Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a52zYx3AlkW7pybjUJ7WnOtDjHY.roa
File: a52zYx3AlkW7pybjUJ7WnOtDjHY.roa (raw, json)
Hash identifier: pE06bAOUnnYwz5aDEAW7RsVFE9MC3i7Bv8jI8mcI0j8=
Subject key identifier: 6B:9D:B3:63:1D:C0:96:45:BB:A7:26:E3:50:9E:D6:9C:EB:43:8C:76
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018EEAF40B44399A65D7FF7E2E8B3BEEB7A7
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a52zYx3AlkW7pybjUJ7WnOtDjHY.roa
Signing time: Wed 17 Apr 2024 07:27:25 +0000
ROA not before: Wed 17 Apr 2024 07:27:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215415
IP address blocks: 195.114.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ea:f4:0b:44:39:9a:65:d7:ff:7e:2e:8b:3b:ee:b7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Apr 17 07:27:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b9db3631dc09645bba726e3509ed69ceb438c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:cd:d3:a6:b7:5c:67:68:08:8d:34:6e:5d:
95:eb:4a:76:b4:38:63:d9:f3:8a:4b:0f:67:8b:57:
cc:ce:81:ec:1e:6f:85:3c:6e:64:85:b6:70:9c:41:
6c:7a:3e:be:57:3e:ee:aa:62:77:e3:00:b8:b6:cb:
86:99:11:db:f0:f7:da:64:cb:ad:24:19:4f:b0:45:
1f:d6:9d:7d:f3:a5:47:ff:5f:23:57:59:6f:60:d5:
5a:2f:e6:47:6b:ea:4b:00:aa:65:b5:c0:c6:af:7c:
62:bc:7f:78:22:99:43:fe:c3:17:76:74:1a:a5:f8:
ae:54:98:1d:d1:90:d0:4f:6f:f8:fe:5f:d2:c8:69:
e5:f7:1e:5c:83:6b:11:72:3c:e2:ab:5a:ab:f8:0c:
5a:2a:de:ef:91:f0:3b:01:85:ef:61:5e:4c:f8:ef:
e0:e0:1f:ce:c1:17:6d:dc:07:35:bd:ed:b5:9e:a6:
c1:5e:a8:cd:56:dc:84:97:7f:38:8a:fb:77:16:dd:
a6:d8:6f:4d:bb:65:5a:9b:6f:5f:ff:22:92:5a:99:
9f:72:e3:d3:a7:a2:b6:7b:a9:62:5f:25:90:47:71:
1c:61:e4:e9:70:22:c5:97:17:4a:33:ab:df:0d:f6:
76:05:90:b1:7c:ec:e9:18:6a:c5:d8:e4:81:fc:e1:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:B3:63:1D:C0:96:45:BB:A7:26:E3:50:9E:D6:9C:EB:43:8C:76
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/a52zYx3AlkW7pybjUJ7WnOtDjHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.201.0/24
Signature Algorithm: sha256WithRSAEncryption
16:58:28:c6:84:fe:6c:63:5b:4f:ff:2a:bf:ea:17:d8:ea:b1:
f8:82:28:59:9c:d3:fe:5a:90:41:04:5f:ae:ce:15:2e:6d:38:
33:c4:17:83:2e:d7:15:ea:b7:c2:ca:1c:d9:78:20:a8:fa:ee:
c2:c3:a4:a3:c1:f6:ed:46:03:aa:0d:d8:12:8e:b9:03:ed:b9:
75:92:37:ec:d9:f6:48:bc:fc:80:f8:6a:f6:c0:83:a9:f4:bf:
50:a0:53:1c:7b:06:bc:52:5f:d4:15:f6:d9:d3:bb:7b:60:e8:
87:a2:4e:5a:70:2b:04:36:3e:45:52:bc:0b:1d:ab:64:20:22:
b1:e0:1a:0e:99:91:30:cd:56:dd:f8:cf:18:09:cf:21:13:6d:
37:a0:6e:09:4a:bb:92:9b:1c:c3:7a:9e:97:81:73:4e:cf:7a:
c6:e0:c1:15:2d:f9:8c:20:13:05:1a:36:5f:23:0b:5a:76:5d:
c4:c3:d2:0f:dd:f7:42:5a:37:27:e6:e3:b6:9b:db:f4:31:83:
41:cc:91:12:11:bf:8d:f2:fd:cd:34:36:cb:55:05:53:34:1e:
0f:5c:3f:65:95:df:79:5a:30:81:70:0d:01:43:9c:9b:f3:d8:
17:e1:d9:8c:d2:04:23:18:2c:3b:e2:ec:24:1e:0c:51:ff:72:
03:3a:6b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:40:19 2024 by rpki-client on console-ams.rpki-client.org