Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/c0TnwxhiHwUUST8BMhcs-GxMV9Q.roa
File: c0TnwxhiHwUUST8BMhcs-GxMV9Q.roa (raw, json)
Hash identifier: Dwax+W5rIPLR2tiTH0A2LTzjAp65u3ajle7q+HZp5vQ=
Subject key identifier: 73:44:E7:C3:18:62:1F:05:14:49:3F:01:32:17:2C:F8:6C:4C:57:D4
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 0190E6AFE1C8D8CE2097386715FB96BFC00D
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/c0TnwxhiHwUUST8BMhcs-GxMV9Q.roa
Signing time: Wed 24 Jul 2024 21:40:04 +0000
ROA not before: Wed 24 Jul 2024 21:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203702
IP address blocks: 194.124.201.0/24 maxlen: 24
194.124.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e6:af:e1:c8:d8:ce:20:97:38:67:15:fb:96:bf:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jul 24 21:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7344e7c318621f0514493f0132172cf86c4c57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:5d:2b:67:15:9d:18:3f:fc:13:48:f6:c1:
46:84:5d:d2:2c:e8:2d:b2:70:98:fe:dc:23:52:35:
57:74:9d:ae:6e:cd:8a:c4:de:26:0c:a0:26:bd:92:
7b:2f:16:2f:d8:2b:50:f2:68:eb:80:19:ec:86:cd:
a7:e3:9d:8b:86:f1:cd:2a:0f:66:cf:9f:46:0a:33:
d8:73:28:07:aa:33:2c:38:cd:4a:26:58:4d:35:55:
dc:85:1a:a2:71:dc:ad:f8:97:fa:22:e2:a1:ed:ba:
77:59:6f:23:0c:28:af:bb:09:ca:d0:47:92:e0:33:
29:f5:b4:6b:a0:e8:56:49:06:ca:5e:b7:b2:0b:3a:
0e:56:32:52:49:2c:53:43:5e:f6:87:66:a6:2e:79:
44:f2:c9:72:2f:fe:d8:bc:7f:48:f8:a7:4c:50:3b:
73:f6:78:b1:a7:59:9e:c7:83:9d:f8:27:e8:47:64:
71:47:5d:6e:99:33:30:9e:e0:31:2a:02:dc:7a:5d:
a4:d4:d5:f4:b3:ca:c3:2d:01:57:e8:be:91:17:e9:
90:94:0b:2a:2f:a6:54:c1:0c:e9:70:7d:29:88:68:
6e:5c:dc:8c:5d:f1:f0:99:9c:84:c4:d6:dd:88:a6:
67:49:2c:0d:6e:25:30:fd:c8:34:3d:7b:bc:f1:be:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:44:E7:C3:18:62:1F:05:14:49:3F:01:32:17:2C:F8:6C:4C:57:D4
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/c0TnwxhiHwUUST8BMhcs-GxMV9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.201.0-194.124.203.255
Signature Algorithm: sha256WithRSAEncryption
5e:77:95:62:81:98:d2:69:9a:4c:f5:ae:40:78:16:60:21:3c:
12:20:18:59:d7:8d:bc:d0:57:78:91:af:7c:49:9a:95:1c:74:
b8:37:7b:52:80:1c:fc:3b:51:38:f0:99:92:1a:94:4d:d9:58:
88:c6:37:bd:56:5f:03:2b:61:f7:8f:f1:96:a3:2d:1b:56:1d:
48:68:68:8a:ac:2c:e3:f6:35:72:20:27:d3:51:5d:a3:50:01:
77:e5:d7:bb:1f:87:3a:92:7e:f0:6b:07:2d:71:c0:d7:1b:15:
e7:5d:29:b1:d3:b8:ff:c0:92:5e:79:6d:9b:f6:a0:c3:a9:98:
1b:0b:47:87:1d:27:67:d1:f3:ee:b2:64:6d:fe:0b:6e:f6:cc:
08:38:c1:ef:a4:05:3b:e7:37:72:dd:a1:90:da:dc:05:83:02:
21:06:8b:d4:62:da:dd:2a:3d:f9:9c:54:96:1e:37:63:c6:00:
1d:a5:d7:aa:9b:1c:aa:96:9f:7a:1b:59:ff:1f:4a:e7:6a:eb:
49:8d:c0:c5:99:24:67:21:e0:78:d2:26:1c:b4:9e:72:48:e1:
c0:4b:d4:35:71:e9:b5:23:ab:92:b2:35:ad:b5:7e:4b:dc:4e:
40:e7:9c:33:fb:5d:e6:69:46:e7:8f:b1:32:d4:86:b6:7e:cb:
9d:44:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:24 2024 by rpki-client on console-fra.rpki-client.org