Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/69-DlOUeUpSuXeMAL7IPUGlf4ZU.roa
File: 69-DlOUeUpSuXeMAL7IPUGlf4ZU.roa (raw, json)
Hash identifier: KGR/UyF2Me9TtPSiicq31mvVSSPRWpOyvOvJ63tIprY=
Subject key identifier: EB:DF:83:94:E5:1E:52:94:AE:5D:E3:00:2F:B2:0F:50:69:5F:E1:95
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 018CC2DB229D5A49C92A19558C00C2D146ED
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/69-DlOUeUpSuXeMAL7IPUGlf4ZU.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35467
IP address blocks: 194.53.216.0/21 maxlen: 21
194.53.222.0/24 maxlen: 24
194.53.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:22:9d:5a:49:c9:2a:19:55:8c:00:c2:d1:46:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebdf8394e51e5294ae5de3002fb20f50695fe195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:94:20:8e:a6:62:7b:bd:2e:4f:cc:91:0f:b6:
43:71:79:69:69:b4:f4:8a:49:d7:11:5c:33:2c:20:
b6:88:01:89:36:81:f2:ec:d7:6a:88:dd:7b:cd:1a:
bd:6e:4e:f0:e1:6f:0b:69:54:56:6e:3e:04:17:a5:
00:8e:bf:7f:4e:36:90:ab:e5:9e:60:58:2d:ef:97:
8d:96:ce:87:c8:e1:9f:f5:72:f0:2c:b9:e7:61:96:
c5:6e:79:b0:e2:64:61:b4:28:20:e9:de:95:85:e6:
5c:fd:c8:2c:6c:99:95:c4:39:a0:33:dc:b6:32:9d:
66:06:6a:4e:06:88:f4:75:27:ed:20:3a:2f:10:5f:
2b:68:4f:9b:d5:2b:b1:4f:38:37:7e:c1:c9:6d:eb:
4b:11:69:ce:53:10:c6:89:1d:c8:d7:89:1d:4b:31:
12:af:01:85:a1:44:09:6d:eb:32:78:cc:b6:96:76:
5c:8f:25:44:63:56:3d:8f:45:0c:c4:e8:38:0b:59:
4b:9c:1f:18:95:16:6b:50:b3:66:86:b7:88:4e:e6:
a4:df:c5:69:d0:d2:2d:68:ab:56:95:ce:eb:52:cf:
bd:9d:89:e7:c5:f7:d4:2b:ae:c7:af:bb:dd:90:0a:
2d:30:46:ce:09:22:84:4d:9e:73:a2:21:1b:06:01:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DF:83:94:E5:1E:52:94:AE:5D:E3:00:2F:B2:0F:50:69:5F:E1:95
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/69-DlOUeUpSuXeMAL7IPUGlf4ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.216.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:2f:4e:b6:88:02:78:85:a7:45:63:61:70:b7:c3:27:6e:e0:
cc:10:b3:e3:38:5a:54:59:e4:5f:29:9c:35:e5:e3:f9:29:4d:
18:bc:31:40:18:d1:65:a6:f3:d6:79:68:b2:64:d8:da:9a:a3:
bf:d1:5f:73:ba:ba:c3:67:55:86:d0:48:c4:70:d4:70:db:24:
66:75:91:2a:88:55:4f:85:57:9e:6c:01:c5:8f:4f:57:87:36:
bf:46:c5:0e:71:28:8d:f2:da:a6:5b:2b:d8:33:34:b4:56:ee:
8d:57:d9:61:c0:55:39:a5:0f:75:55:de:67:1e:ea:58:f4:92:
3f:8a:57:e9:73:75:6b:53:5c:ed:26:6c:bd:39:2b:cb:7b:8a:
bb:98:ea:62:1f:fd:da:6e:36:90:59:54:78:d3:e7:eb:3f:4a:
2e:af:20:a3:b2:7e:5d:be:a7:57:96:88:8d:ba:71:80:38:3d:
07:27:38:da:09:34:d1:7f:a6:f5:ed:35:35:04:76:cd:ce:a9:
36:b3:c2:40:79:04:aa:ea:43:9d:e6:69:78:52:cf:e4:4a:d8:
f9:8d:f1:c6:6e:50:76:b8:d5:66:fb:19:c8:68:02:ff:e9:01:
89:14:50:66:dd:56:73:1a:0f:a8:f8:ad:ea:7b:53:6e:15:c2:
f7:ea:3a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:24:05 2024 by rpki-client on console-ams.rpki-client.org