Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/m2O1Xwmul0GyW-biXWtqlz-1nGA.roa
File: m2O1Xwmul0GyW-biXWtqlz-1nGA.roa (raw, json)
Hash identifier: /Jgjivo4GyrZtjeuItEahhc29qWrxKRBM1PGo2dv0hQ=
Subject key identifier: 9B:63:B5:5F:09:AE:97:41:B2:5B:E6:E2:5D:6B:6A:97:3F:B5:9C:60
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 018CC8030C4AA27A0FBDE58DFAAA4A74DEFC
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/m2O1Xwmul0GyW-biXWtqlz-1nGA.roa
Signing time: Tue 02 Jan 2024 02:31:32 +0000
ROA not before: Tue 02 Jan 2024 02:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29561
IP address blocks: 194.146.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:0c:4a:a2:7a:0f:bd:e5:8d:fa:aa:4a:74:de:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Jan 2 02:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b63b55f09ae9741b25be6e25d6b6a973fb59c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:1b:38:a7:4c:74:50:8a:b3:8c:84:27:b8:
16:30:b4:33:c2:07:d7:dd:97:db:59:36:81:85:be:
67:4f:c0:ec:ef:4e:fa:bb:c4:70:41:96:25:a1:41:
26:a2:e8:80:86:c0:55:52:7f:e1:c7:1b:b2:c4:e4:
72:06:68:1e:31:79:3c:78:ef:e6:b6:cb:43:9f:7b:
92:33:a0:e4:ef:a9:0d:94:7b:ac:9c:10:3a:7c:70:
fa:c0:63:47:a9:14:0c:2e:c1:00:14:de:3a:b7:f2:
33:60:81:20:a3:77:34:d2:54:ce:d9:4b:8c:80:bb:
d7:b0:7e:21:12:2a:b9:fa:cc:1a:04:2a:13:3a:ce:
af:3d:1d:45:ca:45:f2:70:56:7d:28:73:84:63:8a:
fc:60:97:e7:ec:58:d2:9f:56:3e:9e:b9:9e:98:e7:
b1:60:61:ab:e9:ec:eb:cf:18:6e:cc:ba:ab:f3:67:
e9:85:a5:97:a2:61:4f:86:83:3f:9a:18:f0:a2:61:
24:37:65:f2:11:dc:40:2d:50:0a:c9:bc:71:04:c1:
78:fa:d1:c8:ba:c9:07:07:6d:8f:29:65:2f:9a:1e:
27:a4:ab:18:fa:a8:cd:2e:b8:da:16:12:f5:0f:cd:
08:12:ef:5f:ce:5f:bc:60:5e:f9:7e:fd:8d:b0:a7:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:B5:5F:09:AE:97:41:B2:5B:E6:E2:5D:6B:6A:97:3F:B5:9C:60
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/m2O1Xwmul0GyW-biXWtqlz-1nGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.119.0/24
Signature Algorithm: sha256WithRSAEncryption
26:03:88:94:3e:ac:b5:f6:f5:b9:25:7c:9e:42:c1:e9:66:27:
16:74:54:0f:0d:04:0d:49:7f:32:92:35:df:61:a4:38:86:d5:
a2:b9:a1:0b:ad:7a:69:1a:da:62:0c:af:c0:7f:79:07:ed:fb:
03:8f:1e:40:bb:95:3d:83:e6:4c:93:ca:97:28:77:1f:dc:36:
cc:58:e3:cb:f0:3e:fd:37:e9:e5:64:86:c7:83:a1:f6:32:50:
ff:e6:df:8e:a2:b7:ad:c8:d0:e4:b1:80:72:c3:8e:3b:a3:bc:
6d:98:5c:18:67:fd:ef:3d:67:5b:16:5f:f9:57:e6:5e:8a:30:
62:31:88:92:99:dc:63:59:55:32:fc:e9:5b:11:db:8f:34:a8:
43:99:cc:8a:9b:aa:4c:c1:74:85:a5:c4:3a:8b:81:90:c3:ab:
b1:b7:f8:66:0f:54:6c:0d:07:4e:e9:4a:95:42:45:c3:f8:4a:
a4:66:85:cf:52:b7:29:0c:6d:e3:59:16:79:aa:90:4c:49:40:
a9:e0:b2:74:5a:e0:27:3c:8c:31:90:55:16:b0:b4:78:38:33:
5b:5d:8d:7f:d3:8d:14:d4:67:72:d9:67:8d:7b:e2:05:58:1a:
c2:dc:a9:e8:8d:94:21:ec:61:09:cd:c8:07:11:c4:9f:db:e0:
c8:fa:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:55:26 2024 by rpki-client on console-ams.rpki-client.org