Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/o0tSctC7I7zgXeeCdW94TG_ZqSA.roa
File: o0tSctC7I7zgXeeCdW94TG_ZqSA.roa (raw, json)
Hash identifier: IOKG1qzshrBojgk3gm74x1L+qD+WpX5vshRnmMRRUYE=
Subject key identifier: A3:4B:52:72:D0:BB:23:BC:E0:5D:E7:82:75:6F:78:4C:6F:D9:A9:20
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018EAEC8BB8840A9564134E7480158744756
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/o0tSctC7I7zgXeeCdW94TG_ZqSA.roa
Signing time: Fri 05 Apr 2024 15:02:54 +0000
ROA not before: Fri 05 Apr 2024 15:02:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206147
IP address blocks: 194.6.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:c8:bb:88:40:a9:56:41:34:e7:48:01:58:74:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Apr 5 15:02:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a34b5272d0bb23bce05de782756f784c6fd9a920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:f6:37:b2:b9:40:52:61:05:82:b9:73:76:
dd:cb:bd:c0:90:a7:fa:50:89:67:6b:48:54:d4:d0:
21:1e:4d:f0:89:2d:1a:5f:a3:57:dd:6d:1f:f1:d0:
04:4a:c0:43:a5:2a:9c:75:af:33:f3:5c:f1:1f:22:
c5:bf:30:a4:f6:df:5d:ff:a6:d8:9f:74:29:c6:2b:
b4:10:4d:ef:fe:f7:d3:f9:06:55:21:99:a1:50:a7:
e7:2c:37:0c:17:4a:f6:f9:9b:e6:49:87:f5:6e:7d:
a7:4c:6b:76:37:b0:17:43:44:58:bc:6d:05:b7:2c:
96:47:e8:c4:18:6b:c3:76:43:97:62:7f:d8:56:75:
43:3b:e8:73:52:8c:b7:2a:b8:2c:83:0b:e4:6a:c4:
93:85:08:02:9d:f6:95:6f:4a:de:00:74:6e:3c:f6:
a2:b2:24:54:c5:4d:de:04:9b:0e:bf:d6:ed:f6:e0:
45:28:28:b8:b9:6d:89:36:1a:6d:24:c2:e4:b2:dc:
54:74:5e:01:38:d9:35:92:0f:38:5e:a9:cd:07:80:
8c:ac:a9:16:58:10:86:a0:90:c6:4a:da:ef:a6:bb:
6e:1b:d1:0b:d9:d4:7f:96:94:c6:b4:bd:80:14:86:
79:e8:0c:8e:11:f7:2d:76:e2:73:b6:84:68:97:f4:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:52:72:D0:BB:23:BC:E0:5D:E7:82:75:6F:78:4C:6F:D9:A9:20
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/o0tSctC7I7zgXeeCdW94TG_ZqSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.163.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bf:49:be:ad:af:55:dd:13:14:d8:47:76:01:fa:37:3c:93:
b4:1a:8e:e7:51:61:c0:97:ac:bb:b6:73:fe:33:67:72:29:48:
70:4e:51:83:7b:ed:6a:62:f0:d5:c0:d0:c7:fa:5e:d0:ce:e7:
d5:bd:3b:95:3f:fe:44:47:d4:27:73:aa:d1:b9:fe:31:c0:1d:
69:98:2e:7f:2d:88:f9:b3:80:2f:35:71:8e:e0:88:e2:1c:5f:
c8:66:35:44:55:b1:f1:b3:5e:76:09:a9:34:92:a1:cd:2a:6f:
c7:6b:bd:47:4a:47:3e:3a:b6:38:ed:22:54:b5:48:52:55:9a:
2d:1e:1c:59:8d:8f:3d:54:cb:47:c9:0b:f2:e0:7f:d9:4d:ab:
ae:d4:82:b4:6f:b9:27:d5:73:73:8c:7a:a5:ab:57:c5:13:cf:
95:c2:93:8f:60:a8:89:93:82:01:4d:c8:3a:4e:20:67:e8:fe:
e5:c0:e2:93:54:2d:ec:38:da:1b:a5:d3:7e:60:cd:75:1f:b7:
ec:51:a6:23:8e:da:be:34:c2:83:c8:77:e0:04:6a:c8:a4:91:
64:69:3f:d7:b1:f0:f1:16:d4:7c:0f:fb:52:6a:b0:15:e1:5c:
82:2d:ce:3c:a8:95:11:69:e0:24:df:a7:4b:32:ae:48:b2:43:
28:c0:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:32:35 2024 by rpki-client on console-ams.rpki-client.org