Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/oErBqh4qVOVrqya_i91ra-dmG-w.roa
File: oErBqh4qVOVrqya_i91ra-dmG-w.roa (raw, json)
Hash identifier: l5LNon4H8k+2jqIbgJtgrNir4+qV6HUnYDw1mNY50TQ=
Subject key identifier: A0:4A:C1:AA:1E:2A:54:E5:6B:AB:26:BF:8B:DD:6B:6B:E7:66:1B:EC
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EF2569DA56862D2233C3EE7D8C2DC8DB7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/oErBqh4qVOVrqya_i91ra-dmG-w.roa
Signing time: Thu 18 Apr 2024 17:52:26 +0000
ROA not before: Thu 18 Apr 2024 17:52:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60840
IP address blocks: 185.201.31.0/24 maxlen: 24
193.228.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:56:9d:a5:68:62:d2:23:3c:3e:e7:d8:c2:dc:8d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 18 17:52:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a04ac1aa1e2a54e56bab26bf8bdd6b6be7661bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:40:c9:39:17:0f:4e:d5:0b:4e:56:ea:d6:5c:
ed:46:2d:74:9b:c0:c6:2c:28:4a:c4:97:74:48:48:
1c:22:82:90:0f:3a:d0:b5:6a:26:ae:6c:39:22:97:
8a:33:85:26:41:34:82:8e:c1:6a:a5:b6:6d:1c:4c:
2f:86:a8:ee:15:9e:09:7a:03:0e:eb:a6:6f:18:87:
5f:a3:de:ca:ea:46:8e:15:49:b0:c3:41:4c:aa:c1:
d2:8e:92:0f:01:7a:17:a2:a4:08:3d:90:7b:ce:82:
20:9e:90:1c:ee:d9:43:8c:1c:a6:a5:4d:1e:5b:45:
0b:4c:bd:56:bb:d3:1c:ba:a3:ec:47:39:e7:3d:0d:
55:ca:f4:e5:4b:50:c7:e9:f3:70:03:b9:98:5b:6f:
1e:22:a8:d2:4a:cb:97:3d:60:50:a7:1b:a9:bf:11:
f4:00:8b:0b:b3:13:88:ad:0a:ef:4a:41:dc:6f:41:
ba:e1:2b:b0:9e:2a:e0:9e:88:e4:e5:64:97:07:9a:
90:ff:12:5b:c5:07:29:76:47:85:8c:a7:ef:34:3a:
53:b0:c8:2e:76:ae:ee:f0:f1:f9:62:ed:15:73:24:
fa:48:1a:ce:96:d8:cc:b8:29:c0:80:4f:e3:17:68:
91:92:a9:01:c6:35:33:d9:75:77:a8:69:1b:2d:f2:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:C1:AA:1E:2A:54:E5:6B:AB:26:BF:8B:DD:6B:6B:E7:66:1B:EC
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/oErBqh4qVOVrqya_i91ra-dmG-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.31.0/24
193.228.130.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a4:da:04:2a:d2:ca:fe:3f:de:67:38:92:db:36:59:c3:9e:
67:ed:e5:13:fd:9c:7c:7b:e2:aa:a7:5d:af:08:c8:da:fa:cd:
a4:ad:e9:0c:d9:4f:df:ce:c4:ac:30:53:cf:cf:0e:f2:ba:9b:
b8:15:0b:1e:a9:6b:4a:12:19:f3:bd:99:5c:3f:c8:a5:4c:35:
5d:b9:d5:94:85:05:14:1f:17:b5:4c:6e:dd:1f:b7:a6:6d:52:
26:76:60:7d:89:8f:d6:80:de:e6:bf:9d:d3:c3:bc:72:91:61:
2b:9c:b6:27:79:44:bb:73:2e:60:f0:04:99:25:52:55:7c:63:
0a:7d:1e:d1:9f:8f:39:b2:78:07:a0:56:d5:94:10:9f:1c:be:
07:a6:9c:d5:33:cf:db:52:fe:be:c2:f8:3f:90:73:47:73:ae:
58:94:b5:90:5b:43:26:d2:61:a7:e8:1b:c0:ae:73:40:68:97:
f7:d0:98:f9:35:13:7a:01:87:f5:68:24:d2:1f:a4:de:44:23:
e1:d8:77:5a:22:a4:35:ac:0c:03:57:0c:2d:17:04:ea:8a:6f:
c4:58:46:7f:70:56:4f:1f:a4:7c:d7:f3:76:dc:6d:c1:72:2d:
60:d8:b5:b3:77:a1:ca:41:bb:5d:ec:4c:69:0a:33:26:90:e4:
34:17:02:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:25:57 2024 by rpki-client on console-fra.rpki-client.org