Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/Ctb8MnGmL0UyWbBNLJSEK_HkLoQ.roa
File: Ctb8MnGmL0UyWbBNLJSEK_HkLoQ.roa (raw, json)
Hash identifier: uUGinOJk5a4gZNP4BalL3DbX63YynvYAo7y3yzY5eF0=
Subject key identifier: 0A:D6:FC:32:71:A6:2F:45:32:59:B0:4D:2C:94:84:2B:F1:E4:2E:84
Certificate issuer: /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial: 018E140E8BA3AC1667F817C5F1B6AFB8B7C1
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/Ctb8MnGmL0UyWbBNLJSEK_HkLoQ.roa
Signing time: Wed 06 Mar 2024 13:58:01 +0000
ROA not before: Wed 06 Mar 2024 13:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200302
IP address blocks: 94.242.0.0/19 maxlen: 19
94.242.32.0/20 maxlen: 20
2a00:1838:aaaa::/48 maxlen: 48
2a00:1838:cccc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:0e:8b:a3:ac:16:67:f8:17:c5:f1:b6:af:b8:b7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
Validity
Not Before: Mar 6 13:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ad6fc3271a62f453259b04d2c94842bf1e42e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:99:28:3c:80:3f:5f:e4:99:87:12:8b:68:
c6:26:56:bb:8a:2d:c3:73:22:38:db:c4:8d:b8:62:
f2:e8:63:db:be:3d:53:07:6d:8e:4f:c0:d6:d8:e7:
3f:4e:a0:64:d8:cc:90:bc:80:14:62:58:ee:89:17:
aa:aa:2c:a5:dc:c7:d0:f1:f1:87:ca:b0:4f:fc:c2:
45:fa:5b:53:95:ad:12:7b:b0:62:7f:75:d1:b8:14:
31:d0:a1:31:e3:69:4a:11:ba:7c:71:da:01:64:03:
e8:39:08:5b:16:33:7e:c0:4d:44:03:d5:0a:8e:55:
a6:5b:69:84:5a:5c:d8:66:e8:1e:66:6b:fc:97:00:
90:d8:59:e4:51:ff:e5:64:64:e0:37:34:eb:8c:b6:
0f:ed:ed:75:b1:4a:f2:ef:e8:b4:c6:39:28:9c:d9:
0e:b1:14:1f:60:5b:9c:71:a4:eb:af:94:8d:aa:21:
06:5d:a7:57:58:5f:d2:51:28:fa:85:1b:b3:49:15:
83:05:7f:ab:fb:73:fb:7e:36:d6:ec:f4:1e:37:08:
d8:68:57:7a:84:0e:37:91:c7:33:5d:a9:c7:9b:87:
3f:b0:ae:d8:4b:88:37:72:4d:e9:3c:31:ec:d6:30:
82:b4:32:a8:27:f6:e1:38:f4:97:88:06:40:f6:b7:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D6:FC:32:71:A6:2F:45:32:59:B0:4D:2C:94:84:2B:F1:E4:2E:84
X509v3 Authority Key Identifier:
keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/Ctb8MnGmL0UyWbBNLJSEK_HkLoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.242.0.0-94.242.47.255
IPv6:
2a00:1838:aaaa::/48
2a00:1838:cccc::/48
Signature Algorithm: sha256WithRSAEncryption
10:82:54:2b:2f:8c:31:51:ec:5e:94:28:9f:75:5a:d2:f1:94:
28:5c:3d:43:21:ad:8e:c6:11:f4:d9:6c:aa:5c:ac:b5:4e:74:
6d:9e:b0:c2:db:28:72:c7:6b:c4:ca:15:95:6e:03:00:d0:45:
5b:cb:44:0c:9a:eb:05:b8:4d:48:6b:03:a5:b1:e1:5f:8f:c5:
74:36:2d:08:d3:7e:f6:6f:7e:73:a1:0d:cc:6d:26:17:2c:78:
0c:2b:bd:3f:d6:06:27:e7:54:d4:46:ee:e9:78:ec:a7:6b:84:
48:ac:4e:53:83:ef:3c:0c:c5:a5:45:f3:23:83:f3:e7:5a:41:
61:3a:ca:ff:81:e2:bb:b9:19:07:43:3c:2f:84:08:16:b7:90:
8b:93:c6:dd:64:b2:e7:84:d5:91:95:b1:3a:7d:40:f6:73:1d:
64:bf:78:aa:c6:6b:08:87:0c:70:e5:78:96:24:e7:a9:bc:4a:
10:fb:bd:a4:a4:58:6a:2d:c4:e1:f8:98:de:98:10:09:8a:32:
76:07:58:fc:96:87:ae:d0:56:9b:c1:6d:7e:66:17:42:b7:93:
5c:d2:64:2b:d3:0d:06:67:10:2d:4a:b0:93:76:10:16:0a:f9:
34:88:7d:b4:9c:b8:a2:76:44:76:b5:d1:99:26:27:73:f0:c1:
c1:b1:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:38:34 2024 by rpki-client on console-ams.rpki-client.org