Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/7UlI42vnDzSkn0I0rZW8cgapAAo.roa
File: 7UlI42vnDzSkn0I0rZW8cgapAAo.roa (raw, json)
Hash identifier: EARlfphkOocNFrtvlg7wcZKV51qNRTK4zKhbqhPLny0=
Subject key identifier: ED:49:48:E3:6B:E7:0F:34:A4:9F:42:34:AD:95:BC:72:06:A9:00:0A
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 018CC26CF077B059C9FE21AC718656D00352
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/7UlI42vnDzSkn0I0rZW8cgapAAo.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198629
IP address blocks: 194.150.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f0:77:b0:59:c9:fe:21:ac:71:86:56:d0:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed4948e36be70f34a49f4234ad95bc7206a9000a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:71:bd:1b:b1:a8:da:8c:a3:e1:3d:af:70:
59:ed:38:0a:b9:ad:dd:9f:d0:6c:05:ee:0f:9e:2f:
47:9f:40:9b:f3:45:58:5d:da:13:dd:4a:96:20:20:
ed:cb:22:3d:cc:ae:c2:a0:c2:d1:30:eb:76:d3:f5:
b0:c6:e6:21:81:d9:d3:fe:ff:ba:2f:e8:5a:f1:09:
41:34:b4:cd:d3:e7:9f:90:5f:fa:ad:44:3d:7a:73:
d8:03:be:e2:cb:34:73:6a:20:d2:29:1f:1f:83:28:
53:79:0b:f6:79:72:31:72:31:27:6e:f6:ad:09:2d:
2a:96:f8:9f:3b:67:2c:69:51:03:f7:b2:a7:e3:14:
a3:3b:df:74:9d:3f:7f:55:e7:82:e4:56:1b:1f:04:
76:e8:d8:7c:d2:66:03:cb:1d:d9:11:77:88:07:a2:
8e:a6:a0:67:86:7b:ae:bf:52:70:b0:05:8a:cb:57:
7c:d2:7b:b9:75:ac:ee:64:c4:15:7a:25:de:ef:82:
b0:7f:b6:52:20:b2:ed:f5:d1:7a:af:0c:12:2d:34:
db:e6:ba:47:27:24:4d:8f:b2:a7:a4:c0:06:73:b6:
1e:bf:3d:7c:16:54:ae:bb:a3:c8:0b:8c:18:76:4b:
9a:54:5e:45:2a:b7:9c:73:5a:4c:84:b5:55:d9:f4:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:48:E3:6B:E7:0F:34:A4:9F:42:34:AD:95:BC:72:06:A9:00:0A
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/7UlI42vnDzSkn0I0rZW8cgapAAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.178.0/24
Signature Algorithm: sha256WithRSAEncryption
65:34:30:d9:a2:20:3b:73:e9:59:8c:b1:5e:0c:a8:9e:f6:06:
37:b6:54:52:fc:96:11:45:40:66:c9:b6:9c:de:73:14:fd:55:
15:61:66:1e:23:d6:67:14:49:9f:d7:15:71:fb:63:cd:5e:40:
31:c8:c7:be:bd:40:4c:b7:c6:1b:c4:12:37:09:bd:64:43:18:
f2:a1:42:5d:94:05:f6:b5:7a:0a:02:7f:15:32:81:fd:5f:cf:
1f:bc:8b:0c:1f:15:a5:88:52:fa:ee:67:fc:e4:42:52:cc:0d:
a2:a8:69:d3:08:cd:81:d4:3f:c3:9c:d7:c2:c2:14:52:bf:50:
2b:88:76:e1:86:e3:c1:ae:f8:8e:7a:05:f0:2c:27:28:97:f0:
24:eb:29:50:f9:36:b8:d1:4d:66:f2:be:d3:30:d1:6c:92:15:
b8:98:41:f8:42:54:c1:cd:41:79:28:81:e5:d0:fd:a9:74:b6:
10:84:03:9c:ea:d8:41:33:1f:d6:73:38:05:6f:08:bb:92:f6:
02:77:3f:f8:d5:35:bc:a6:a5:59:ee:3c:d4:11:62:c1:54:a9:
07:92:55:b7:aa:15:5a:ff:ea:e9:1c:71:9d:7c:bf:25:9d:89:
91:47:fa:02:d7:f8:fc:97:3a:f8:d1:75:a8:96:eb:d8:6f:d7:
e4:9f:2f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:39:27 2024 by rpki-client on console-ams.rpki-client.org