Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/rKaRhN9ohjpOogeh4iltkev-WEQ.roa
File: rKaRhN9ohjpOogeh4iltkev-WEQ.roa (raw, json)
Hash identifier: 0RYMDohMEdopYbQzjH8V+tjhTf4MZ9cyAkhMaYZM7K0=
Subject key identifier: AC:A6:91:84:DF:68:86:3A:4E:A2:07:A1:E2:29:6D:91:EB:FE:58:44
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 018CC34951961715B7411EBC0D814B3CBE34
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/rKaRhN9ohjpOogeh4iltkev-WEQ.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210788
IP address blocks: 193.41.47.0/24 maxlen: 24
193.41.82.0/24 maxlen: 24
2a0f:7ec0:100::/48 maxlen: 48
2a0f:7ec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:51:96:17:15:b7:41:1e:bc:0d:81:4b:3c:be:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aca69184df68863a4ea207a1e2296d91ebfe5844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:ee:4d:9f:70:ee:dd:25:f6:50:71:93:4d:
c6:ae:f0:dc:cd:9c:dd:07:a4:95:39:80:5c:63:5e:
f2:d8:ce:66:6a:e1:5c:24:5d:fe:5f:b9:73:07:df:
13:50:25:ad:5e:c4:51:22:1a:62:96:b4:03:0e:17:
ca:c6:bb:ac:ec:da:22:e8:34:13:86:cb:2d:ea:95:
c7:46:76:81:0b:43:04:98:59:48:00:ac:e8:57:31:
38:f6:f7:80:3e:6c:97:c7:bb:6c:1c:52:8b:8b:32:
3e:9c:21:34:60:a8:28:2e:01:1c:95:d9:57:fa:22:
90:01:5b:08:0a:ff:a3:b9:b6:77:5a:69:72:36:2a:
f2:ae:a8:a4:74:23:dd:eb:c9:27:2b:4a:a0:31:ac:
a1:be:45:18:b4:f6:f4:28:89:db:4f:ca:78:8f:b2:
3a:cf:a1:32:3e:c3:b8:da:b7:c5:7c:fb:b1:3b:3b:
8f:a9:13:b4:15:98:df:cc:91:af:dc:8a:e8:ec:ea:
81:b6:ea:5c:fc:c1:06:63:4c:72:eb:43:f3:26:8f:
09:59:62:e7:07:70:2e:a5:45:82:70:71:fa:13:c5:
26:af:8d:04:20:25:a8:d1:dd:79:fe:28:15:9d:69:
65:9d:a9:37:e7:a2:4f:01:ce:94:bc:98:06:04:53:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:91:84:DF:68:86:3A:4E:A2:07:A1:E2:29:6D:91:EB:FE:58:44
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/rKaRhN9ohjpOogeh4iltkev-WEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.47.0/24
193.41.82.0/24
IPv6:
2a0f:7ec0:1::/48
2a0f:7ec0:100::/48
Signature Algorithm: sha256WithRSAEncryption
ac:7c:7b:a7:5d:2e:a5:7f:34:93:00:e7:b2:6b:6e:8c:c2:d7:
66:97:b3:5d:69:3f:e2:e1:93:f7:24:dd:d8:49:49:63:3e:ef:
c2:b6:23:db:20:07:4a:36:47:61:4c:aa:51:b4:d4:d1:7d:a9:
42:21:10:6b:79:ae:72:ed:78:14:df:67:1e:81:f0:bb:3a:a2:
4f:2e:9d:fc:5b:34:15:39:6e:61:b6:4e:04:b9:f7:04:bf:6f:
84:f6:e1:95:4b:1a:bc:65:43:e5:e4:fb:82:ca:5b:e9:44:07:
4a:b2:30:f1:7a:b6:a6:1e:2a:44:75:d8:3e:33:cd:7b:7c:5b:
59:3d:f2:62:e9:31:89:a1:6f:55:d9:8d:74:ea:69:19:09:bb:
92:45:4a:7f:c5:db:9d:9b:69:c4:42:94:7c:4a:c5:7f:bb:4e:
ba:36:d1:91:67:42:71:59:37:2b:c2:21:bf:23:53:e8:db:18:
f5:98:fd:6c:a0:e7:64:63:a1:19:c8:57:24:90:46:c2:12:6e:
aa:0d:7a:66:6a:45:38:67:ae:f6:d7:6c:9a:bd:4b:30:98:b0:
40:57:c4:db:6a:ab:70:46:64:ca:b5:98:16:ca:2a:76:50:41:
a1:5c:e4:08:7d:0a:69:86:8e:e5:7d:36:11:e1:04:29:c0:aa:
b0:d6:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:26 2024 by rpki-client on console-ams.rpki-client.org