Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/CmAlb_vdUZhIb6vdAx0YAseO0DQ.roa
File: CmAlb_vdUZhIb6vdAx0YAseO0DQ.roa (raw, json)
Hash identifier: 4s15DX5QLMP26VT0qXEMzQNo7Q/M18mjufN9WSa0d84=
Subject key identifier: 0A:60:25:6F:FB:DD:51:98:48:6F:AB:DD:03:1D:18:02:C7:8E:D0:34
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 018CC86F012BAABC9BB8BEBA1E6514FB44EF
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/CmAlb_vdUZhIb6vdAx0YAseO0DQ.roa
Signing time: Tue 02 Jan 2024 04:29:27 +0000
ROA not before: Tue 02 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.141.0/24 maxlen: 24
2001:67c:5dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:01:2b:aa:bc:9b:b8:be:ba:1e:65:14:fb:44:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a60256ffbdd5198486fabdd031d1802c78ed034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:70:93:fb:78:77:90:e0:ff:84:6c:6a:6d:
4b:10:0a:9a:86:f3:f8:b2:b7:c9:a8:51:cf:11:1a:
54:cf:3b:45:d1:5e:7b:95:6d:07:1e:7a:7a:b2:fd:
34:44:f1:67:e5:22:b8:f9:86:9a:a3:4f:bd:17:ee:
b8:67:7b:1f:60:2e:23:24:a8:1a:a1:7a:65:66:bc:
8d:3e:81:ac:6d:15:ff:cc:4d:34:4a:5b:32:c3:c9:
78:4f:8d:4a:4b:58:50:5c:47:38:8d:90:11:dd:6c:
c5:33:9a:35:98:56:4d:c7:16:05:7a:a1:3c:c3:5a:
95:37:ac:6b:23:3d:9e:d4:bd:eb:25:15:3f:33:53:
4f:01:07:7f:86:69:b5:e3:58:61:99:38:59:44:b9:
ef:0b:99:8a:fd:35:89:bd:64:88:72:cf:b8:9e:ef:
b5:66:88:1c:90:5d:95:d3:b0:80:e4:dd:b4:15:c6:
ff:8a:7c:f3:11:4f:96:8e:10:c7:18:99:7f:cf:3e:
ac:2e:fc:46:09:66:d6:af:4f:85:cd:f2:eb:c1:d8:
12:76:1e:60:6a:b6:83:32:d2:e1:b4:9c:60:86:ea:
9e:93:56:32:01:ca:3b:32:51:0d:55:8a:c3:ca:b4:
b3:03:70:be:62:a5:15:be:90:a3:76:f8:bd:29:56:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:25:6F:FB:DD:51:98:48:6F:AB:DD:03:1D:18:02:C7:8E:D0:34
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/CmAlb_vdUZhIb6vdAx0YAseO0DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.141.0/24
IPv6:
2001:67c:5dc::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e9:c2:b9:d2:d7:1f:2a:36:45:46:e6:39:5d:48:55:58:83:
d0:a9:55:f1:4a:81:19:01:eb:a9:ba:4d:8f:50:0f:8f:26:4a:
1c:d4:e4:63:a2:23:88:a1:94:e2:29:13:9c:29:5f:81:83:1c:
5d:30:e0:6e:1f:6a:1b:1b:1f:b9:76:f3:6a:74:42:64:89:37:
13:2f:b1:e2:0c:d4:b7:8c:de:d9:29:c1:e1:ae:66:0b:44:1f:
b8:59:6e:fb:bc:ad:59:c7:f7:3e:f0:73:3e:4d:75:87:b7:b4:
4c:4c:f8:36:0a:d0:89:83:75:4d:af:e3:5a:c4:6e:a1:44:15:
68:cd:a5:0f:5f:e0:d0:3a:eb:01:30:35:74:81:21:5a:7d:88:
59:ff:2a:4d:d0:b9:67:5a:5f:b6:e1:95:46:06:e5:16:3c:1f:
22:d0:fc:d7:ba:0e:94:0f:c4:95:74:95:82:ad:6f:e0:5e:08:
c3:62:48:68:53:68:27:22:bc:bd:24:e5:76:6d:7e:1c:b8:5d:
9f:01:47:89:01:6b:87:a6:05:ca:80:26:5f:3d:03:e8:e9:bc:
b9:9e:d9:e2:1e:fc:e4:92:b6:27:8b:94:8a:7a:76:59:84:6d:
c9:20:12:cf:30:f9:4f:49:7f:8e:92:de:dd:f0:11:f9:20:d3:
c1:18:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:21:39 2024 by rpki-client on console-fra.rpki-client.org