Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Bufs0TMBVDlKnwUjTuWmStx5osI.roa
File: Bufs0TMBVDlKnwUjTuWmStx5osI.roa (raw, json)
Hash identifier: y58R7OQBNJnI66OW7OjZgCcgkxF3ePF9/3VA8AMEwDA=
Subject key identifier: 06:E7:EC:D1:33:01:54:39:4A:9F:05:23:4E:E5:A6:4A:DC:79:A2:C2
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E5FC7AECD448AF9BFE93597E561ECFFFD
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Bufs0TMBVDlKnwUjTuWmStx5osI.roa
Signing time: Thu 21 Mar 2024 06:51:45 +0000
ROA not before: Thu 21 Mar 2024 06:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8557
IP address blocks: 195.18.32.0/19 maxlen: 19
195.18.32.0/21 maxlen: 21
195.18.40.0/21 maxlen: 21
195.18.48.0/21 maxlen: 21
195.18.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:c7:ae:cd:44:8a:f9:bf:e9:35:97:e5:61:ec:ff:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 21 06:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06e7ecd1330154394a9f05234ee5a64adc79a2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:c4:fc:1e:98:6c:f1:4a:6c:19:5f:d6:82:
07:bb:b0:76:66:7f:7b:2a:7b:20:9d:e9:fa:54:c8:
1c:9d:b1:0b:f0:2d:b4:a7:e9:f1:eb:e5:de:2f:ea:
86:52:27:33:3c:ee:96:7c:f9:82:dd:2a:5c:f6:e3:
c4:6b:68:27:54:43:81:1a:b5:cf:d8:cb:0e:f8:f4:
d6:a0:b2:6a:1f:65:35:5a:be:12:54:bd:3a:31:ad:
3a:77:20:e4:53:0e:5b:d8:6c:ff:9a:ab:e5:78:e2:
b0:d5:a7:63:cd:5a:63:35:c3:1c:52:8f:91:a6:10:
b1:bd:8e:c5:9c:98:c8:4d:46:3b:6c:7f:be:94:54:
13:4e:a6:9d:c4:b1:5c:ed:cc:07:a4:3d:1e:d3:28:
33:92:df:35:e8:87:1f:3a:5e:b1:01:ef:f3:f6:c5:
b3:1f:e0:83:6c:38:35:09:28:56:58:2b:37:39:b5:
86:79:d8:76:07:00:fa:fd:f5:86:63:d1:91:43:6e:
25:ed:c7:94:f3:91:08:f2:9d:59:04:3f:a9:cc:8b:
be:0b:60:e0:31:86:1c:fb:fc:6e:53:a3:e4:bd:d3:
5b:ab:14:a8:fa:80:88:37:8b:c8:54:66:22:47:9a:
4b:da:bd:b7:10:f3:74:34:4c:64:68:e1:bf:78:24:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E7:EC:D1:33:01:54:39:4A:9F:05:23:4E:E5:A6:4A:DC:79:A2:C2
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Bufs0TMBVDlKnwUjTuWmStx5osI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.32.0/19
Signature Algorithm: sha256WithRSAEncryption
44:a8:6e:b0:b9:8d:74:ba:75:15:86:6c:26:34:93:39:d0:b9:
f4:2e:df:76:83:53:a7:8e:39:40:5c:8b:71:fb:df:f3:64:12:
03:83:87:b0:a1:7f:8d:15:e7:16:b8:21:b9:a0:92:5e:4d:42:
28:eb:f6:d6:44:2d:37:26:d4:d6:1f:4e:b7:b3:7d:57:74:67:
1b:6f:80:46:44:f5:94:af:1d:1d:56:94:b0:59:14:51:fb:c1:
46:92:67:51:54:a2:46:32:89:66:87:ed:0b:40:c0:8d:c0:31:
f4:1d:3a:e9:87:31:5e:96:33:be:76:22:75:44:5c:71:63:f4:
e7:4b:20:6b:bc:6c:0f:09:26:3e:42:e4:42:66:81:21:6c:3c:
72:22:07:5c:ff:db:13:e5:6c:c3:9a:6b:1e:09:f4:6f:45:9d:
f2:55:75:4d:30:b4:50:4e:8c:83:90:47:93:b0:33:ef:61:7f:
fb:3b:bc:cc:59:8b:c9:89:4d:bb:02:2d:91:b0:58:b0:d2:10:
0a:61:00:be:47:61:59:57:df:b0:93:74:46:22:50:e8:a5:66:
c7:3a:b5:86:fd:63:9c:6d:f6:18:3d:03:e6:2e:e8:c0:90:c6:
49:0f:69:a5:b2:55:81:2e:7e:d6:10:98:fc:07:57:4c:28:31:
c3:bb:6e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:53:17 2024 by rpki-client on console-fra.rpki-client.org