Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CHO8vqYhRbnIgCpKvlhHJ3x3jE0.roa
File: CHO8vqYhRbnIgCpKvlhHJ3x3jE0.roa (raw, json)
Hash identifier: hCsjpnZAY6b4J5ENViGyb3IEvlRYLE3u94JILaVey44=
Subject key identifier: 08:73:BC:BE:A6:21:45:B9:C8:80:2A:4A:BE:58:47:27:7C:77:8C:4D
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 018CC72760E22AF6B1AAF8306395454B8886
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CHO8vqYhRbnIgCpKvlhHJ3x3jE0.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31367
IP address blocks: 159.151.251.0/24 maxlen: 24
159.151.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:60:e2:2a:f6:b1:aa:f8:30:63:95:45:4b:88:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0873bcbea62145b9c8802a4abe5847277c778c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:73:8a:4b:6c:7f:9d:16:46:3b:33:5e:08:
5b:95:b2:b0:09:3e:3d:af:be:8c:e9:26:d4:9c:e7:
4c:bf:0b:bb:09:67:f7:18:a8:b0:99:7e:09:1b:06:
6c:87:7b:ca:f7:c8:92:82:ec:5e:ab:21:a7:a4:60:
ad:2a:59:5c:d6:f1:5d:cd:5c:5f:c2:22:30:95:00:
6c:d6:51:86:9e:fb:22:02:c6:fa:bc:09:b6:1e:87:
f6:ab:6e:b3:77:98:80:a4:d4:b8:e3:16:b1:50:bb:
45:ae:31:73:e6:4b:2a:13:20:3f:6e:d0:0d:b5:ab:
cd:fa:8f:8a:88:29:e6:b6:2b:f9:52:23:73:75:d2:
31:3e:32:04:1d:22:b0:cf:f7:af:a7:3e:fa:b4:1a:
f3:ee:ca:67:87:7f:d5:e0:e8:f0:b4:3f:9c:f0:26:
13:c2:bc:df:f8:53:0d:15:8d:fd:06:80:53:71:84:
ae:96:bf:3b:44:00:42:48:e1:ee:71:57:10:df:a6:
44:33:d5:d5:77:f3:95:5d:9f:47:0f:59:fb:40:52:
38:00:e3:de:49:b1:1f:2c:38:e4:f2:4e:46:01:19:
8e:d8:80:3d:71:75:38:c6:1e:6e:66:28:55:4d:80:
36:7b:31:56:a5:10:87:7b:8d:b4:88:95:14:b9:40:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:BC:BE:A6:21:45:B9:C8:80:2A:4A:BE:58:47:27:7C:77:8C:4D
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CHO8vqYhRbnIgCpKvlhHJ3x3jE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.151.250.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:a2:ee:c7:d4:94:97:7a:13:9d:4f:a7:f0:71:4a:84:49:e6:
4d:c1:4a:d8:e0:e7:9b:8f:36:f3:af:c1:80:8c:dc:c9:f1:78:
01:2f:76:9e:6a:52:87:3f:40:2a:fe:df:e2:bb:43:b1:88:f8:
00:28:02:00:16:5c:6c:e9:a5:42:49:92:98:0f:f6:54:97:57:
3c:da:b0:18:97:c4:0d:b2:bd:e9:70:8a:65:e1:7e:8d:bd:45:
fb:fd:02:d7:82:f1:b5:eb:2c:94:64:d8:19:04:52:6e:72:25:
ee:dc:67:d0:aa:5a:c6:20:72:a0:df:a0:14:96:f0:49:fb:0d:
d9:8a:df:c4:54:43:5e:79:9e:14:31:55:88:eb:40:57:ac:1c:
39:40:ae:44:41:f8:38:98:5b:0f:6c:58:d5:dc:6d:7c:48:7b:
d2:3a:b3:40:49:66:69:56:f1:df:e7:46:09:aa:08:22:3b:6e:
e7:ce:c6:03:98:f4:5e:d0:5c:2c:36:cf:fc:f3:e4:c0:e4:d6:
fd:0e:f4:34:48:61:e2:c1:60:85:ac:37:0d:57:46:58:69:10:
8a:9b:68:fa:ec:d1:70:e3:fd:a9:e4:e0:d5:ff:ba:51:5b:1c:
66:09:6d:74:c1:09:c6:d1:e9:86:eb:fd:14:0d:c7:1a:c7:3b:
5b:0e:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 10:52:56 2024 by rpki-client on console-fra.rpki-client.org