Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/LOxzmY-e1X1M4dwLVXGuh8vQb-A.roa
File: LOxzmY-e1X1M4dwLVXGuh8vQb-A.roa (raw, json)
Hash identifier: wFCmRzhYqKuBJY1mvu7jrRAJjLbnVtI/zKia6RGCm6s=
Subject key identifier: 2C:EC:73:99:8F:9E:D5:7D:4C:E1:DC:0B:55:71:AE:87:CB:D0:6F:E0
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018E3243C422414DB7B7B0C1D49E81185608
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/LOxzmY-e1X1M4dwLVXGuh8vQb-A.roa
Signing time: Tue 12 Mar 2024 10:44:45 +0000
ROA not before: Tue 12 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 194.26.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c4:22:41:4d:b7:b7:b0:c1:d4:9e:81:18:56:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Mar 12 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cec73998f9ed57d4ce1dc0b5571ae87cbd06fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:ea:17:09:74:e3:2f:0a:d2:d4:61:de:45:
1d:c6:84:2e:48:55:33:bb:62:b8:27:69:63:21:5a:
a7:76:94:50:62:27:66:f2:a1:ec:1e:89:f3:8b:8e:
a8:5b:64:d7:9a:db:91:f0:d5:4e:4b:c4:2a:8a:ae:
7d:bf:ab:b7:ad:15:0d:ba:24:24:e4:a6:79:39:57:
fa:1b:97:c9:85:8e:bd:3e:e0:6f:fd:ab:a0:9a:fe:
4b:2b:c2:44:87:75:5e:e3:3b:73:44:29:20:56:36:
97:3f:6a:77:2e:c6:40:56:66:60:70:3c:bf:16:d1:
f7:4c:e9:eb:85:6b:50:44:27:d1:0d:61:4c:38:8d:
a0:90:3d:2f:c3:f9:5e:c1:6e:48:a4:93:83:1c:52:
29:8c:4e:42:5c:f7:d1:d2:48:38:fb:08:39:ff:82:
b1:f6:2a:87:0a:19:e7:2b:f2:20:77:36:be:1b:53:
a2:8b:08:b8:b4:ea:c3:86:8c:3f:f7:60:be:b9:5d:
59:31:be:46:6e:3f:fd:9c:be:c6:01:57:c7:70:f4:
a4:1b:77:c2:f4:09:1e:42:99:ac:fe:e0:c0:2a:60:
61:6f:c2:b9:d8:73:73:dd:ed:61:b7:d2:8a:2a:57:
ff:96:69:b0:15:bf:f3:a8:f9:3b:f0:24:b5:45:68:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:73:99:8F:9E:D5:7D:4C:E1:DC:0B:55:71:AE:87:CB:D0:6F:E0
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/LOxzmY-e1X1M4dwLVXGuh8vQb-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.204.0/24
Signature Algorithm: sha256WithRSAEncryption
75:69:4f:5c:e7:9b:3c:04:9d:89:8e:7a:46:39:60:13:a1:d9:
ed:00:7b:cb:e9:6b:89:41:70:ff:fc:3d:96:d0:17:8a:55:1c:
54:8a:9c:8e:a0:91:de:f7:4a:c8:45:2d:42:b0:0f:81:bf:d5:
d7:22:a1:03:e7:8f:70:4a:70:34:b7:9d:77:32:a6:46:b5:33:
dd:fd:04:60:e1:9a:c1:21:24:d4:72:56:9f:da:c5:4b:dd:6b:
f0:7f:bb:d5:17:02:97:22:29:cc:68:b9:32:02:a9:79:d6:43:
b4:f1:1a:9a:64:07:0b:88:bb:26:d1:ba:10:cd:96:47:4b:69:
cc:93:56:dc:b0:67:ed:5d:57:56:e5:fc:19:4a:68:bf:43:ec:
2b:af:9a:e6:0a:1c:ce:06:74:27:dc:0c:7f:f5:32:c5:46:7a:
78:db:dc:3a:e8:3b:be:39:c2:ef:24:53:82:a7:c4:e8:16:ae:
b4:44:09:c4:56:55:b7:07:57:62:f6:c6:e1:ad:b3:4a:b0:65:
6c:c3:86:af:45:4d:da:54:bd:96:46:21:11:49:86:41:2a:86:
bb:19:89:3a:fa:74:25:a0:43:78:bb:98:47:d1:b1:0a:8f:6c:
d9:35:af:7a:05:a2:0f:6a:ee:46:5b:3a:e5:f9:26:4f:4f:68:
ec:61:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:41:11 2024 by rpki-client on console-ams.rpki-client.org