Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/ETlS3F7ABo0CK5eMyy6sfyKoqdw.roa
File: ETlS3F7ABo0CK5eMyy6sfyKoqdw.roa (raw, json)
Hash identifier: /MCft5ZTZEyql3GvGxDqqgWvpxdE/rEwJHnBDYX62iA=
Subject key identifier: 11:39:52:DC:5E:C0:06:8D:02:2B:97:8C:CB:2E:AC:7F:22:A8:A9:DC
Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial: 018CC34896BBA0F7934D1E113BDA69AA58C4
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/ETlS3F7ABo0CK5eMyy6sfyKoqdw.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15882
IP address blocks: 195.190.159.0/24 maxlen: 24
194.102.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:96:bb:a0:f7:93:4d:1e:11:3b:da:69:aa:58:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=113952dc5ec0068d022b978ccb2eac7f22a8a9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:38:66:64:f7:cd:b0:85:ba:73:b2:11:83:
f3:d0:8d:05:26:e9:25:ac:e7:51:42:f4:11:33:4f:
7b:89:0c:6f:b8:d4:24:a4:df:d7:7c:70:1f:a4:b3:
93:bd:88:74:a6:41:df:ba:3f:df:c5:e1:ec:fb:41:
5f:60:5d:13:03:d7:0b:9a:54:38:75:cf:95:b0:71:
4f:5b:20:95:5b:0f:6f:85:b5:c5:b0:11:b7:ae:b0:
b2:62:6c:4e:4b:92:1e:f1:35:9c:98:e8:34:6b:a7:
9e:97:6a:1e:3e:54:a5:2b:3d:a7:2f:08:7d:20:50:
ea:de:07:49:77:71:3d:7f:5e:44:d5:5c:89:5a:64:
da:46:e3:1a:48:50:48:2f:77:63:51:87:40:a8:94:
ee:42:68:55:80:15:23:40:7e:4a:38:07:f5:75:b3:
6a:58:26:7c:12:e4:12:9a:b3:ff:28:12:2f:5d:40:
df:2e:98:b1:9b:e1:82:19:a1:7c:67:ae:9b:0c:41:
30:71:a4:7e:c6:ed:18:70:b7:5e:6b:e6:fd:e8:a4:
8b:c0:18:59:ca:39:2f:0f:5c:f7:f8:85:2b:26:3a:
e5:c9:fb:69:19:a4:a7:34:65:29:05:a0:e5:d7:bd:
42:91:fd:dd:9b:4f:4a:93:d8:05:9c:90:ca:00:72:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:52:DC:5E:C0:06:8D:02:2B:97:8C:CB:2E:AC:7F:22:A8:A9:DC
X509v3 Authority Key Identifier:
keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/ETlS3F7ABo0CK5eMyy6sfyKoqdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.200.0/24
195.190.159.0/24
Signature Algorithm: sha256WithRSAEncryption
09:78:bc:a9:11:21:26:0e:28:84:9b:28:7f:d0:8f:0a:83:90:
dc:dc:29:16:65:3b:2f:7a:19:ef:30:fa:d2:29:8e:cf:53:84:
25:ea:61:50:1e:4b:42:5d:b1:b4:a8:57:8f:6d:e4:be:1d:9b:
5b:f0:3b:88:f9:06:09:c1:9a:d5:3b:79:0b:c7:20:49:85:33:
aa:33:8b:67:7c:47:a6:67:14:d8:53:45:c2:dc:aa:fd:a7:8e:
24:b7:d0:00:4f:85:2c:28:a1:48:22:23:fe:07:11:65:0b:b1:
03:86:83:91:b8:5c:b9:b7:aa:1b:cc:e6:0a:e7:10:7f:44:e3:
fb:83:5b:98:93:4a:3b:3b:1d:a8:7e:fc:ee:80:93:42:7c:1c:
ae:2f:44:b8:80:b9:50:e3:72:f2:5a:f6:73:5e:2c:7a:ac:26:
78:5d:e9:06:ff:c2:77:e9:88:20:a0:35:01:50:11:19:4c:46:
10:c6:61:b6:75:06:dc:a7:56:af:67:01:29:82:4c:1f:23:1a:
b7:b6:2c:c0:91:ce:9a:63:02:0a:6c:55:6b:f9:c6:19:3f:8d:
66:36:a9:cc:c0:a6:49:de:81:72:43:fb:e6:d3:fa:10:80:a7:
6f:04:b5:d5:c1:df:95:45:d4:ef:fa:9a:a0:80:54:c5:b7:9d:
a9:bc:f7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:13:42 2024 by rpki-client on console-fra.rpki-client.org