Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-wxEg-HUbOn8TjoIFkdKVPYeh98.roa
File: 1-wxEg-HUbOn8TjoIFkdKVPYeh98.roa (raw, json)
Hash identifier: xOBZq38ylv+zkL0FvOeitZxkOrXS3ITbOsDnTt1tBBg=
Subject key identifier: FB:0C:44:83:E1:D4:6C:E9:FC:4E:3A:08:16:47:4A:54:F6:1E:87:DF
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73171E0FFAE24DF1299016451E5BE
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-wxEg-HUbOn8TjoIFkdKVPYeh98.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16236
IP address blocks: 194.2.86.0/24 maxlen: 24
194.250.98.0/24 maxlen: 24
194.2.132.0/24 maxlen: 24
194.2.133.0/24 maxlen: 24
90.115.208.0/24 maxlen: 24
90.115.209.0/24 maxlen: 24
194.3.4.0/24 maxlen: 24
194.2.57.0/24 maxlen: 24
81.255.178.0/24 maxlen: 24
194.2.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:31:71:e0:ff:ae:24:df:12:99:01:64:51:e5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb0c4483e1d46ce9fc4e3a0816474a54f61e87df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:54:b0:e9:56:45:1d:2f:3d:62:af:18:ac:73:
99:a6:0f:56:bf:72:c1:34:64:5c:5d:c1:4a:7d:38:
09:13:9f:82:07:66:c2:32:3a:03:12:32:75:90:2e:
83:52:89:d1:18:be:d3:13:b1:0f:b1:4f:66:8b:63:
a1:08:1c:58:e8:91:1a:5d:9d:f0:1e:27:1f:b7:89:
8a:89:37:76:8f:4b:ee:7e:dd:ab:5d:7a:32:94:70:
03:d6:00:4d:fe:ba:d0:be:a3:d3:0d:ed:ac:05:95:
9b:64:cd:32:1b:b2:99:36:b6:f4:e4:23:f1:9a:b6:
eb:c5:74:af:94:27:66:16:be:b1:4b:f2:96:d1:c3:
0f:54:5a:ee:bf:33:44:2d:8b:77:67:47:f4:7e:9b:
ee:ec:41:5d:78:68:39:5c:a5:23:b8:bb:4f:eb:9f:
cf:7a:a9:65:ce:01:ee:d7:2b:88:50:be:6f:a6:7e:
2f:23:de:ba:f3:fd:5f:71:36:50:c8:dd:e0:07:c5:
c1:07:47:4c:2d:8e:90:96:a6:06:15:06:29:b2:73:
30:eb:e4:81:32:09:28:45:48:f3:45:b3:f8:72:57:
41:fe:51:c9:d2:d1:79:bc:d0:3a:59:c4:30:cb:60:
4d:b0:c1:34:31:65:48:3d:fb:15:db:b1:84:13:92:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:44:83:E1:D4:6C:E9:FC:4E:3A:08:16:47:4A:54:F6:1E:87:DF
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/1-wxEg-HUbOn8TjoIFkdKVPYeh98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.255.178.0/24
90.115.208.0/23
194.2.56.0/23
194.2.86.0/24
194.2.132.0/23
194.3.4.0/24
194.250.98.0/24
Signature Algorithm: sha256WithRSAEncryption
65:12:46:e7:64:b1:cf:6b:79:5f:d4:b2:f7:cd:eb:63:e7:70:
d9:cc:ca:cb:83:e3:ba:cc:d7:bd:ef:5d:99:10:7d:ac:d5:19:
a4:f7:fa:99:df:34:0e:83:b9:28:e1:18:7b:02:81:85:12:11:
8c:9a:8d:b0:39:22:3b:1c:7e:ed:29:08:ce:da:0d:65:5b:c8:
90:53:7e:6a:1c:a5:71:81:9c:42:f5:c2:9c:3a:fa:82:f1:3d:
5c:84:13:c9:ba:ba:4c:ec:e0:38:c7:65:cb:ad:7e:60:6d:75:
38:18:ec:e5:9b:ac:48:7e:d4:8b:9b:c9:a4:7d:8b:b7:15:a6:
87:51:5d:aa:92:67:32:3c:81:cb:64:b9:f7:c3:ab:be:d1:f5:
ae:49:7d:aa:08:b9:32:25:47:3d:87:a1:1d:50:a0:6c:1e:d4:
8a:c5:17:41:ce:bf:d6:a5:95:72:40:11:0d:3a:75:82:ef:61:
04:f5:35:47:0d:5f:32:4e:56:01:36:79:05:42:1a:95:6f:f8:
24:b5:4b:9b:00:94:a7:a8:b7:80:b2:cf:6a:d0:2e:11:5f:dd:
cb:77:4d:73:f7:0c:b2:48:f8:f8:70:08:6d:a5:07:73:e0:28:
76:d8:06:09:96:9f:cd:32:47:fa:7f:7b:7c:79:e5:5b:b3:4f:
04:e4:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:58 2024 by rpki-client on console-ams.rpki-client.org