Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/vMlav8-kMk_WskNEWudE9YmxV-0.roa
File: vMlav8-kMk_WskNEWudE9YmxV-0.roa (raw, json)
Hash identifier: 2ac9bzl44U8yDQK3JzdQEI0mwZd9xK+j0BgpcysGPMc=
Subject key identifier: BC:C9:5A:BF:CF:A4:32:4F:D6:B2:43:44:5A:E7:44:F5:89:B1:57:ED
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 018CC5DBF5F8519F726EAD5031EE5C03ACB8
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/vMlav8-kMk_WskNEWudE9YmxV-0.roa
Signing time: Mon 01 Jan 2024 16:29:36 +0000
ROA not before: Mon 01 Jan 2024 16:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43341
IP address blocks: 194.113.144.0/22 maxlen: 22
2a07:e300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f5:f8:51:9f:72:6e:ad:50:31:ee:5c:03:ac:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcc95abfcfa4324fd6b243445ae744f589b157ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:84:e6:a7:69:d6:8a:b8:71:f7:f3:94:ab:
48:93:27:9d:53:fd:f9:14:5f:54:e0:bf:cf:99:1f:
0d:de:a3:28:0d:1c:fd:cf:dd:0a:6c:55:10:4a:0c:
7a:ba:38:1e:6c:66:b0:de:1a:6d:8b:65:4c:9f:63:
b9:34:df:b9:4c:f7:e3:0a:5e:90:6c:9d:5f:1e:d3:
d5:10:e9:26:41:02:fc:cf:7e:57:63:ec:1f:a6:79:
49:69:38:99:d1:06:f8:54:aa:a9:d7:b0:3f:07:65:
9a:5d:ef:91:18:8c:a3:74:8b:48:ab:f2:8d:73:d1:
c2:a4:24:4d:7b:d9:92:3b:be:9f:b0:ae:5b:e1:20:
76:0e:05:51:6a:08:4e:29:8b:da:8a:88:93:c9:f5:
a3:ed:19:92:f9:cd:d6:fb:4f:45:2d:92:bf:f1:c0:
34:2a:bf:fe:32:72:50:20:5d:4e:59:80:84:ed:e8:
20:e5:2d:45:97:4a:6f:06:df:ee:d8:40:a9:fc:69:
b0:0d:0c:2c:08:44:50:2a:da:19:d2:d5:1c:16:2e:
7c:ba:01:8e:cc:5f:13:25:b3:be:41:59:33:b5:a0:
18:07:ff:80:fc:2c:f2:51:42:ca:b5:38:6a:b4:67:
b5:ed:0f:8e:2d:1e:a6:f0:5e:e4:99:84:bf:6b:dc:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C9:5A:BF:CF:A4:32:4F:D6:B2:43:44:5A:E7:44:F5:89:B1:57:ED
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/vMlav8-kMk_WskNEWudE9YmxV-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.144.0/22
IPv6:
2a07:e300::/29
Signature Algorithm: sha256WithRSAEncryption
6a:6b:5b:9d:e5:75:28:9c:6a:90:f2:d9:28:71:c4:91:ce:ba:
73:7a:4e:db:12:be:b9:39:85:a6:0e:84:25:44:d4:32:18:b6:
5e:8c:eb:3e:9e:0f:8b:9d:b5:58:40:be:88:af:a5:73:8f:86:
8f:ec:52:44:fa:39:7a:2f:b2:05:6e:37:e3:8a:d8:25:80:f8:
8e:ab:84:45:2c:ac:7f:c1:7c:6f:ed:64:09:91:9b:8b:16:cc:
68:f7:23:22:2d:11:e4:c4:6c:c9:75:ad:c8:63:f7:5d:0c:68:
f2:bf:dd:13:f4:12:c3:05:ec:b7:76:54:2a:0c:93:4c:2e:e5:
1b:02:e7:c5:56:e3:77:8e:3b:f1:2d:4d:ba:1e:71:52:13:e2:
46:9f:49:87:ce:b9:c6:a3:6a:63:06:f5:d4:b1:59:9c:fe:61:
f1:d0:1d:90:f7:ef:1c:44:74:32:bb:f9:27:3c:f8:fb:5e:d9:
97:98:5c:56:07:9c:83:37:ea:54:6c:f2:4e:06:53:d3:13:b1:
a6:01:95:36:3e:7b:9f:6d:7e:9f:31:be:a2:5d:c7:af:8e:1a:
69:41:49:b1:44:56:91:20:0d:4f:a4:9a:76:fa:db:25:85:e8:
c4:0e:33:1b:ba:6d:5a:75:d1:b8:64:ff:1a:c5:66:5a:b5:a1:
3b:08:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:52 2024 by rpki-client on console-fra.rpki-client.org