Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CohaMO4_Eb3U0WsxmdrrSqZVFPE.roa
File: CohaMO4_Eb3U0WsxmdrrSqZVFPE.roa (raw, json)
Hash identifier: Y9YNxJSBBL8DweF7zT9ZIafyqDrGhAezEC+GP25xCNQ=
Subject key identifier: 0A:88:5A:30:EE:3F:11:BD:D4:D1:6B:31:99:DA:EB:4A:A6:55:14:F1
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018ECC4A05FDC9A164EBA5D4B1C1AC39E494
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CohaMO4_Eb3U0WsxmdrrSqZVFPE.roa
Signing time: Thu 11 Apr 2024 08:33:07 +0000
ROA not before: Thu 11 Apr 2024 08:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26548
IP address blocks: 91.240.71.0/24 maxlen: 24
194.105.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:4a:05:fd:c9:a1:64:eb:a5:d4:b1:c1:ac:39:e4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 11 08:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a885a30ee3f11bdd4d16b3199daeb4aa65514f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:89:11:50:99:fd:f5:90:b8:16:01:08:3f:
d9:b2:2f:2e:2c:a5:ad:5b:1b:9f:e1:bc:ac:c1:cb:
c3:2b:5c:35:90:5f:22:06:ca:d8:b8:a2:48:f3:c6:
28:ab:33:7c:0e:78:9f:94:aa:ef:b8:ec:31:6e:3f:
fb:83:eb:52:83:f2:77:22:1e:58:8e:80:47:67:5a:
4c:fa:79:62:01:af:d5:2b:30:4b:fd:80:91:c2:81:
36:94:64:8f:34:56:56:4c:d7:5a:83:61:b9:8a:1b:
dc:40:62:a8:d8:c1:2c:53:95:23:ec:19:7c:0d:f0:
48:24:12:c5:22:5f:b9:88:40:70:54:7f:56:45:61:
90:bf:e8:b9:90:b9:52:6f:09:95:62:89:07:fa:d6:
8a:44:d2:88:4c:79:1e:72:47:c9:68:6e:cd:05:6b:
5f:d4:88:cb:be:48:15:52:1a:b7:1d:f4:75:53:75:
df:4d:61:c3:ad:88:a7:49:04:34:1e:ec:90:37:7f:
d1:6e:e2:e5:64:29:00:d6:95:23:28:69:72:8b:13:
e0:6f:c6:bc:d3:50:9b:6c:ad:ac:7f:84:a0:70:33:
42:a0:cb:b3:67:23:95:88:c7:f7:30:86:21:ae:c3:
e8:ad:f0:b5:5a:64:a6:03:f2:95:df:f0:2a:41:ba:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:88:5A:30:EE:3F:11:BD:D4:D1:6B:31:99:DA:EB:4A:A6:55:14:F1
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CohaMO4_Eb3U0WsxmdrrSqZVFPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.71.0/24
194.105.158.0/23
Signature Algorithm: sha256WithRSAEncryption
45:7b:ce:80:b2:42:b0:0d:65:8c:e6:02:58:71:66:93:a0:27:
ae:87:94:d3:cf:ba:61:e5:a3:33:ff:0e:fc:a7:b4:4f:89:5d:
4e:39:ee:58:2b:44:64:7d:fa:a1:b0:90:35:e9:d6:16:d3:33:
bf:2f:d6:9b:30:58:e8:48:31:36:8f:6b:71:91:27:1f:9c:f5:
34:cc:52:dd:02:5e:72:0f:a1:9a:a8:e6:fa:de:eb:75:6e:4f:
33:1f:a7:f0:55:61:8b:6a:2f:b2:e9:45:0c:25:52:13:35:5d:
98:83:63:08:a3:f3:5c:15:62:4c:ee:f6:61:e0:43:c9:1e:7e:
7b:30:63:d6:4f:d8:6a:e1:0a:47:c9:bf:b0:74:a7:3f:c9:bc:
bd:1e:eb:f3:7a:92:7e:58:c5:90:fd:7c:65:0c:56:b8:4f:33:
11:e1:fb:b1:f2:09:12:f9:14:b5:5f:32:15:5a:28:8e:dc:3b:
e2:16:66:96:ed:72:eb:f3:14:eb:51:26:d9:fc:e0:19:92:70:
e1:e6:6f:9f:8a:45:7f:b3:ec:fc:74:c8:01:96:d7:fc:3c:3a:
8b:1b:d2:b7:12:57:7a:cf:13:a2:01:de:84:0f:4c:44:44:c4:
bc:00:f2:3f:2a:14:46:41:b0:df:d7:c4:d7:be:a2:6f:b7:a4:
ec:66:d6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 21:02:25 2024 by rpki-client on console-fra.rpki-client.org