Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/z6wIR0UsXq5UZOGHB8ms9Qe6IBc.roa
File: z6wIR0UsXq5UZOGHB8ms9Qe6IBc.roa (raw, json)
Hash identifier: XsTQZVZplduOW9GFSbcOil4UWOKJV9TAKo2XcwR8txY=
Subject key identifier: CF:AC:08:47:45:2C:5E:AE:54:64:E1:87:07:C9:AC:F5:07:BA:20:17
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 0190B02C09ECD5A936F676D10C6F41DD39C8
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/z6wIR0UsXq5UZOGHB8ms9Qe6IBc.roa
Signing time: Sun 14 Jul 2024 07:36:34 +0000
ROA not before: Sun 14 Jul 2024 07:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196969
IP address blocks: 195.54.184.0/22 maxlen: 22
195.54.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b0:2c:09:ec:d5:a9:36:f6:76:d1:0c:6f:41:dd:39:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Jul 14 07:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfac0847452c5eae5464e18707c9acf507ba2017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:b8:1d:44:5c:0b:82:8c:64:ff:46:96:1f:
a3:64:3f:6a:61:0c:e6:b3:86:83:a5:17:00:a5:62:
65:c2:76:7c:20:bc:28:2d:8d:7b:82:1a:e5:f7:d4:
f5:f4:6a:2c:b9:b4:d6:28:c4:98:1d:06:52:54:9a:
8e:f9:c5:85:89:f3:90:e9:c6:c1:64:14:b8:92:9b:
a6:25:b9:5a:94:24:77:7f:b4:cb:4d:8d:e0:7a:d8:
08:51:ba:92:d5:2a:28:a2:24:03:a2:2d:0c:89:06:
75:86:9e:d9:8a:d5:78:48:15:37:b2:5b:26:8b:0c:
bd:60:5e:69:7f:c1:6c:26:ab:59:80:88:0e:d3:8c:
21:fd:01:36:61:55:e9:73:a4:c4:8f:af:34:72:ec:
07:05:8d:c3:cd:e1:8f:37:8e:f6:18:ca:bd:8b:4b:
67:e4:a2:fd:6b:21:56:74:d6:e1:67:83:11:64:2e:
a7:38:13:c4:4c:4b:03:31:a3:c3:b5:3b:bd:2c:b6:
c8:cb:8e:c6:b4:a2:97:eb:7e:7a:82:4a:2f:76:3c:
15:49:50:8a:fd:f2:3f:27:0b:e1:69:6c:31:5a:a3:
c9:ae:ad:d8:22:46:bc:61:8a:3d:cb:52:82:66:b0:
18:a9:05:c1:5c:4b:74:87:ab:0c:2d:bf:8b:6b:06:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AC:08:47:45:2C:5E:AE:54:64:E1:87:07:C9:AC:F5:07:BA:20:17
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/z6wIR0UsXq5UZOGHB8ms9Qe6IBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.184.0-195.54.189.255
Signature Algorithm: sha256WithRSAEncryption
1d:37:46:a8:16:b7:af:0f:4e:8b:31:45:15:ce:5c:c2:cd:40:
24:3e:7a:c5:7d:23:6a:5f:75:42:cc:ae:bd:75:2c:b9:d4:d4:
db:10:a7:3f:2f:06:e9:f4:c9:49:df:10:a2:e1:21:86:fb:72:
65:f8:34:ee:40:3e:fd:11:ed:c8:76:64:c9:60:27:00:5c:dc:
3a:1d:ee:f1:76:ae:e8:26:2a:05:89:6e:bb:e0:44:93:e2:e3:
4f:52:69:3e:6a:87:63:23:64:4c:a7:1d:76:ae:79:20:63:a1:
7d:7d:e2:a4:d3:1e:ca:b0:8d:7e:4f:3a:b5:df:d6:72:47:72:
71:a9:5e:ba:5d:b0:ea:d1:6b:14:4a:4d:dd:89:3c:cd:ec:25:
39:60:b3:7a:a8:28:4f:07:3e:fc:6a:52:fd:04:86:a3:bb:a0:
a2:c3:8e:b0:71:49:fd:c6:4c:8f:2d:67:fd:e2:a2:80:92:5f:
fb:8f:29:fd:c5:24:31:96:0f:bf:7d:e4:b6:5f:74:fb:b3:9d:
e7:34:5b:99:78:46:54:ef:33:e0:f1:5d:c1:38:25:39:25:d8:
17:c9:4c:13:1e:b4:78:b5:9a:46:5a:7c:fd:d3:c0:d0:83:b3:
c0:1b:d6:2b:db:3b:4a:3b:8b:cc:20:c2:b9:8b:22:71:22:81:
5a:9b:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:58:37 2024 by rpki-client on console-fra.rpki-client.org