Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rIy2y2UGuPkFE_6wdluKTOwUx5o.roa
File: rIy2y2UGuPkFE_6wdluKTOwUx5o.roa (raw, json)
Hash identifier: cYdBTXzH07xkhH8hm0iQ46IcsCBDILKLBXaAAiaebg8=
Subject key identifier: AC:8C:B6:CB:65:06:B8:F9:05:13:FE:B0:76:5B:8A:4C:EC:14:C7:9A
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC5011E9B6F99595AD9A73EBFBD01932C
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rIy2y2UGuPkFE_6wdluKTOwUx5o.roa
Signing time: Mon 01 Jan 2024 12:30:34 +0000
ROA not before: Mon 01 Jan 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209493
IP address blocks: 193.109.136.0/24 maxlen: 24
45.141.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1e:9b:6f:99:59:5a:d9:a7:3e:bf:bd:01:93:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac8cb6cb6506b8f90513feb0765b8a4cec14c79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:74:fc:d6:55:18:da:1e:f7:99:21:1e:c1:
0e:8f:9a:49:c6:4b:b5:5b:17:2e:e8:d9:ea:75:28:
64:f1:d0:ce:06:98:b3:ac:e1:64:37:cb:c5:29:b9:
0a:0c:37:5e:ee:0f:7d:d5:6f:9b:45:7f:9a:c6:67:
db:18:eb:14:6d:f9:d7:45:95:45:47:8f:b9:f3:2d:
65:ca:ce:73:66:9a:c7:e9:c5:4a:18:d3:c8:a0:fc:
81:1b:63:f4:7d:1f:ea:20:70:cd:56:51:e2:90:cc:
f0:c4:d8:81:68:e2:77:33:3b:16:d9:fd:ed:34:ea:
29:ae:0d:b9:f0:89:05:f1:b5:0b:e0:1b:45:54:6a:
06:18:7f:e4:1a:f2:de:62:2d:0a:92:90:30:c3:0d:
aa:c6:48:04:a2:9f:82:d4:05:11:95:88:51:f1:36:
e0:91:d2:28:18:1b:63:72:ca:f3:85:e0:92:66:0d:
f7:51:d2:3f:23:e7:5e:85:de:54:2b:25:3d:db:7a:
6f:d5:43:11:d1:f7:68:88:2a:bc:e3:32:bb:4f:1a:
aa:fb:5c:75:04:03:7d:4f:ce:8c:25:b5:7f:bb:60:
36:c8:85:c9:f2:35:2a:3a:eb:04:08:bc:bb:dc:08:
c9:22:c9:4e:f6:d5:c1:15:72:d9:96:ba:b5:df:7f:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8C:B6:CB:65:06:B8:F9:05:13:FE:B0:76:5B:8A:4C:EC:14:C7:9A
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/rIy2y2UGuPkFE_6wdluKTOwUx5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.61.0/24
193.109.136.0/24
Signature Algorithm: sha256WithRSAEncryption
67:11:4f:e9:cc:e0:e4:ee:ee:f1:1c:f1:ac:4f:49:bb:3c:ac:
0f:c2:82:13:68:6c:53:40:27:1c:01:93:e8:46:65:93:0b:6e:
8a:1c:12:f7:6b:4b:25:bd:7b:84:22:1a:fc:33:50:27:4f:9b:
1a:62:27:ed:30:54:67:70:94:4f:88:cb:8d:0e:32:a1:f9:0b:
8c:6a:22:ca:e9:3f:c8:b7:e2:ac:62:43:09:0f:40:82:a3:16:
6a:d9:69:a6:96:43:e4:ac:f9:d0:bb:9a:06:40:88:a3:67:69:
d6:a2:ef:8f:71:e2:ed:f5:01:75:09:23:83:17:dd:a1:54:96:
c4:1c:c9:4c:d1:ac:d4:e4:d4:35:59:91:fe:b2:86:81:7e:51:
01:6d:75:a3:d0:10:a1:19:85:dd:30:5e:b7:86:64:93:22:dc:
70:c6:54:a1:9f:7a:cb:48:02:e2:41:f1:b6:34:59:76:33:ab:
e9:ee:71:83:f5:9a:e4:e4:49:b1:e9:a5:10:78:e9:9d:eb:96:
5f:ce:a0:26:a0:bb:b2:8e:d3:1a:1c:58:96:f7:59:01:f5:66:
44:8c:5a:e7:1d:87:fd:03:23:63:95:7e:37:d9:8b:21:77:57:
d8:8a:f3:ca:44:45:4b:af:17:4c:20:25:3e:e9:a0:93:f3:fe:
d2:55:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:12:40 2024 by rpki-client on console-fra.rpki-client.org