Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/c_bLXTy2RAkaAyyg_K9JIM3yoUc.roa
File: c_bLXTy2RAkaAyyg_K9JIM3yoUc.roa (raw, json)
Hash identifier: a2kKZRAn6czSF3NAVDZLmDiDCZDZvSg+eeLBKLh5r6o=
Subject key identifier: 73:F6:CB:5D:3C:B6:44:09:1A:03:2C:A0:FC:AF:49:20:CD:F2:A1:47
Certificate issuer: /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial: 018CC64AC5D2882BC85F085BB0E03A992742
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/c_bLXTy2RAkaAyyg_K9JIM3yoUc.roa
Signing time: Mon 01 Jan 2024 18:30:38 +0000
ROA not before: Mon 01 Jan 2024 18:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6802
IP address blocks: 194.141.0.0/24 maxlen: 24
194.141.1.0/24 maxlen: 24
194.141.2.0/24 maxlen: 24
194.141.3.0/24 maxlen: 24
194.141.8.0/24 maxlen: 24
194.141.9.0/24 maxlen: 24
194.141.5.0/24 maxlen: 24
194.141.0.0/16 maxlen: 16
194.141.6.0/24 maxlen: 24
194.141.66.0/24 maxlen: 24
194.141.67.0/24 maxlen: 24
194.141.68.0/24 maxlen: 24
194.141.69.0/24 maxlen: 24
194.141.78.0/24 maxlen: 24
194.141.79.0/24 maxlen: 24
194.141.84.0/24 maxlen: 24
194.141.86.0/24 maxlen: 24
194.141.104.0/21 maxlen: 21
194.141.112.0/24 maxlen: 24
194.141.118.0/24 maxlen: 24
194.141.116.0/22 maxlen: 22
194.141.113.0/24 maxlen: 24
194.141.116.0/23 maxlen: 23
194.141.16.0/22 maxlen: 22
194.141.15.0/24 maxlen: 24
194.141.12.0/24 maxlen: 24
194.141.22.0/24 maxlen: 24
194.141.24.0/21 maxlen: 21
194.141.37.0/24 maxlen: 24
194.141.32.0/22 maxlen: 22
194.141.43.0/24 maxlen: 24
194.141.44.0/23 maxlen: 23
194.141.38.0/23 maxlen: 23
194.141.40.0/24 maxlen: 24
194.141.41.0/24 maxlen: 24
194.141.51.0/24 maxlen: 24
194.141.47.0/24 maxlen: 24
194.141.52.0/22 maxlen: 22
194.141.56.0/23 maxlen: 23
194.141.64.0/23 maxlen: 23
194.141.221.0/24 maxlen: 24
194.141.222.0/24 maxlen: 24
194.141.225.0/24 maxlen: 24
194.141.226.0/24 maxlen: 24
194.141.119.0/24 maxlen: 24
194.141.228.0/22 maxlen: 22
194.141.232.0/21 maxlen: 21
194.141.227.0/24 maxlen: 24
194.141.245.0/24 maxlen: 24
2001:4b58::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c5:d2:88:2b:c8:5f:08:5b:b0:e0:3a:99:27:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Validity
Not Before: Jan 1 18:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f6cb5d3cb644091a032ca0fcaf4920cdf2a147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:1d:8a:26:24:dc:af:98:78:c2:01:54:e9:
ef:76:08:82:14:f2:16:2c:6f:ba:ea:9e:dc:47:fe:
8b:dc:ca:cf:c9:df:72:80:37:97:d3:ac:37:67:e3:
7d:5e:d7:7a:27:7d:57:76:9a:c4:0f:64:67:8f:75:
28:24:3d:85:04:cc:ae:04:f9:1a:f2:16:0c:10:63:
f7:bf:07:6e:77:eb:8a:39:c8:1c:76:ad:3e:d8:6f:
31:a6:7d:7e:78:13:b3:17:70:29:6a:50:cd:02:04:
9d:83:85:bb:83:f0:e7:31:de:04:f9:79:ff:37:eb:
94:07:c5:cf:a1:6a:90:4f:af:e8:b2:df:a9:39:59:
bb:36:91:f7:fe:9f:06:b1:fa:ff:c6:36:c0:0d:80:
05:f7:76:91:94:11:1b:bb:17:30:12:da:5e:1b:44:
4b:fe:18:95:1f:56:6a:a9:a2:37:15:52:e2:5e:43:
f6:40:3a:3d:e9:55:bc:ce:ff:9b:b5:5f:3a:81:16:
58:e5:33:b6:7e:c0:19:2b:5b:e8:4b:cc:56:31:5e:
2e:d7:d9:23:6b:af:e9:05:f3:c9:ef:14:a1:58:d9:
e7:63:38:5d:fb:75:d2:2a:b8:00:84:ce:89:c9:bd:
9e:ab:e8:96:d5:c4:61:59:48:f5:cb:e5:ce:17:1d:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:CB:5D:3C:B6:44:09:1A:03:2C:A0:FC:AF:49:20:CD:F2:A1:47
X509v3 Authority Key Identifier:
keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/c_bLXTy2RAkaAyyg_K9JIM3yoUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.141.0.0/16
IPv6:
2001:4b58::/32
Signature Algorithm: sha256WithRSAEncryption
12:3d:dd:6c:21:0a:70:db:a3:e8:37:58:da:ce:c3:c3:cf:fc:
9e:8f:94:b2:7b:ca:81:4f:99:ad:6d:e8:fd:5e:b6:c5:bc:78:
fd:f5:1f:25:ef:75:4d:3d:5c:e9:a8:1c:61:0e:29:e8:f2:f8:
c3:ed:f6:67:bd:59:41:35:b1:81:14:eb:c1:ff:7a:fc:af:e5:
0e:2d:6f:90:55:e7:b5:ae:d0:fb:63:f8:53:ac:03:5b:a3:16:
24:28:6d:c9:e3:89:0d:05:4b:f3:ac:02:38:75:a5:a0:0d:4a:
68:95:16:e6:ee:87:a2:9d:01:3d:52:21:6c:75:00:ad:2a:82:
dd:22:43:39:e6:a3:ec:51:8a:93:73:b2:3e:7f:63:6c:c7:17:
0c:1b:69:e2:db:f9:89:3f:da:78:45:4c:d0:e7:04:1a:aa:78:
d9:2c:57:50:7e:93:96:58:3e:e4:79:2b:47:32:e5:b6:29:6e:
f5:59:94:f0:83:2a:7e:1f:20:7c:6e:74:6b:11:10:3b:80:81:
1e:fe:e0:a7:36:6c:8b:62:0f:f5:5e:c1:0c:8b:83:2c:34:d2:
27:ab:c3:f9:55:dc:31:a8:b8:d5:32:54:d4:fa:c9:f0:f4:c7:
4a:2c:b6:fa:2d:a8:65:28:4c:c7:c4:e7:63:32:96:4e:e2:97:
7d:fa:4c:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 8 09:26:43 2024 by rpki-client on console-fra.rpki-client.org