Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/apIvXAgWz9cPIDWtS0ugpeheFMk.roa
File: apIvXAgWz9cPIDWtS0ugpeheFMk.roa (raw, json)
Hash identifier: fe2KN+DU1lVwtxb1MVjFjeuBjTCImSwWOQ5w6aE9YQY=
Subject key identifier: 6A:92:2F:5C:08:16:CF:D7:0F:20:35:AD:4B:4B:A0:A5:E8:5E:14:C9
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 018CC7957035E8D5E7236DC2330F3A9DB441
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/apIvXAgWz9cPIDWtS0ugpeheFMk.roa
Signing time: Tue 02 Jan 2024 00:31:48 +0000
ROA not before: Tue 02 Jan 2024 00:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 213.232.235.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:70:35:e8:d5:e7:23:6d:c2:33:0f:3a:9d:b4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Jan 2 00:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a922f5c0816cfd70f2035ad4b4ba0a5e85e14c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:1b:7b:30:76:bb:9b:36:48:b2:f6:28:3e:
da:67:ea:c8:68:1e:d7:b6:bf:a8:ea:59:50:99:c5:
5f:53:1e:3c:c5:b6:9e:41:89:61:eb:d3:79:80:65:
86:19:eb:a2:5e:18:64:40:e2:6c:16:23:2b:8f:57:
22:88:ce:9c:57:48:07:02:d0:cd:42:bf:80:82:71:
e1:42:24:7a:64:62:55:69:ed:4c:1a:12:41:91:01:
ea:ca:a5:d2:62:58:b5:03:76:66:1e:f9:10:d4:b8:
11:97:26:cd:28:7b:84:af:e4:e1:18:42:26:86:0a:
f1:2a:2f:45:f6:ef:45:38:4c:eb:e5:c3:f4:00:f8:
ea:2c:6a:cf:62:bb:c6:68:6e:75:35:fd:fa:1d:9f:
e7:b3:2e:b4:76:48:86:77:79:ae:eb:21:0a:60:6d:
0b:b9:76:ea:a3:ed:2b:06:73:0d:7f:ce:35:6e:55:
14:a1:f0:24:c8:50:9f:ed:6b:b8:3f:ac:42:4f:fe:
87:bd:80:8f:da:25:c1:e4:5a:f5:45:c4:22:4b:62:
3b:bd:be:ae:b2:ee:49:a6:07:7d:8e:af:f4:7c:26:
32:67:e8:b4:23:e4:46:e9:4b:dd:2b:03:43:f8:f9:
8b:67:56:a9:a2:b8:a7:76:99:08:6b:74:50:60:f1:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:92:2F:5C:08:16:CF:D7:0F:20:35:AD:4B:4B:A0:A5:E8:5E:14:C9
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/apIvXAgWz9cPIDWtS0ugpeheFMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.188.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fc:fc:2a:b3:f4:64:f7:d2:5b:c2:25:35:3a:e2:e0:4e:3b:
a1:18:a8:cc:cf:60:47:f6:4a:e3:1d:de:9b:e9:5d:2e:ba:03:
1b:0e:dc:5c:9a:53:10:51:ee:be:44:05:9d:09:af:5a:bd:d3:
b3:6c:fb:fa:0f:21:82:6d:c2:b0:64:76:ef:0e:a8:73:f3:51:
c7:1c:55:92:4f:32:35:36:cc:40:40:78:9d:e6:a9:ab:30:29:
c4:29:ea:e8:23:08:6d:51:5a:fb:a8:7b:2b:86:75:8f:26:35:
38:4d:95:ba:3b:ad:6e:7f:30:0e:cb:a3:d2:fb:43:df:8b:ef:
59:5f:ce:98:20:cf:3b:37:2f:ac:ca:c9:a1:17:ca:0c:4f:0c:
fc:0c:5b:f6:0f:71:bc:42:70:1c:c3:8c:ac:83:da:3a:d8:e4:
93:38:c2:99:38:74:f9:04:98:0f:bb:cf:8b:84:cc:6b:f9:eb:
cc:ba:e1:80:aa:0d:b1:1d:89:f0:a8:93:22:5b:cb:f8:db:8d:
19:b1:67:c8:f6:53:1c:5d:f9:b0:ac:e5:e4:51:43:60:10:4c:
f6:d7:91:c7:d5:85:bd:f7:df:9b:0d:3e:b0:89:96:3c:19:62:
6a:4e:31:9b:b0:3a:db:5a:22:fd:7d:99:60:24:33:d9:83:52:
29:c9:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 13:27:10 2024 by rpki-client on console-ams.rpki-client.org