Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/l6hrK_DDc93gig5rS-6eCwAdtKs.roa
File: l6hrK_DDc93gig5rS-6eCwAdtKs.roa (raw, json)
Hash identifier: zU2dccGoAgAfwb5fQg6JTVHxHrP4EOL/fnO4kZ5cGDE=
Subject key identifier: 97:A8:6B:2B:F0:C3:73:DD:E0:8A:0E:6B:4B:EE:9E:0B:00:1D:B4:AB
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018CC72730D049CF8FEF59724E9DC5D80318
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/l6hrK_DDc93gig5rS-6eCwAdtKs.roa
Signing time: Mon 01 Jan 2024 22:31:23 +0000
ROA not before: Mon 01 Jan 2024 22:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 194.107.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:30:d0:49:cf:8f:ef:59:72:4e:9d:c5:d8:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97a86b2bf0c373dde08a0e6b4bee9e0b001db4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:7d:a1:c1:4d:9a:3d:fb:42:90:cd:0f:42:
00:02:87:95:8b:56:5b:1c:f6:52:13:9f:c7:69:16:
d8:a0:4b:b1:a0:b0:da:bf:5c:8d:be:c4:e5:fa:b9:
df:8e:f3:00:6e:d2:85:c0:a3:27:e7:b7:de:15:a4:
64:78:dc:fd:a2:af:cb:3f:33:7c:ea:c3:61:d1:5e:
86:97:33:ff:85:e0:55:b2:95:f0:e6:b9:33:c9:8d:
14:82:87:59:47:8a:2f:37:43:2e:65:9f:a9:62:70:
af:42:40:ba:bf:0a:12:03:c7:ee:96:24:dc:c2:a8:
37:51:4d:f9:9d:34:f8:8e:4a:2f:ec:2e:3a:b4:d2:
4e:05:dd:df:8c:e4:40:57:7d:06:01:63:bc:3e:d8:
ee:93:63:2c:eb:ff:24:88:50:59:61:73:c3:56:3b:
98:c0:fb:c6:f0:cb:8c:85:4a:ab:0a:3a:ec:24:8c:
5c:10:e2:7b:c0:f7:6e:6e:8b:ec:c9:3e:80:78:e2:
62:b2:cc:15:1e:b6:48:09:a1:84:fd:58:41:26:79:
ca:63:b8:ae:4b:fd:42:52:a8:cc:ad:cf:d7:54:18:
ca:2d:b1:12:04:e9:08:64:ec:d5:bf:03:0d:1c:9f:
ac:a9:df:8b:c5:7b:71:61:96:d1:af:65:a0:0b:28:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:6B:2B:F0:C3:73:DD:E0:8A:0E:6B:4B:EE:9E:0B:00:1D:B4:AB
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/l6hrK_DDc93gig5rS-6eCwAdtKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ae:48:e5:43:19:40:45:e3:76:ff:34:6f:d7:c1:a9:d2:e0:
68:1e:84:0a:4a:71:13:b8:df:e6:7f:88:b2:85:57:e3:03:a5:
c4:e2:63:0a:4a:a1:7f:57:cf:e0:e2:f7:42:ac:8d:e8:bb:f4:
21:1a:2e:53:0b:51:b8:94:bb:fd:9d:59:86:1f:88:fb:03:95:
3d:8d:b3:a1:ee:2f:19:22:55:4f:17:d3:40:fa:f1:4a:09:e5:
01:10:55:1e:19:c5:80:40:f1:29:70:b8:2c:e2:f4:24:4e:10:
7a:10:40:6b:3e:7a:13:7f:ef:ac:95:30:53:19:36:b3:02:2b:
08:ef:b4:11:63:ab:9d:b1:70:29:4a:9b:df:c4:15:e4:0f:1a:
0c:b5:b8:c0:89:b2:da:2b:96:35:a6:89:ed:ad:00:59:29:4d:
ed:47:1f:14:3e:29:cb:df:15:08:15:05:d8:0b:8d:57:da:d4:
2e:10:48:23:18:4e:5e:1c:3b:d6:e5:a2:99:ac:70:49:ca:c8:
ad:59:d9:d6:fb:2f:78:c0:f7:20:3c:3e:94:31:d8:b3:41:db:
b5:fc:62:de:7f:c8:b2:38:87:27:f7:d5:86:f0:c2:1f:91:4e:
36:57:39:9a:c3:b0:20:c5:5c:77:e5:58:b3:83:54:33:61:d6:
03:64:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:56:55 2024 by rpki-client on console-fra.rpki-client.org