Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0oTvf333sv_LJiMuhSSS45fLU2I.roa
File: 0oTvf333sv_LJiMuhSSS45fLU2I.roa (raw, json)
Hash identifier: h6G+O1nfxnawslafBSBmfXp7aVJV6w1EZs11yVyFgQI=
Subject key identifier: D2:84:EF:7F:7D:F7:B2:FF:CB:26:23:2E:85:24:92:E3:97:CB:53:62
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018CC79358714AA09D72BD355468E369EDDF
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0oTvf333sv_LJiMuhSSS45fLU2I.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136796
IP address blocks: 194.163.80.0/22 maxlen: 24
195.180.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 07:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:58:71:4a:a0:9d:72:bd:35:54:68:e3:69:ed:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d284ef7f7df7b2ffcb26232e852492e397cb5362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:49:19:93:08:0b:bf:b5:08:a0:dc:00:dc:
dc:2c:10:28:66:49:79:50:39:b4:78:00:5b:62:74:
b7:de:b3:02:15:b5:be:2c:8e:7a:da:03:6d:0c:d3:
96:d0:da:df:31:64:97:59:8b:7c:46:d9:d8:31:57:
d1:9e:02:48:6b:c8:aa:79:07:78:9b:1d:0c:b8:91:
67:8f:e8:f8:5d:a0:66:33:66:da:20:a4:c6:3b:55:
0a:ce:35:e1:32:d7:5d:4f:ec:d9:20:ef:89:71:c0:
37:29:8d:d7:47:0d:f1:48:2e:c4:7b:af:6f:94:0b:
d1:57:52:3d:c3:ed:61:ee:8a:6a:a6:ae:18:d7:78:
9e:8e:e0:7b:97:59:02:a1:0c:d4:04:69:4d:d5:01:
81:b3:ad:cd:0a:12:36:1e:87:78:cf:9d:46:8b:58:
e4:bd:5a:9c:7f:01:21:50:4e:b3:3c:ed:e2:5c:69:
c3:6b:ad:3a:18:37:90:5e:1d:17:b1:30:56:1e:e2:
e9:fc:0e:70:e9:bd:ee:1c:54:84:4b:9a:c1:fd:be:
8b:cf:ff:56:34:f6:c7:0a:b4:b4:b7:e7:15:4e:73:
11:59:b4:4f:09:21:c2:72:b4:cb:b1:19:13:8a:b8:
a2:04:2b:cf:b7:33:53:a1:98:c5:e5:a7:d0:5b:4b:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:EF:7F:7D:F7:B2:FF:CB:26:23:2E:85:24:92:E3:97:CB:53:62
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/0oTvf333sv_LJiMuhSSS45fLU2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.80.0/22
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
00:92:42:f2:86:47:34:61:7f:2c:99:19:9e:d1:79:0b:93:cb:
74:52:a4:aa:ac:f3:45:d4:1d:ab:b1:40:d6:1a:31:3d:7e:22:
86:84:a2:46:b0:ed:16:ab:f1:85:0f:e0:56:c5:1b:29:cd:39:
3a:0d:ea:a0:40:ea:c8:85:fb:10:83:8d:dd:e8:6f:1b:2d:00:
26:1a:8d:28:e4:46:c0:80:aa:5f:ae:ee:ff:73:6d:b1:52:3e:
de:2c:53:91:cb:48:80:96:a5:57:3a:52:ab:ca:0d:07:91:5a:
84:f9:af:3f:4e:4e:35:f8:7c:d3:a2:39:80:8a:68:a6:1b:91:
2c:29:a9:b7:af:67:a7:ad:20:2e:ba:04:04:d8:3e:96:44:29:
13:65:c4:07:5c:26:4c:73:1b:de:70:64:28:7a:4a:6c:76:77:
2d:a0:86:f5:67:02:ce:ad:8d:05:96:1d:82:c1:62:6d:d9:df:
d3:f3:82:66:15:1f:35:b0:af:5c:8e:94:34:2b:8b:43:99:80:
a6:53:92:a2:de:5d:7a:f1:4e:90:56:0b:7f:ed:80:45:8f:c5:
33:42:36:c6:2e:f5:5e:8b:dd:31:28:53:71:f8:a4:45:7e:8d:
a7:6a:58:0f:84:4b:4e:3d:65:ec:c7:af:3e:10:ed:6d:ee:a3:
90:99:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:19:15 2024 by rpki-client on console-fra.rpki-client.org