Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/oLSU0F7ZcHkIRL_222jCzMnUFi8.roa
File: oLSU0F7ZcHkIRL_222jCzMnUFi8.roa (raw, json)
Hash identifier: 1yIV6fRzK5keqIiiWs946nwkAi8zmUMuzIxHhWl/nAA=
Subject key identifier: A0:B4:94:D0:5E:D9:70:79:08:44:BF:F6:DB:68:C2:CC:C9:D4:16:2F
Certificate issuer: /CN=4d583b6f56cf092728de593ad952aea19ce31886
Certificate serial: 018CC6B7D8F32248B75A77B3769194F8C9EF
Authority key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/oLSU0F7ZcHkIRL_222jCzMnUFi8.roa
Signing time: Mon 01 Jan 2024 20:29:46 +0000
ROA not before: Mon 01 Jan 2024 20:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9063
IP address blocks: 95.156.214.0/23 maxlen: 23
185.119.32.0/22 maxlen: 22
37.9.184.0/21 maxlen: 21
109.230.202.0/24 maxlen: 24
109.230.201.0/24 maxlen: 24
95.156.197.0/24 maxlen: 24
95.156.200.0/23 maxlen: 23
95.156.202.0/24 maxlen: 24
2a02:2dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d8:f3:22:48:b7:5a:77:b3:76:91:94:f8:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d583b6f56cf092728de593ad952aea19ce31886
Validity
Not Before: Jan 1 20:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0b494d05ed970790844bff6db68c2ccc9d4162f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:99:19:1e:68:bb:e8:15:1b:89:ce:7b:da:
2b:ca:cd:0f:dc:d9:c3:e1:96:29:22:ba:07:90:ab:
68:32:52:e2:87:c7:4b:ea:0c:79:b6:1c:ce:72:6f:
42:3b:45:56:16:ec:13:e0:3f:50:95:3b:24:25:d1:
cf:a4:10:2a:d1:22:7c:45:35:25:25:f7:47:c4:74:
7c:c8:d0:f4:b9:b8:a2:38:45:3b:05:db:21:8e:83:
2b:d7:f5:71:bd:c4:3a:33:91:dc:e7:89:26:89:90:
c7:0e:51:fd:9f:56:c4:93:b4:4f:bb:e3:28:7c:be:
e1:5a:9d:9f:97:25:c8:54:32:4d:0b:47:c4:f7:15:
51:04:89:ce:4c:b2:cb:47:dc:0b:a6:d0:12:ab:a7:
f9:fc:94:51:9b:22:a7:cf:12:7e:43:27:f8:ec:89:
05:84:bc:d5:8f:f1:ae:f4:48:37:85:b4:b4:3d:f2:
f5:2e:19:b9:b5:a9:73:ae:05:ca:07:be:3d:16:12:
f8:26:10:83:e5:f2:cf:cb:0f:f2:bb:80:b1:7e:14:
0d:69:06:a2:dc:73:39:10:1d:8d:9f:ea:4f:00:6f:
5a:08:e3:82:36:20:f8:b1:cb:41:b2:e5:65:89:1e:
37:ea:d9:86:d2:6f:92:0a:69:49:4f:13:2f:e3:88:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B4:94:D0:5E:D9:70:79:08:44:BF:F6:DB:68:C2:CC:C9:D4:16:2F
X509v3 Authority Key Identifier:
keyid:4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/oLSU0F7ZcHkIRL_222jCzMnUFi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.184.0/21
95.156.197.0/24
95.156.200.0-95.156.202.255
95.156.214.0/23
109.230.201.0-109.230.202.255
185.119.32.0/22
IPv6:
2a02:2dc0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:5e:fb:fe:32:31:18:42:b0:29:25:78:f6:be:f4:fe:96:43:
60:09:24:a9:67:50:b0:09:21:f8:74:9f:71:fd:de:24:6b:de:
b1:52:e7:e1:d1:34:a6:99:ff:d2:cd:f2:42:55:98:bb:a6:45:
56:67:04:a3:d2:67:2c:ed:b8:49:06:93:4a:0d:e3:2f:df:c4:
0a:4d:fb:31:e3:ad:84:26:c1:7a:02:0c:2e:01:c5:d6:64:ed:
ac:90:91:93:d5:df:42:c7:04:22:3a:2b:96:7c:ec:0f:9f:67:
5a:93:c2:2c:f1:f0:60:c8:92:ad:dc:ae:30:3d:43:5f:3c:a5:
35:d0:78:fe:8a:98:5f:58:69:0c:bd:85:dc:60:a4:12:00:32:
e7:7d:ac:51:c4:31:e2:79:ca:ab:fa:31:32:5e:4a:e9:05:0a:
90:2e:76:5d:70:de:d0:86:47:29:9e:61:1d:c7:e4:b6:03:81:
e8:41:a4:e9:0c:89:3f:1f:a2:c8:08:d6:04:03:e9:48:5f:43:
37:95:6e:18:2f:93:ae:e6:04:1d:e9:02:f4:85:a1:ce:73:ae:
6f:3f:20:63:db:ca:67:96:6e:09:ae:00:0a:39:6d:f1:33:a2:
0a:06:e8:95:ff:54:99:66:26:fe:7a:00:63:1e:24:b3:46:74:
9e:91:bc:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:12:26 2024 by rpki-client on console-fra.rpki-client.org