Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sCHH2pIehq-WJ5OnABCCh_FlCdk.roa
File: sCHH2pIehq-WJ5OnABCCh_FlCdk.roa (raw, json)
Hash identifier: Qfg1EXxJBoNs83Y5hpQ/0jbeN+6utqU5kJ+tSGmnwzE=
Subject key identifier: B0:21:C7:DA:92:1E:86:AF:96:27:93:A7:00:10:82:87:F1:65:09:D9
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E1D2FC8DBBDD54347B2064F6460A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sCHH2pIehq-WJ5OnABCCh_FlCdk.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204510
IP address blocks: 194.209.28.0/24 maxlen: 24
194.209.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e1:d2:fc:8d:bb:dd:54:34:7b:20:64:f6:46:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b021c7da921e86af962793a700108287f16509d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:ab:8a:5d:df:d0:ff:2a:a8:22:85:cc:78:
5f:78:a1:da:8d:2e:b8:e2:ab:2f:53:5b:2f:17:69:
59:75:48:0e:03:a3:4d:19:49:e0:e8:e6:69:ce:3b:
89:99:13:68:46:7c:7e:62:0f:3e:d3:db:c2:4c:9a:
25:e1:92:47:ca:d0:c7:b0:0b:d6:ed:da:2b:db:eb:
9f:64:e1:c9:55:78:59:90:bb:24:58:d2:e2:d6:cb:
fa:ff:62:5c:38:57:bb:2f:12:e3:73:5a:86:cf:ab:
a5:bb:8c:9a:cb:18:aa:79:6a:dd:d9:7f:a9:5a:6b:
cb:9a:23:df:e2:16:2a:fe:e8:44:f2:b2:f8:84:fa:
f4:aa:7c:e6:e8:67:2c:62:d2:02:d1:b6:76:66:87:
40:52:98:dc:17:26:7e:d7:6f:4c:dd:12:3b:3c:79:
49:88:3a:fa:c9:00:47:80:d7:42:a0:09:76:cb:b5:
28:a1:d7:06:18:ca:f0:e4:32:e5:0a:47:0f:3a:09:
aa:06:8c:37:34:0c:4d:1a:0e:3f:bb:99:07:09:8f:
a9:47:cb:eb:54:b1:b7:ca:88:e4:c1:7b:dd:88:65:
ca:37:8d:04:46:66:00:3a:71:e7:aa:0f:8b:9c:78:
cf:8e:0e:76:a8:c7:e6:e8:c6:11:a9:b2:a0:76:08:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:C7:DA:92:1E:86:AF:96:27:93:A7:00:10:82:87:F1:65:09:D9
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sCHH2pIehq-WJ5OnABCCh_FlCdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.4.0/24
194.209.28.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1b:3d:14:d3:fd:ef:d3:5f:44:88:6b:f9:d5:95:b3:18:e8:
84:1c:83:2b:52:cc:75:1c:76:f6:b4:84:36:b9:4d:e9:a4:12:
57:56:be:a3:2f:56:25:ae:95:d6:d5:ae:be:a0:1a:e7:8f:89:
6e:dc:fb:1c:63:f3:d6:f8:ad:8e:19:10:2f:4a:03:b2:0e:df:
4a:91:fa:ac:0e:02:c9:c1:79:26:df:d0:55:74:c6:05:29:43:
16:3f:8b:c5:76:fb:dd:1e:aa:06:5a:c2:e3:03:1d:d3:5f:14:
b4:69:88:0a:1b:50:cc:b6:5d:b2:75:37:e3:6d:91:f1:94:c7:
dc:a5:df:3f:7c:86:bb:3d:4a:d9:dc:8c:9c:04:cb:87:27:61:
24:eb:0a:6a:16:0d:43:52:49:dd:86:9a:1a:47:36:99:c3:88:
05:f8:8c:1a:e8:0c:8b:40:72:6e:61:08:42:91:7d:e4:04:a4:
56:68:19:26:20:e9:36:28:29:94:ad:bc:83:e0:90:1d:82:a3:
d9:66:4e:5d:b6:4a:37:77:6b:01:c3:16:41:4b:69:dc:bb:20:
3f:14:91:b6:cb:1d:f6:9f:6c:b8:9b:96:56:d9:7f:00:b9:b8:
da:30:44:13:24:14:a9:0b:81:18:26:c6:e9:64:8e:85:5f:71:
6a:6a:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:32:35 2024 by rpki-client on console-ams.rpki-client.org