Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Aaghl62jelr_lHjR5ekV5rraIOo.roa
File: Aaghl62jelr_lHjR5ekV5rraIOo.roa (raw, json)
Hash identifier: LfgUEMTEP3DKw9WxGTfhOYUdEPdmHcm6obOQ08qcwFA=
Subject key identifier: 01:A8:21:97:AD:A3:7A:5A:FF:94:78:D1:E5:E9:15:E6:BA:DA:20:EA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010C4F41EA8BC81C608A0954DE3C50
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Aaghl62jelr_lHjR5ekV5rraIOo.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31034
IP address blocks: 194.242.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0c:4f:41:ea:8b:c8:1c:60:8a:09:54:de:3c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01a82197ada37a5aff9478d1e5e915e6bada20ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:ed:6a:b6:d1:01:72:96:6b:f4:00:24:65:
f3:12:41:d7:46:66:f2:64:6e:99:be:ea:d2:6e:d8:
dd:84:49:4d:17:8a:9f:48:93:d4:3e:ad:43:0b:b9:
38:3c:f2:70:bb:49:c0:5b:6c:49:af:84:1c:f5:91:
e6:2f:94:32:d3:35:3c:40:cb:cc:cb:7b:b9:98:a4:
87:20:e1:fc:35:f5:ea:4f:3e:a1:0f:4c:a1:c3:6b:
d3:26:08:92:fc:3c:b8:6a:6a:df:79:db:2c:ea:ca:
65:2e:74:05:39:4d:1f:45:be:cb:ed:cd:aa:a4:70:
e8:43:1f:45:42:e4:85:f4:a4:56:b3:df:ff:97:5e:
5b:88:9c:34:db:6d:ef:8d:89:a1:02:58:dc:fe:e1:
20:d9:d7:68:6e:6a:f8:95:56:a0:4f:86:3c:e7:b3:
5c:3f:24:81:e8:c9:9a:33:0a:46:94:37:ca:33:9f:
17:89:e9:f4:3e:66:d0:5b:a1:ef:90:6c:df:bf:52:
7e:d6:c0:0a:be:c7:4e:37:70:ba:b9:bf:23:10:cf:
a5:b9:00:34:86:9c:d4:07:b0:d4:62:ab:0a:ac:b0:
60:20:ef:28:46:ae:6f:db:53:f8:a8:63:c3:2a:36:
d1:ed:c2:3a:df:53:18:f9:83:ab:12:fa:5c:ed:96:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A8:21:97:AD:A3:7A:5A:FF:94:78:D1:E5:E9:15:E6:BA:DA:20:EA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Aaghl62jelr_lHjR5ekV5rraIOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:75:04:27:b6:27:85:9b:d9:cc:9c:a6:e8:f3:af:be:27:5f:
57:37:b3:d9:b0:19:9e:f1:53:b0:51:94:48:d8:03:3f:99:53:
ae:a8:7e:d7:64:0a:7c:36:68:ee:98:dc:88:a0:ee:e0:14:5b:
3c:a1:58:0e:c5:97:a2:aa:65:53:7d:4e:8a:7e:d9:40:4e:7f:
07:3c:5e:6e:00:ed:7e:ea:22:b3:11:3b:1c:02:5d:05:55:46:
e8:c5:47:b4:8b:9d:d8:ec:cb:bd:9d:46:ae:3f:f5:6e:d4:f6:
af:d3:7b:86:f2:39:8a:fd:00:e7:ce:a2:e2:1a:ee:13:20:cd:
d6:53:b1:c3:da:83:72:9f:20:d9:24:6d:2e:ed:28:71:3d:92:
0e:be:f4:5e:90:9e:df:5b:9c:96:e9:cd:6f:78:b2:f4:e0:08:
eb:d9:23:64:ac:f0:00:72:f5:e9:00:0d:6f:26:ae:fb:d4:8b:
31:02:7c:05:b7:8c:87:bb:03:b0:c6:6e:5a:4a:9a:bb:aa:48:
23:97:f4:50:93:5d:21:60:77:0c:11:52:04:16:8f:56:ac:8c:
79:00:b3:e4:da:cd:39:0e:8a:68:a4:ef:65:7f:cc:bb:10:41:
e1:6f:86:dc:08:fa:4a:76:49:37:fc:3d:a1:0d:6b:1d:2c:8d:
f4:14:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org