Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/0cuLgBJqnDCl0ZEhSym7CE-hkJY.roa
File: 0cuLgBJqnDCl0ZEhSym7CE-hkJY.roa (raw, json)
Hash identifier: RMYcuc/6ewboSx1hBSVkA13byL/vP8aZ+gA7Zgp4rNk=
Subject key identifier: D1:CB:8B:80:12:6A:9C:30:A5:D1:91:21:4B:29:BB:08:4F:A1:90:96
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 018CC7944E52DF928A5FADA6CDC6E0D646B5
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/0cuLgBJqnDCl0ZEhSym7CE-hkJY.roa
Signing time: Tue 02 Jan 2024 00:30:34 +0000
ROA not before: Tue 02 Jan 2024 00:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200435
IP address blocks: 94.143.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:4e:52:df:92:8a:5f:ad:a6:cd:c6:e0:d6:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 2 00:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1cb8b80126a9c30a5d191214b29bb084fa19096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9d:5d:6d:43:08:1b:c7:ae:1a:cb:2a:2f:d1:
6a:7b:f4:31:b9:4b:39:2c:72:61:f1:f0:8c:af:65:
4d:0d:3e:3a:72:9c:56:50:96:c6:ca:3e:a3:2b:67:
c1:b9:02:47:24:8f:37:be:bf:e2:18:ec:80:b7:11:
da:22:87:c0:d8:37:4f:9f:eb:2a:41:a0:98:23:b6:
89:53:4c:a1:57:46:bb:0b:31:19:20:f7:f5:5d:82:
72:05:4c:a5:60:8d:a3:85:86:03:88:d2:59:23:29:
6f:e9:7f:e0:6a:61:42:cb:88:f6:47:37:27:ee:93:
65:db:05:6e:d1:33:74:62:3d:e9:61:f1:03:cf:53:
7c:b1:f1:b2:88:d1:65:18:d4:1c:8d:53:a7:97:ce:
41:40:c6:53:d9:6c:6c:08:21:5c:0a:e2:88:51:f5:
b5:e2:c4:8e:6a:13:e8:ff:f2:96:d1:06:04:e4:94:
20:d6:3e:8c:84:55:2f:fe:f9:a0:43:75:1b:c4:01:
17:02:8d:5d:4b:de:9d:ac:9d:88:d3:e5:e3:1c:6f:
62:41:cc:37:97:97:cb:e0:e2:66:6c:aa:ff:92:84:
e6:0a:35:bb:7f:54:7a:61:af:31:0c:82:4a:9d:79:
83:6b:0f:2e:d8:4a:be:4c:ab:94:de:e8:ab:4f:d7:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:8B:80:12:6A:9C:30:A5:D1:91:21:4B:29:BB:08:4F:A1:90:96
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/0cuLgBJqnDCl0ZEhSym7CE-hkJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.225.0/24
Signature Algorithm: sha256WithRSAEncryption
08:87:1f:71:af:c3:8b:1e:85:e4:7a:20:7f:0d:b2:62:91:64:
97:6e:f7:f3:73:ac:bb:ad:80:9e:83:08:87:d3:48:35:b8:34:
12:df:42:a2:cb:79:d0:40:a5:c1:77:ec:64:01:69:13:49:f4:
c2:ed:59:1f:d5:ca:ed:46:e5:e3:58:49:91:2d:ed:75:04:d9:
24:90:db:e9:5b:82:50:74:dc:0c:aa:56:03:4d:1b:73:52:8a:
9d:0d:ad:df:e6:b0:e4:28:e9:26:88:9b:05:26:e5:1b:5b:08:
64:69:14:f2:9b:62:af:f9:04:47:cb:51:12:87:ed:9c:07:78:
37:3f:43:10:27:3b:e3:cb:dd:89:b4:2c:60:ea:42:8b:89:65:
a8:50:f2:41:ee:a9:3f:f6:1d:24:a8:71:62:b4:a0:1b:fa:4d:
1e:92:a2:8e:bf:be:5f:e2:8b:93:46:e6:0d:b5:b2:63:e4:50:
4d:32:dc:aa:a4:fa:5b:1e:52:89:5c:be:06:0a:4d:78:e2:63:
12:4a:e3:c6:75:a3:5d:59:db:24:23:aa:b5:eb:d4:46:c8:d6:
9c:c4:59:d2:b9:95:df:20:71:db:e5:6b:3b:bd:6f:d4:4f:0e:
cd:f6:0a:6f:6e:7c:e6:64:d2:22:a1:6b:dd:b7:ed:47:a9:9e:
b8:b5:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:11:08 2024 by rpki-client on console-fra.rpki-client.org