Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/cohRdPo_vtesZ16U4I4m8YBEaHk.roa
File: cohRdPo_vtesZ16U4I4m8YBEaHk.roa (raw, json)
Hash identifier: 5t5XuLa89TOi9q6SOyDiirkOMkQHd2MHTq3HNRsFCWA=
Subject key identifier: 72:88:51:74:FA:3F:BE:D7:AC:67:5E:94:E0:8E:26:F1:80:44:68:79
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 018CC9BCE86A9F90097E9DE131B9700ACD33
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/cohRdPo_vtesZ16U4I4m8YBEaHk.roa
Signing time: Tue 02 Jan 2024 10:34:09 +0000
ROA not before: Tue 02 Jan 2024 10:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50194
IP address blocks: 193.104.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e8:6a:9f:90:09:7e:9d:e1:31:b9:70:0a:cd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Jan 2 10:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72885174fa3fbed7ac675e94e08e26f180446879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:d9:47:c3:f0:b4:12:1c:07:50:74:33:6c:
d2:9b:0e:42:b0:dd:f3:ea:7f:e5:50:9f:e6:d2:ca:
3f:a8:91:87:fb:4b:ee:4b:ff:f0:c1:aa:55:cf:7f:
2f:63:e5:49:ed:88:2d:ee:d4:4a:e8:72:d3:b0:47:
32:54:6a:9c:fe:82:00:09:f1:83:ec:99:bd:a2:60:
da:f8:a4:6f:e6:38:df:2e:cf:76:3b:1e:ee:52:1e:
f0:35:24:5b:82:77:84:a3:67:23:15:e1:f9:42:b5:
ff:5a:40:0d:eb:c3:31:79:4c:4a:64:6f:70:de:b6:
7c:64:48:ff:e0:51:55:5d:c3:a5:a8:81:34:e0:a3:
e9:46:0d:5f:d6:b7:96:95:01:f6:00:dd:90:82:f3:
e0:40:5f:8f:b1:2a:9e:1f:f6:45:e1:64:1a:fa:ba:
e9:3e:bc:9b:c6:d5:e8:fb:ba:2c:df:2f:fe:d2:b9:
7e:51:02:6e:a2:1c:02:b4:f2:5b:71:7b:49:b0:d7:
a8:54:06:7b:93:a1:f9:64:47:f9:4c:fe:b6:c7:06:
93:a1:b6:ca:56:f8:61:bc:e6:73:d6:59:da:40:14:
14:04:b5:ec:f2:69:67:76:65:99:fa:4b:5f:28:8e:
05:cd:0e:dd:42:62:c1:3e:11:3b:89:9a:22:1c:c5:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:51:74:FA:3F:BE:D7:AC:67:5E:94:E0:8E:26:F1:80:44:68:79
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/cohRdPo_vtesZ16U4I4m8YBEaHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.165.0/24
Signature Algorithm: sha256WithRSAEncryption
84:24:b5:b1:3d:8c:b9:fa:4c:c5:41:e4:88:a7:24:5c:9b:95:
ee:e8:29:3d:b6:86:b4:fc:14:9c:4a:4b:fb:aa:89:bf:5c:2f:
14:c0:fa:a8:3b:e3:3f:f9:6d:6d:4b:84:65:b9:e4:5f:99:ed:
33:ca:53:b8:7d:cc:aa:26:76:20:40:bd:c9:a1:e5:db:c1:23:
27:27:d2:56:9c:67:5f:f0:ca:e9:ff:41:6f:35:a6:0e:be:a1:
68:c6:31:a3:61:41:48:27:20:47:3a:8b:2d:79:21:c3:22:c5:
ec:d7:dd:a9:f7:82:b8:e8:14:a7:35:ae:e1:01:b2:9c:7c:30:
80:7c:f7:1b:88:b1:95:84:b4:a1:bf:12:4f:f6:a7:09:d8:3f:
9c:bf:0a:b5:6e:58:46:c6:f7:b3:99:80:cc:64:88:16:07:4f:
9a:e5:f7:60:38:89:af:12:38:07:9b:18:ad:88:76:36:60:c1:
95:dc:14:0b:8f:b8:55:33:22:f3:bc:fb:aa:c1:1f:78:ba:95:
fb:1d:9a:f6:7a:e4:f6:a4:b5:55:fd:7f:66:ea:4c:25:21:aa:
bb:ee:08:e1:36:48:f4:c7:9e:4f:df:46:8b:3b:79:7b:f6:9c:
cb:db:75:80:3f:77:6f:d5:9b:64:2d:c1:ec:cd:b7:26:d8:d0:
fd:63:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:01:26 2024 by rpki-client on console-fra.rpki-client.org