Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/O7YSl_EIIVZV7MBCfIp0ILkYuJs.roa
File: O7YSl_EIIVZV7MBCfIp0ILkYuJs.roa (raw, json)
Hash identifier: RSOgcmsY08E8CkYLMD80W6fC6WjIB1gMFkprZvUEub8=
Subject key identifier: 3B:B6:12:97:F1:08:21:56:55:EC:C0:42:7C:8A:74:20:B9:18:B8:9B
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 018CC94DE6D87C114063183652668EEEDB2B
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/O7YSl_EIIVZV7MBCfIp0ILkYuJs.roa
Signing time: Tue 02 Jan 2024 08:32:54 +0000
ROA not before: Tue 02 Jan 2024 08:32:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 195.216.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e6:d8:7c:11:40:63:18:36:52:66:8e:ee:db:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Jan 2 08:32:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bb61297f108215655ecc0427c8a7420b918b89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:83:63:81:71:5a:33:66:26:17:b6:3e:36:
0d:b2:11:03:ca:37:34:42:74:ec:76:45:dc:f7:f1:
38:f7:ca:e0:25:f9:08:f5:5c:e1:1b:46:b7:42:d1:
08:62:0a:dc:51:ab:57:83:39:cf:57:a0:4f:5f:23:
4d:d9:ac:3c:ad:1c:a8:30:65:ba:d5:dc:f7:18:e9:
d2:15:7e:3e:20:13:a8:a7:fa:0b:47:12:8c:7c:8a:
2e:b5:47:87:41:c4:5d:77:04:2c:0f:f0:e3:26:48:
c8:51:79:17:99:e2:70:4d:79:d6:cc:cb:b9:41:18:
38:c9:18:6b:cd:cd:c0:2f:54:de:a5:90:e3:70:6f:
15:9b:30:44:8a:36:09:99:91:24:8d:a8:69:8a:41:
90:ae:e6:fc:6f:5d:0a:a3:ab:9b:2c:d3:fb:9f:c0:
34:fc:58:a5:8c:22:1f:fa:8e:19:95:5f:e7:dc:d9:
ac:dc:57:d3:4f:d3:01:65:ee:27:60:5a:bc:ea:dc:
84:7f:98:ab:e9:48:71:57:d5:0e:41:ae:18:de:b0:
c4:42:2c:02:d3:ed:13:ff:6a:c1:e3:ed:39:24:7c:
31:63:cc:47:5b:8a:4b:18:31:38:f6:b4:0f:a8:1d:
d2:ce:af:79:77:5c:0d:63:bc:f5:e6:bd:72:10:84:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B6:12:97:F1:08:21:56:55:EC:C0:42:7C:8A:74:20:B9:18:B8:9B
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/O7YSl_EIIVZV7MBCfIp0ILkYuJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:12:68:18:f5:96:10:5d:f2:74:f8:cc:45:f5:a6:af:0d:ea:
b4:8f:82:18:8d:81:8e:5f:5f:a4:cc:1b:b0:57:9e:59:1f:d0:
fc:a6:db:85:f7:ce:7a:eb:e5:68:7a:d3:da:84:78:7c:9d:80:
b9:09:77:f6:41:0f:76:79:50:b9:2b:4c:62:72:aa:0f:0c:81:
ef:19:fa:e1:42:87:75:5b:4e:56:a2:ca:d5:9a:dd:91:80:cc:
17:00:06:6b:ca:1b:7c:8c:69:2a:d2:f1:45:85:75:7d:9d:58:
4b:d6:ea:4f:23:0c:d4:54:f5:fa:63:f7:69:79:46:ad:9e:aa:
1c:50:d9:0a:a9:20:bc:47:63:83:c0:9f:69:b6:c7:d5:79:65:
a3:59:5a:ad:62:e3:5d:d7:8a:f8:cc:08:87:9f:a0:c2:fa:83:
87:d3:c7:f6:1b:b6:ca:41:8f:85:9c:b3:d8:4e:2f:fb:eb:a6:
57:83:05:16:6c:ed:cf:c0:78:4b:a0:13:17:e8:3d:6a:1f:3e:
12:30:1d:ae:30:6f:8b:53:75:e3:6a:26:0a:62:cb:be:b5:9c:
6b:12:ad:7c:a8:b6:e8:8c:1c:88:aa:aa:b5:ad:56:b9:53:0d:
90:af:66:bf:0b:0e:51:e8:ec:4c:a8:c7:ee:1b:e0:5a:1e:61:
43:82:df:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:24:51 2024 by rpki-client on console-fra.rpki-client.org