen: 24
195.222.125.0/24 maxlen: 24
195.222.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Oct 2024 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:68:f2:4d:3b:4d:83:6a:97:d0:dd:99:4e:fa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f4b0c005d5d9f7116dbf77d8363704238f91241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:77:2a:36:f7:a3:03:2d:37:57:74:75:d3:
41:5b:d9:a6:74:13:a2:9b:3a:46:9f:29:09:fd:64:
ad:89:8c:ea:44:61:2b:af:30:22:12:2e:31:e3:31:
5f:3a:70:b9:0e:a1:37:c4:61:98:9f:e0:ff:c3:50:
a4:b3:6c:8b:d4:d6:47:c0:91:b8:23:63:bf:8b:4b:
66:da:a3:db:b2:b9:a7:29:85:f6:4f:59:a0:11:26:
38:45:bc:7e:03:09:74:00:f9:6c:1f:3a:d7:c1:73:
ca:34:cf:15:ac:6a:55:d2:b4:86:ac:97:3f:b4:ec:
9f:27:08:b1:c6:c2:2f:02:7d:fb:50:24:fc:59:b4:
84:45:76:64:71:18:54:00:44:c6:d4:42:d3:0b:a9:
36:e1:84:e4:a9:74:c6:fa:94:69:64:1b:40:69:f3:
bb:fd:b5:91:c6:7a:66:99:85:94:17:da:eb:29:bd:
5b:8c:4f:98:87:cf:93:fe:e2:12:f9:62:93:69:c9:
5c:8f:16:c4:c7:8a:32:b3:4c:39:8a:04:9a:19:1f:
d8:2d:02:bd:68:74:86:54:42:c4:68:9a:5c:b1:01:
9b:86:69:e5:ae:ff:c4:c0:11:04:cd:d7:32:ee:7f:
bc:0e:72:cf:e2:25:0c:2b:5a:5c:d0:aa:12:72:26:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4B:0C:00:5D:5D:9F:71:16:DB:F7:7D:83:63:70:42:38:F9:12:41
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/f0sMAF1dn3EW2_d9g2NwQjj5EkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.222.124.0-195.222.126.255
Signature Algorithm: sha256WithRSAEncryption
33:f7:0c:3e:4e:ac:2b:8d:0c:28:fe:07:dd:46:91:49:c6:a8:
6e:50:ed:16:5d:9c:9a:77:c3:47:29:13:57:a7:cb:69:e7:f9:
23:8c:c4:67:62:ac:83:27:7c:4e:ce:25:50:bc:d2:b6:62:3f:
bb:52:e6:55:68:1d:ae:bd:8e:2d:65:47:72:89:bc:50:ee:83:
4b:a3:cb:b3:02:1a:44:d3:23:bc:4b:67:5f:d5:cf:62:1a:6c:
bb:34:2e:75:ce:9e:a6:ae:ee:6a:58:22:0d:01:25:e0:86:96:
75:2c:f8:91:47:93:e5:69:b7:8d:45:50:1b:86:e3:39:0d:35:
14:81:ba:a2:83:65:2b:87:a5:4d:21:bd:2e:86:73:67:ec:c4:
66:a9:3a:87:ec:b9:9d:d6:a7:57:57:31:82:29:b0:ba:8b:09:
eb:8f:99:63:aa:03:0f:d8:07:cb:45:25:15:84:ba:41:6b:f0:
02:85:73:35:61:73:c5:e8:74:ed:f8:64:6f:ea:55:e4:6a:7f:
3c:00:c4:1a:2c:e8:b2:59:2f:90:c4:8d:8b:37:33:53:94:46:
66:35:f3:9d:12:44:b3:d1:99:58:97:09:e3:25:3e:8f:3c:c4:
b6:34:c4:1b:45:5b:b4:23:29:aa:37:94:64:eb:5e:c9:b5:16:
c7:89:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 09:55:06 2024 by rpki-client on console-ams.rpki-client.org