Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/DAgDBhGeP2nSobMByyzSaKLbovM.roa
File: DAgDBhGeP2nSobMByyzSaKLbovM.roa (raw, json)
Hash identifier: coNdza/2UoxkZwFSCNBgaAbFlc8i8OhWnU3eX9oJ/68=
Subject key identifier: 0C:08:03:06:11:9E:3F:69:D2:A1:B3:01:CB:2C:D2:68:A2:DB:A2:F3
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 018CC3B6EF404D1F19699B64796CE3C44929
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/DAgDBhGeP2nSobMByyzSaKLbovM.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8676
IP address blocks: 194.13.108.0/23 maxlen: 24
194.13.236.0/23 maxlen: 24
194.13.140.0/23 maxlen: 24
194.11.244.0/23 maxlen: 24
2a06:2100::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ef:40:4d:1f:19:69:9b:64:79:6c:e3:c4:49:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c080306119e3f69d2a1b301cb2cd268a2dba2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:fa:e7:3d:61:ec:02:23:e9:8f:8d:34:ce:
a1:52:7a:3c:7a:23:7f:10:18:17:8e:03:31:db:95:
d4:10:4d:ca:44:9b:1c:be:dc:01:4b:94:ea:af:71:
6c:a5:57:63:7c:f9:6d:f0:78:fa:04:3f:e2:15:a0:
14:67:9f:71:cd:d3:c3:53:b5:8d:66:42:2d:c2:55:
e4:41:b4:85:85:1c:f5:e4:12:07:d4:53:d3:f6:5f:
8b:2b:17:c8:46:3b:26:8e:15:da:6a:85:7d:2f:32:
3e:af:7e:9e:c1:73:ad:b6:4e:a2:22:9c:c4:01:41:
da:d4:f5:0b:97:ac:32:04:66:4c:c6:73:5e:e5:02:
f1:73:30:87:b1:48:3a:bc:e8:d7:9c:ca:df:37:eb:
5d:54:cc:d2:25:86:00:54:05:00:5c:c5:4a:99:3a:
b8:e7:da:d9:7c:c2:1d:9c:ef:fb:f3:4f:33:ff:9c:
61:ea:23:11:50:88:24:42:ea:58:06:73:18:97:2e:
6c:9f:12:0c:72:6e:9b:d5:03:f6:cd:ae:e9:bd:07:
25:23:22:bb:3c:16:6e:b4:18:2e:04:7a:b8:45:14:
b5:63:09:f4:b4:87:5d:26:a5:be:59:8e:85:f0:e4:
03:7f:43:55:2e:e8:96:41:d6:e8:66:fc:37:77:02:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:03:06:11:9E:3F:69:D2:A1:B3:01:CB:2C:D2:68:A2:DB:A2:F3
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/DAgDBhGeP2nSobMByyzSaKLbovM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.244.0/23
194.13.108.0/23
194.13.140.0/23
194.13.236.0/23
IPv6:
2a06:2100::/30
Signature Algorithm: sha256WithRSAEncryption
34:d8:74:86:a9:8a:18:40:d1:e6:bb:7d:2f:fc:f6:20:27:cc:
52:ef:6d:4a:92:9c:86:36:cb:f7:6f:85:77:44:07:bc:3a:da:
60:71:31:db:f0:26:17:f5:1c:93:03:90:be:02:2e:19:71:57:
4a:23:21:21:5a:fd:2e:b9:f5:95:2f:28:f3:74:af:9a:d3:71:
fa:9c:6d:ae:b8:0a:8e:f4:18:c9:e0:27:56:27:ab:a2:e6:e0:
94:ab:19:6f:c7:3f:eb:34:d2:35:b1:63:0c:33:ca:50:68:c4:
12:50:66:d8:63:3c:b4:6e:71:ad:2f:c5:79:e3:a0:ee:54:3d:
96:3a:0d:0b:a2:17:35:d1:17:c3:1e:19:ec:10:46:7f:d0:f2:
bd:f0:ad:a7:ca:5d:98:32:03:5d:ff:2b:4a:38:7a:63:6c:d4:
07:50:c3:da:35:cd:e8:ea:55:0f:f1:df:6b:c4:b7:dc:33:1a:
68:f9:d2:de:3a:49:53:d0:3f:97:d2:9b:30:da:45:0e:06:42:
6c:20:ac:d3:9a:94:1c:13:0f:a9:37:2b:49:89:e4:2e:55:1c:
0e:d3:3b:b3:6c:85:7e:a8:25:2d:98:d5:71:dc:92:9a:08:a2:
b4:89:42:f5:07:a3:b5:16:39:5e:dc:8e:9c:00:c8:ee:e8:42:
be:62:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:21:43 2024 by rpki-client on console-ams.rpki-client.org