Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/_E5tmu8uDDG11Vaz-kEKBtkeXxI.roa
File: _E5tmu8uDDG11Vaz-kEKBtkeXxI.roa (raw, json)
Hash identifier: TItjzbcsZxOhyX++ZHEimfREGrSSh5iPiEqYzcY1yYI=
Subject key identifier: FC:4E:6D:9A:EF:2E:0C:31:B5:D5:56:B3:FA:41:0A:06:D9:1E:5F:12
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 018CC9BBFB659A53D3F248FB53B04FAB85B5
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/_E5tmu8uDDG11Vaz-kEKBtkeXxI.roa
Signing time: Tue 02 Jan 2024 10:33:09 +0000
ROA not before: Tue 02 Jan 2024 10:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203735
IP address blocks: 195.7.8.0/24 maxlen: 24
195.7.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fb:65:9a:53:d3:f2:48:fb:53:b0:4f:ab:85:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc4e6d9aef2e0c31b5d556b3fa410a06d91e5f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:96:46:ad:a8:99:15:24:34:26:3b:c3:bb:
33:23:14:7b:34:86:2d:80:75:6c:3f:c4:1a:2b:3d:
d3:76:a3:ae:1a:46:0e:8f:88:08:e3:de:a2:0b:e3:
06:1f:67:e8:f7:4b:6f:75:a4:2e:73:5a:84:72:e5:
ce:a6:a5:d2:28:fb:ad:b3:9a:f1:4d:91:26:0a:d7:
fb:7e:7b:60:2d:d4:25:8e:9a:ce:e6:9a:e3:ba:aa:
b3:b6:85:d0:6d:c7:04:d3:fa:83:ee:33:ba:5f:90:
cf:b1:05:e9:59:12:c7:44:00:36:8d:d0:86:98:77:
ee:c7:84:96:05:4b:54:15:5e:d8:53:8a:ae:f1:cc:
d7:df:f3:e6:3e:f9:fe:8a:17:0d:20:25:3d:0c:90:
6a:c9:40:2c:75:94:ec:cf:dd:d3:cf:1f:c6:18:89:
ab:c6:b5:2d:d2:84:8b:d9:d6:25:2e:7c:5b:bc:7b:
94:e6:16:42:16:f8:cb:9c:70:ba:59:78:02:ef:6d:
28:1e:2c:76:c0:51:fc:51:45:81:52:1f:4a:70:21:
ae:52:e8:da:89:60:a0:ca:84:85:a9:af:0d:a6:8f:
b0:d4:22:2b:ca:5b:b9:35:ad:e9:57:e8:3f:35:75:
a3:83:1f:4c:21:40:d6:41:53:db:4f:98:59:83:e2:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:6D:9A:EF:2E:0C:31:B5:D5:56:B3:FA:41:0A:06:D9:1E:5F:12
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/_E5tmu8uDDG11Vaz-kEKBtkeXxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.8.0/24
195.7.10.0/24
Signature Algorithm: sha256WithRSAEncryption
37:bb:c3:8b:41:55:9b:90:b8:34:fe:7f:08:a6:48:69:26:cf:
f8:4b:bb:70:f4:40:4a:45:fc:25:44:98:ea:ab:9d:17:77:5d:
e3:45:c2:c8:32:de:be:cd:0b:2f:ed:04:74:55:78:53:44:5e:
c7:0c:ca:b4:70:9b:90:6c:b8:85:9f:c9:ba:af:a8:40:16:01:
20:4f:6a:3e:5d:25:f2:cb:97:a2:9e:ed:0c:15:d0:ee:a4:68:
e1:6c:00:b6:3b:94:dd:ac:cd:91:50:c4:60:88:25:82:14:a9:
7b:b6:86:2f:1a:14:a9:99:a5:88:15:22:33:09:f1:41:ab:88:
23:56:50:2a:91:c1:e6:83:30:c1:39:5c:16:a7:98:9a:4b:de:
ad:4e:b2:49:18:63:dd:83:31:f9:66:59:aa:fd:c9:39:1e:d2:
98:c5:24:b1:38:7a:33:fe:bd:f5:16:ab:c3:85:32:e1:a0:a6:
76:e9:da:cd:45:52:e6:44:41:be:cd:ad:4e:88:95:6f:c8:1d:
6f:02:e8:db:f4:a0:f6:b0:a0:ae:a2:bd:ca:6d:85:2b:83:1e:
bb:cc:9e:20:d3:6f:c6:9d:96:54:63:c0:ac:44:64:8b:ca:63:
7e:0e:31:b7:28:23:14:27:44:34:eb:3c:17:23:72:96:46:1f:
82:e7:40:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:44 2024 by rpki-client on console-fra.rpki-client.org