Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/lAdso4rNf4WdxAQ_t6Hp5M5i3K0.roa
File: lAdso4rNf4WdxAQ_t6Hp5M5i3K0.roa (raw, json)
Hash identifier: OplSODQMsz0OcPrRFvOgZglW88pYJI7rPr92wruPwwY=
Subject key identifier: 94:07:6C:A3:8A:CD:7F:85:9D:C4:04:3F:B7:A1:E9:E4:CE:62:DC:AD
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 018CC5004AA0450C1DAEAAFC931AB8C3C6AD
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/lAdso4rNf4WdxAQ_t6Hp5M5i3K0.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208043
IP address blocks: 46.236.110.0/24 maxlen: 24
83.209.153.0/24 maxlen: 24
80.244.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4a:a0:45:0c:1d:ae:aa:fc:93:1a:b8:c3:c6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94076ca38acd7f859dc4043fb7a1e9e4ce62dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:14:02:e6:45:c3:4b:d6:31:52:59:05:db:
25:3c:b3:6f:14:a2:8b:7e:df:e9:f5:db:5d:b2:96:
54:89:d8:8b:03:5d:dd:7e:90:3f:ac:0c:9c:e8:89:
ed:81:11:6e:83:b4:42:15:50:06:67:df:f3:ee:4d:
18:39:02:63:02:1c:9b:c2:30:3d:00:b1:1b:0f:4a:
be:2d:ba:fe:39:55:1b:c5:32:4c:75:1e:03:d5:ec:
87:f2:95:7c:31:98:a2:2d:ae:93:fd:83:f3:9c:f3:
52:de:77:e4:25:16:a7:f6:19:3f:da:cf:32:4d:90:
ba:8f:09:3f:b8:c9:42:2e:b1:13:19:10:fa:fb:6b:
60:85:7d:af:b2:87:d5:27:a3:1a:88:3c:44:09:0c:
93:e5:6f:e8:74:e8:36:4f:e8:f0:7b:16:8d:ca:20:
19:3c:73:a7:46:e8:b7:fc:96:33:32:e1:d6:b7:a5:
72:8a:e4:6e:5a:98:ef:c4:59:d1:cc:4f:f5:c6:01:
45:7d:e5:30:df:f2:3a:6e:f9:02:50:30:d7:a4:a2:
8b:30:52:e5:f9:df:c7:04:23:97:09:af:d4:c4:b5:
fd:e5:f5:df:30:a6:64:82:5d:e4:41:de:6e:d7:94:
36:9f:84:70:b8:9c:cc:5d:28:8b:d5:91:d3:f7:4b:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:6C:A3:8A:CD:7F:85:9D:C4:04:3F:B7:A1:E9:E4:CE:62:DC:AD
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/lAdso4rNf4WdxAQ_t6Hp5M5i3K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.110.0/24
80.244.64.0/24
83.209.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:19:ec:5b:7e:bf:c0:37:55:04:e1:4e:39:57:c9:0d:22:79:
2e:e6:f7:e1:d2:b6:36:3d:d1:61:79:b6:86:b8:3c:32:59:20:
e9:99:2b:64:33:89:ff:b7:2a:16:db:cc:1b:b4:22:af:03:c6:
12:8f:fe:1f:aa:6d:e9:97:f7:41:e8:c1:27:a4:9e:3c:bd:c9:
b6:56:72:31:29:f1:2b:ab:f1:98:f0:ad:a6:69:65:29:5e:fe:
94:b0:e4:74:40:ed:4b:1d:ae:b3:97:e8:b5:b1:c5:82:e9:44:
4c:ce:9c:72:87:5e:87:83:35:12:81:2b:65:29:ca:e7:fe:bf:
54:06:a8:c6:22:ae:9e:22:1a:d2:05:00:f5:d5:fe:9f:6b:fe:
bc:a3:58:4a:1d:56:ed:4e:cb:55:fc:fb:ce:ee:77:5e:31:64:
5c:bf:b2:9b:71:26:a8:12:4d:08:f2:64:f8:83:35:49:54:02:
8e:60:72:b0:c4:cc:53:aa:e1:fd:d3:0f:7c:9e:e3:e7:aa:22:
4d:2c:76:b4:dc:ad:4a:21:e4:1e:c0:c9:9e:4c:58:db:4c:72:
80:be:19:e3:cb:44:9b:fd:fe:33:db:76:d5:5c:49:43:fd:8a:
d4:26:fa:0d:0f:e2:e8:1c:ac:77:69:7c:44:66:5b:38:ac:5d:
45:98:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:22:29 2024 by rpki-client on console-ams.rpki-client.org