Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/AUb1vYvBnDoiPtrE9wWNcz5HMHs.roa
File: AUb1vYvBnDoiPtrE9wWNcz5HMHs.roa (raw, json)
Hash identifier: 6A2BCC3xin+wszaQbl0u30gGqEonG/dNfp3sBRCOFfU=
Subject key identifier: 01:46:F5:BD:8B:C1:9C:3A:22:3E:DA:C4:F7:05:8D:73:3E:47:30:7B
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 018DA8BF8C7E9462A8B24CE7DDD01CA28644
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/AUb1vYvBnDoiPtrE9wWNcz5HMHs.roa
Signing time: Wed 14 Feb 2024 17:52:21 +0000
ROA not before: Wed 14 Feb 2024 17:52:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.93.228.0/24 maxlen: 24
193.19.224.0/22 maxlen: 24
2a02:fe80:13::/48 maxlen: 48
2a02:fe80:1010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:bf:8c:7e:94:62:a8:b2:4c:e7:dd:d0:1c:a2:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Feb 14 17:52:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0146f5bd8bc19c3a223edac4f7058d733e47307b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:0c:f8:14:02:d5:b2:9e:b2:ec:0e:b5:46:
83:14:83:45:9a:22:48:2b:a1:ef:b1:69:37:03:06:
12:33:26:71:92:2e:90:53:ae:40:76:e8:3d:38:78:
aa:92:03:94:c7:cc:7d:c2:c5:8d:3d:16:3f:0f:30:
fd:80:1d:96:bd:e3:2c:fc:34:7d:72:fc:90:5a:cf:
5d:f8:57:25:b0:89:a3:52:0a:ff:11:80:25:54:aa:
81:17:2c:bc:97:2c:ec:cf:b1:db:56:d3:9a:b1:05:
04:49:7b:f3:9f:12:9f:ba:14:87:a4:cc:8c:2e:a7:
78:de:c6:74:34:cb:ce:1d:c8:cb:ed:72:86:88:26:
7d:b2:86:02:6f:95:ca:11:56:6f:8f:8d:29:e8:15:
eb:a2:ec:c4:c7:c5:f2:5a:04:55:b8:c3:00:d0:05:
fe:94:9d:cc:ee:34:c7:27:9b:dd:bb:37:d9:0c:53:
0b:f3:39:ee:2c:f5:5e:79:e5:26:1e:5c:57:a6:e0:
8b:cc:79:17:72:ec:7c:cb:03:ca:50:11:a1:d9:62:
96:2a:d1:c5:dd:1a:f5:02:b9:ec:6a:9f:39:4c:74:
44:07:04:42:f5:99:22:fb:a8:d0:10:fd:3f:d4:81:
1c:c7:27:b9:32:26:59:3a:63:7b:01:ee:7a:c9:bb:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:F5:BD:8B:C1:9C:3A:22:3E:DA:C4:F7:05:8D:73:3E:47:30:7B
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/AUb1vYvBnDoiPtrE9wWNcz5HMHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.228.0/24
193.19.224.0/22
IPv6:
2a02:fe80:13::/48
2a02:fe80:1010::/48
Signature Algorithm: sha256WithRSAEncryption
0f:04:f9:0b:be:67:79:36:ec:6e:5e:8f:1a:98:3d:c9:55:8e:
72:b0:1c:09:d0:fc:74:af:cb:e8:9e:3c:15:06:23:a3:15:4b:
36:7d:97:2e:b3:c8:79:c7:85:60:68:45:0e:eb:75:f4:63:59:
4b:78:15:a6:02:01:25:c4:f8:23:d9:43:42:a6:97:4f:e9:ac:
60:49:08:7c:92:7f:7f:16:2d:c8:db:39:f0:8e:af:bf:42:6f:
02:76:de:d5:53:92:4f:7e:4a:6b:bf:32:21:9c:cc:84:e6:ce:
e8:7e:3d:ff:ca:73:44:a7:71:f9:a9:80:7b:60:31:a5:46:8e:
44:af:aa:d3:5c:b0:dd:87:9f:21:26:94:30:97:18:c8:73:7c:
6a:f3:cd:58:15:a6:03:d7:98:65:e6:72:e4:b0:00:b8:68:a3:
6d:53:21:06:4a:c8:ac:b9:7e:3d:12:76:a8:04:98:04:ae:e1:
6e:7a:e2:56:f3:d6:a2:83:ad:15:b2:13:64:99:df:ec:45:e9:
e1:ab:25:49:39:a9:af:e3:7c:10:46:36:d0:d8:5e:fe:98:c5:
00:1b:ab:4f:61:22:56:2f:a6:68:a7:8c:8e:30:c6:ca:fc:c7:
84:35:56:25:07:ac:d5:e3:b0:f8:f0:6d:63:53:b6:94:bb:11:
77:1f:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:28:55 2024 by rpki-client on console-ams.rpki-client.org