Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/fIp7mjwgY9OC3pqPNRoTe9zmojI.roa
File: fIp7mjwgY9OC3pqPNRoTe9zmojI.roa (raw, json)
Hash identifier: WbYpcy1XS/AOqyx2RS1EYGSjSAnnZZlDrj6En5vgO8Y=
Subject key identifier: 7C:8A:7B:9A:3C:20:63:D3:82:DE:9A:8F:35:1A:13:7B:DC:E6:A2:32
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 018CC801EF2C4B35B53278D42B38F8EA6648
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/fIp7mjwgY9OC3pqPNRoTe9zmojI.roa
Signing time: Tue 02 Jan 2024 02:30:19 +0000
ROA not before: Tue 02 Jan 2024 02:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198138
IP address blocks: 95.130.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ef:2c:4b:35:b5:32:78:d4:2b:38:f8:ea:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Jan 2 02:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c8a7b9a3c2063d382de9a8f351a137bdce6a232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:16:63:4e:06:07:05:67:f9:6e:f8:50:33:
9e:83:35:ae:cd:e1:a4:7c:f7:63:f3:0d:93:51:a7:
cf:ce:f8:ab:12:71:07:28:a2:ba:90:b4:5c:fe:40:
65:66:84:0f:01:c0:79:cf:34:28:2b:4f:45:da:6a:
a8:4f:ff:90:b4:5b:e7:df:e7:ee:a8:e0:d2:13:db:
7f:c3:f2:57:17:bf:eb:f9:e0:42:0c:b4:58:0d:17:
65:ef:6b:39:b6:f9:bc:1f:4d:04:f5:ff:c3:da:4e:
69:b8:f9:bf:9d:7e:66:08:d4:6c:d1:2f:c7:10:12:
77:85:20:f4:aa:d4:b6:87:47:40:01:3c:2a:10:44:
b3:78:02:5c:21:55:0d:51:61:3c:49:c9:a5:e2:08:
d4:10:1c:db:72:1e:0c:85:03:78:af:7f:2d:98:9d:
99:7a:a5:49:6b:55:0d:25:e9:95:24:e2:2f:c2:37:
6b:b2:74:f1:f2:ed:67:0a:d1:1a:f2:66:cf:b2:5c:
76:43:e4:26:c0:00:47:04:38:18:c4:02:7e:8a:d6:
81:48:fe:a6:c8:98:eb:de:e4:ec:2c:b9:98:38:64:
42:6c:79:ac:18:3d:f2:6f:71:f9:1f:d6:09:61:83:
4b:b4:83:09:fa:13:6a:5c:c7:f7:69:2f:be:c2:ba:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:7B:9A:3C:20:63:D3:82:DE:9A:8F:35:1A:13:7B:DC:E6:A2:32
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/fIp7mjwgY9OC3pqPNRoTe9zmojI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:34:31:9b:66:7d:db:a9:6e:ef:18:8d:50:4e:f5:cf:b4:fb:
6d:f6:02:b4:c5:81:2d:5b:20:e4:4e:2e:76:a4:c8:1d:3f:4a:
e3:6b:1a:e3:18:1c:bc:f1:ce:71:6f:08:6d:69:4a:ba:cd:09:
66:f3:c9:3f:b7:1d:e4:e2:ed:0d:14:7d:c6:84:88:35:91:08:
31:81:1b:67:60:6d:8a:0a:03:c9:81:3e:af:7b:1d:f0:b3:48:
95:5f:25:ad:16:0d:ce:37:e9:18:aa:8c:dd:99:ac:3d:68:39:
a7:95:ff:c1:d0:8a:c4:53:54:ed:46:31:63:84:ef:a6:6d:0a:
22:5a:f2:1c:f4:bb:a8:29:9c:bf:b2:e0:d2:81:11:13:e6:32:
f5:6b:6b:8b:d2:75:86:2c:54:55:2d:84:86:c9:be:2d:47:08:
c1:ff:23:0b:0d:90:8f:ce:ef:32:e7:8b:87:3d:ef:f5:b3:41:
3e:56:6c:f4:17:96:6c:4f:8c:f7:f0:e7:c2:1c:2b:a2:ed:75:
41:91:b9:e1:ef:4c:64:8d:08:00:8d:40:db:41:cf:55:a8:97:
8c:c0:4b:e2:42:03:69:d0:a8:87:ec:68:0d:8e:e9:33:5a:a1:
fc:c7:fe:61:fc:cd:c7:95:e4:05:f7:cf:48:bf:f5:8d:7a:fa:
a9:60:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:04 2024 by rpki-client on console-ams.rpki-client.org