Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/Ah2AXUSFNQ_y4wEaJQnNX9RpcWI.roa
File: Ah2AXUSFNQ_y4wEaJQnNX9RpcWI.roa (raw, json)
Hash identifier: zNSw1pUFTi5/dMmRcfTNTOW5lnj/kwxi3Dl0Vxlfc8I=
Subject key identifier: 02:1D:80:5D:44:85:35:0F:F2:E3:01:1A:25:09:CD:5F:D4:69:71:62
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 018CC94CAC8B96C16F9A6ABFA8959768783D
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/Ah2AXUSFNQ_y4wEaJQnNX9RpcWI.roa
Signing time: Tue 02 Jan 2024 08:31:34 +0000
ROA not before: Tue 02 Jan 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 193.25.32.0/20 maxlen: 20
192.108.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ac:8b:96:c1:6f:9a:6a:bf:a8:95:97:68:78:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Jan 2 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=021d805d4485350ff2e3011a2509cd5fd4697162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:1d:03:7a:cf:c3:54:7c:2b:5e:6d:24:0c:
ca:28:69:dc:c0:4e:27:8d:7b:98:04:7c:8e:68:2f:
a6:32:2a:7b:df:aa:f7:f4:ea:9d:fd:97:0e:b9:86:
c7:05:d1:b7:91:79:35:ca:bb:b8:be:a1:61:59:dd:
65:f8:4c:78:6d:36:10:40:1c:c7:62:20:e6:9f:c9:
45:c8:b8:22:fc:34:f1:60:66:92:0d:71:bf:ce:f0:
13:c9:3b:2f:f9:64:d1:ba:70:dc:41:bb:19:30:b5:
50:a4:cd:35:59:8c:4f:39:da:3b:3c:df:24:f6:24:
4a:cc:f6:a6:d0:e6:5a:c1:19:29:5d:9d:c0:96:ab:
d8:f1:66:2f:05:7d:87:b0:78:05:da:3c:e8:e1:13:
0d:91:87:39:65:26:2b:ea:4f:1c:6e:3b:31:e0:4b:
0a:97:30:b5:01:63:3b:00:8f:4a:3b:9d:14:ee:df:
23:7a:24:32:c8:d6:fc:25:0a:77:07:27:18:c7:37:
b7:2f:33:36:70:ae:9a:7c:63:41:d3:c7:37:9c:07:
dd:30:79:59:03:75:3c:7f:28:3e:79:59:2f:ae:3f:
8d:1b:b3:98:93:66:49:50:1b:54:e9:2a:b0:98:c6:
86:5f:46:1f:cf:0d:6f:8a:47:c0:b3:30:e4:84:30:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1D:80:5D:44:85:35:0F:F2:E3:01:1A:25:09:CD:5F:D4:69:71:62
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/Ah2AXUSFNQ_y4wEaJQnNX9RpcWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.32.0/24
193.25.32.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:29:20:5c:38:bc:e7:56:73:c3:dc:f5:10:6a:20:ef:5d:31:
86:c9:29:a7:5a:c1:78:3b:ef:d3:6d:f8:93:31:39:21:eb:7e:
45:55:c1:aa:9a:47:2d:86:0d:7c:ac:0e:15:e5:b8:06:66:10:
c1:24:88:5d:a7:e9:d6:b0:03:1b:7d:64:a9:bb:c7:74:88:9d:
e6:ce:95:3e:54:62:7d:0a:64:f0:89:dc:e3:89:4f:0f:a1:48:
3f:9f:60:3e:8a:b1:cf:f4:f2:a1:c3:1a:f5:70:20:5b:a4:70:
27:da:04:35:5c:79:11:38:b3:eb:83:63:af:ab:3d:1a:ae:7d:
90:80:7e:37:f9:b0:20:9d:9c:09:2f:93:2c:91:73:04:3c:f4:
f0:ba:84:20:e4:e7:e0:3a:ab:01:23:8b:ac:dc:4d:a7:9e:f4:
01:5f:e2:90:51:86:e0:65:77:c8:85:95:54:04:ae:48:37:42:
bf:c0:4b:25:70:fa:d9:d0:0a:48:82:75:9b:d9:3f:74:74:6f:
d4:28:cd:5b:b0:1e:8d:d1:9e:f0:e8:ed:5a:dc:04:54:5b:44:
d9:38:e6:e4:3c:a8:62:84:fa:7f:c2:25:c5:b5:18:7b:e0:74:
13:e1:97:7e:70:07:78:d5:ad:8b:a9:1b:d7:41:3a:0b:e1:17:
88:c7:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:59:25 2024 by rpki-client on console-ams.rpki-client.org