Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/4IksMn1VNkjLPKwVzdb8P1eAcwU.roa
File: 4IksMn1VNkjLPKwVzdb8P1eAcwU.roa (raw, json)
Hash identifier: veoZaZVXEmzQBZQ/BDY+lEkyQJqK+Ml4l8NL5b7jVjY=
Subject key identifier: E0:89:2C:32:7D:55:36:48:CB:3C:AC:15:CD:D6:FC:3F:57:80:73:05
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 018CC8DEEAFBF5CF36CC7EAD1CC9C7C46F88
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/4IksMn1VNkjLPKwVzdb8P1eAcwU.roa
Signing time: Tue 02 Jan 2024 06:31:41 +0000
ROA not before: Tue 02 Jan 2024 06:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50956
IP address blocks: 194.28.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ea:fb:f5:cf:36:cc:7e:ad:1c:c9:c7:c4:6f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 06:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0892c327d553648cb3cac15cdd6fc3f57807305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:c8:4c:9c:b3:e4:88:b4:63:01:1c:25:fb:
ea:7d:2c:29:0e:1c:7f:86:c2:09:3e:7d:91:50:83:
cb:54:8d:fd:c5:91:14:c5:4e:8e:78:a2:19:6b:8a:
ba:b2:a5:07:08:4c:e4:ff:a6:c1:0b:27:cc:25:5f:
c8:c3:a8:d3:81:73:82:2d:b6:9b:dc:27:4a:0f:93:
24:d4:e3:2e:bf:f1:2f:15:27:3b:89:f0:82:f6:03:
6e:8f:31:a4:88:c1:2f:b4:b5:d6:ac:f8:27:5e:39:
7f:80:ca:dc:17:23:d3:be:cd:02:e4:64:5a:21:b0:
c4:9b:8b:42:6f:e8:9e:1c:08:e5:29:28:49:8b:56:
b8:f5:5a:49:33:3e:66:94:3c:fa:7e:ab:bc:64:87:
1e:4b:09:90:c8:8d:63:b2:bb:29:66:65:fb:48:0a:
d5:8e:53:13:3e:d5:f0:a7:23:6e:b6:8a:6e:ce:cf:
df:f5:81:eb:4b:8e:48:67:35:88:d8:95:a3:23:84:
3f:88:35:21:9b:a1:fa:03:02:0f:93:ec:55:7c:a2:
f9:b3:95:a0:a0:d1:a8:ef:63:01:19:06:ac:ed:ec:
70:03:ca:82:13:27:a2:68:9e:3a:0f:22:c4:32:5f:
39:be:b6:3c:20:ca:e4:01:fa:03:a3:c9:55:e3:8c:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:89:2C:32:7D:55:36:48:CB:3C:AC:15:CD:D6:FC:3F:57:80:73:05
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/4IksMn1VNkjLPKwVzdb8P1eAcwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.103.0/24
Signature Algorithm: sha256WithRSAEncryption
21:68:87:2b:68:b2:37:c1:5e:13:43:56:15:b7:92:a3:68:d1:
12:ee:1b:dd:06:12:20:8e:e8:2d:b3:f2:3d:ef:bc:e8:57:ab:
58:9c:d2:9d:00:dc:f6:54:1d:4a:91:d5:40:4c:c7:6b:d2:5f:
5a:85:e9:cb:ec:99:fb:e2:fe:ae:f4:c5:26:e1:e1:d5:7b:16:
f6:a1:3d:d8:e0:c6:8d:20:5e:2f:38:42:0f:6c:e8:49:6a:15:
cb:53:18:70:6e:6c:fb:a5:6d:b3:8c:f6:0e:dd:f9:7c:d4:42:
d2:19:89:94:80:d3:44:b8:15:90:31:db:50:5c:3d:3e:38:93:
86:8c:e5:34:0f:3b:17:29:8f:0c:10:a9:23:cf:7d:fe:0a:27:
d1:2e:f3:43:aa:aa:2d:d9:0a:1a:2e:3c:90:48:35:44:2a:c4:
b3:12:7e:3c:70:81:ee:49:34:5e:1f:b7:71:5e:94:a4:40:85:
b0:3f:d6:93:02:d7:bc:ff:60:c4:7f:a4:4a:de:7f:eb:29:04:
c7:04:3b:d9:a8:1f:e2:10:7d:5a:de:36:91:2b:52:26:e7:4c:
55:7e:3e:31:02:ee:c1:ba:cf:6d:1a:2d:f0:6d:31:aa:d2:fb:
02:f0:f4:bc:ef:ca:4e:89:3e:3d:c4:99:3c:da:35:d8:c4:b7:
df:89:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:08:33 2024 by rpki-client on console-fra.rpki-client.org