Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/0rIrMXMh37xcUhUrrGQ91dOpdCU.roa
File: 0rIrMXMh37xcUhUrrGQ91dOpdCU.roa (raw, json)
Hash identifier: +sKNNcmm4irnwP0lKbHwGcEqI5C7cv32RozayTClmj8=
Subject key identifier: D2:B2:2B:31:73:21:DF:BC:5C:52:15:2B:AC:64:3D:D5:D3:A9:74:25
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 018CC727618B329425B355550037BBE550E4
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/0rIrMXMh37xcUhUrrGQ91dOpdCU.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209677
IP address blocks: 192.109.145.0/24 maxlen: 24
159.151.64.0/18 maxlen: 18
2a07:8142::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:61:8b:32:94:25:b3:55:55:00:37:bb:e5:50:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2b22b317321dfbc5c52152bac643dd5d3a97425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:84:d4:36:ba:9d:48:74:91:5c:8f:77:36:
bc:c9:2b:03:5a:14:ce:2e:7a:41:06:b7:5c:c8:5a:
b8:4c:49:c5:a5:88:a9:95:32:1c:4e:d6:98:1e:3f:
9b:a2:0c:ef:ad:54:57:f9:0d:ed:c0:13:51:1b:fe:
e5:92:f2:67:eb:4a:28:30:f3:e2:6a:da:f2:55:82:
ac:2d:88:cc:84:52:d2:3e:6c:78:56:be:15:e0:46:
50:df:e1:c7:54:7d:b7:d7:16:d4:4b:b1:0a:f8:20:
8d:85:06:64:f2:54:e3:7a:2e:c5:76:6a:1d:ee:86:
48:46:61:90:bc:66:3c:2f:de:a1:ca:ec:d0:7e:0f:
b5:54:d7:d3:c7:54:eb:c6:33:02:03:9f:52:d2:d9:
aa:37:8a:42:48:a0:b1:28:3f:c7:69:67:c1:b1:01:
ff:30:c3:3b:16:ac:8e:9f:68:4e:ac:82:1e:d3:54:
aa:8c:8c:a3:a8:6a:04:4c:1e:1d:5d:c4:59:a1:ae:
d6:a8:e5:8e:7b:81:50:38:f5:fa:a3:78:a9:1d:68:
f0:f7:f4:1e:67:f2:56:df:72:df:95:c4:c6:f9:2b:
f3:9c:39:c2:f6:95:fc:1e:40:f8:e9:f7:bc:28:77:
39:54:00:5a:b3:67:c2:f7:c4:1d:2e:70:74:4d:9c:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:2B:31:73:21:DF:BC:5C:52:15:2B:AC:64:3D:D5:D3:A9:74:25
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/0rIrMXMh37xcUhUrrGQ91dOpdCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.64.0/18
192.109.145.0/24
IPv6:
2a07:8142::/36
Signature Algorithm: sha256WithRSAEncryption
82:a0:b6:3d:b9:a5:da:b2:fc:42:bd:72:ae:01:fb:fc:13:b5:
d1:00:8c:dd:29:cf:61:c0:e5:2c:d8:54:0c:de:4c:5d:c8:df:
5e:cf:d1:d6:d5:dd:78:57:4a:60:b0:58:77:3a:4b:f6:a3:1c:
16:48:13:68:7b:bc:b2:4c:a4:38:c2:86:2e:1b:f6:c0:79:2e:
d8:49:d3:59:cf:39:77:57:32:7b:fc:4f:bb:ac:3e:a5:20:a6:
bf:e6:7d:38:ac:66:94:3d:52:71:bc:64:4b:b4:80:45:51:c0:
31:5f:79:e0:f2:83:87:f0:73:6c:86:07:bf:52:8b:6d:08:1a:
f3:75:72:24:a1:0e:0c:ff:fb:d3:d7:c6:b5:7d:34:0c:aa:7a:
4c:ec:23:4d:42:94:88:97:2f:b3:57:a9:ff:c3:0c:96:90:9c:
90:43:1a:18:58:bb:18:18:0b:5f:71:de:2d:ba:11:ec:1e:3a:
1a:36:1c:d5:b7:e2:5c:cf:0e:d9:91:e7:ee:5b:a9:1a:aa:4c:
2e:81:7b:cc:ef:53:15:75:fa:25:68:be:73:87:9d:98:65:42:
f3:1f:21:1a:d9:54:94:e6:66:c2:54:74:b2:76:ec:c0:ab:8a:
bf:43:37:da:fa:60:37:44:de:75:17:e0:6d:51:a5:ad:72:e2:
4a:90:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:54:04 2024 by rpki-client on console-fra.rpki-client.org