Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/k5xySaepVT3GEpo0o3iaOYQX_pE.roa
File: k5xySaepVT3GEpo0o3iaOYQX_pE.roa (raw, json)
Hash identifier: gmLnTIPP8y780HxrFgXCaN2P9+AUpwk3VPhBCbx23xs=
Subject key identifier: 93:9C:72:49:A7:A9:55:3D:C6:12:9A:34:A3:78:9A:39:84:17:FE:91
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 018CC3B699AB52A2B2FE08FE33A8778DC718
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/k5xySaepVT3GEpo0o3iaOYQX_pE.roa
Signing time: Mon 01 Jan 2024 06:29:33 +0000
ROA not before: Mon 01 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209085
IP address blocks: 195.80.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:99:ab:52:a2:b2:fe:08:fe:33:a8:77:8d:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=939c7249a7a9553dc6129a34a3789a398417fe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:0a:d3:d3:4e:10:d8:a8:de:71:07:1d:5c:
79:c6:0f:2f:a5:eb:ac:32:10:3a:1e:4b:43:99:ed:
a5:15:95:a6:51:3e:f8:78:de:5a:14:bf:04:ae:4c:
09:2c:b7:fa:6c:b9:55:82:8c:83:a1:91:5b:bd:46:
a0:f8:17:2a:7b:a4:90:82:06:9d:c2:2e:4c:a2:e1:
e7:5b:d4:70:fe:c7:c4:3c:8e:cb:da:fb:13:e7:af:
20:14:23:73:e6:e6:2d:b9:61:35:40:aa:af:ea:53:
12:45:3b:62:fe:d4:1b:e1:ba:bd:c9:63:f9:0c:76:
67:9d:7a:d8:a4:73:a7:87:a1:8b:ec:ba:6a:18:1a:
4f:6a:50:16:21:49:d5:2b:f0:c6:f0:8e:b0:25:9b:
3e:13:90:5e:72:0b:e9:67:2e:cc:a9:9e:e6:76:56:
5c:61:81:48:d0:cf:15:1e:31:05:99:70:b9:06:7f:
a4:65:db:79:f4:18:a6:81:c9:e0:49:5f:1f:ca:4d:
2d:10:73:e7:42:62:4d:97:8a:bf:44:60:ec:09:d6:
a0:2b:46:9e:8e:c6:3f:48:ac:07:c9:03:a7:0c:86:
84:b0:55:92:4e:f6:35:01:84:88:a6:88:41:78:86:
7c:42:22:5a:b4:2e:73:69:59:fc:c9:db:27:34:7c:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9C:72:49:A7:A9:55:3D:C6:12:9A:34:A3:78:9A:39:84:17:FE:91
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/k5xySaepVT3GEpo0o3iaOYQX_pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.44.0/22
Signature Algorithm: sha256WithRSAEncryption
58:ea:28:ae:a5:de:eb:e2:4a:20:d6:34:10:5c:a1:13:ec:b8:
4f:23:c1:f3:c8:9b:56:17:8b:6e:31:e9:ab:9a:29:76:3b:7c:
c4:97:bb:e8:23:b2:69:1c:d8:b4:7c:fd:50:b5:59:64:8d:e0:
24:0a:61:c5:a5:d6:f2:12:b5:61:4f:3e:5b:0e:66:c3:d0:49:
08:90:55:81:21:a5:50:92:55:27:7b:b5:a9:19:b3:87:d3:c3:
06:85:ca:27:24:3e:c4:44:7f:09:f3:b0:40:0e:9e:2b:3c:e3:
fa:27:4f:4f:ea:f5:f6:a9:37:20:a6:3e:67:4b:3e:35:9c:9c:
50:4f:bd:89:92:0a:f6:f9:89:2b:05:21:ae:94:c8:06:ca:1d:
18:5a:d9:ec:3b:38:f1:16:be:e2:e2:4a:63:73:77:8d:f4:22:
be:99:5a:df:17:76:b8:86:cd:f0:89:a4:05:79:02:b8:d6:51:
ea:5a:33:57:92:a5:a5:bd:5c:24:f4:b3:49:fe:ff:b9:27:20:
32:1c:af:2e:fd:b5:af:3f:e3:cc:ad:c1:5d:97:f2:d8:87:aa:
18:11:ce:13:6e:03:2c:60:eb:78:63:c1:9f:78:ce:b2:3a:6a:
3d:ba:9e:34:aa:fa:54:6c:39:ad:f1:3d:4b:d7:9b:05:9b:71:
1c:a2:4b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 04:52:52 2024 by rpki-client on console-fra.rpki-client.org