Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cu93QrVQHJp6nS7_7hKmofp8G04.roa
File: Cu93QrVQHJp6nS7_7hKmofp8G04.roa (raw, json)
Hash identifier: KYI14WpPlnopkidM0+52P4NhFFI1t8JLev90KN6ye9Q=
Subject key identifier: 0A:EF:77:42:B5:50:1C:9A:7A:9D:2E:FF:EE:12:A6:A1:FA:7C:1B:4E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018DE6738C4BBE64E2155886CBDA3B2C2A8A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cu93QrVQHJp6nS7_7hKmofp8G04.roa
Signing time: Mon 26 Feb 2024 17:25:48 +0000
ROA not before: Mon 26 Feb 2024 17:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215442
IP address blocks: 194.76.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:73:8c:4b:be:64:e2:15:58:86:cb:da:3b:2c:2a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 26 17:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aef7742b5501c9a7a9d2effee12a6a1fa7c1b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:7a:23:0d:20:93:49:aa:b5:8a:95:cd:98:
eb:10:f7:76:6f:38:e4:c1:43:6b:7b:fd:9b:7a:ac:
dc:c2:aa:34:9a:2a:24:6b:d3:84:8e:12:9d:8d:f6:
19:62:94:e4:d6:3c:b0:52:9b:79:1e:1b:bb:d2:53:
8b:d0:bf:aa:a7:a8:df:87:d5:37:7a:a6:fc:0a:eb:
bf:52:a7:13:ed:ae:4c:9c:3a:ec:8d:c9:89:6b:66:
e3:50:94:fc:c2:56:da:ee:58:f4:eb:4d:39:9e:5d:
24:e0:5f:de:61:9d:f9:0a:89:67:75:80:5e:85:64:
af:90:26:58:37:65:42:d2:f4:2c:5d:14:ef:9c:21:
22:33:ae:e7:ad:7a:de:d8:fb:03:95:13:24:4a:6a:
da:81:5d:e1:63:d1:8b:77:48:17:97:48:14:b7:ce:
39:8a:b4:7c:6b:ee:07:b3:54:6f:15:20:14:f4:09:
9e:bb:25:51:b1:81:0e:76:68:c6:91:22:fe:2a:15:
26:51:dd:03:08:68:7f:e8:d7:4e:9c:42:2f:82:54:
87:df:61:39:3d:7a:8c:c1:78:2e:29:4d:f9:08:74:
f6:3e:b3:61:59:72:80:84:c9:f4:d1:a5:90:7f:0a:
fd:1c:20:35:1d:82:ac:ef:de:e0:5b:14:0b:21:1a:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EF:77:42:B5:50:1C:9A:7A:9D:2E:FF:EE:12:A6:A1:FA:7C:1B:4E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Cu93QrVQHJp6nS7_7hKmofp8G04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.134.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a1:48:72:56:27:63:0d:c1:7c:5d:11:49:83:19:dd:dc:fb:
8b:b1:de:bb:76:ea:82:b2:2e:99:f9:11:03:ab:7a:31:f6:40:
82:6d:13:e7:ce:af:4c:01:0a:53:6f:93:f9:bd:0b:bd:b4:6a:
00:a0:97:cd:c6:fc:90:d6:91:26:79:02:a0:e1:3c:87:26:75:
7a:53:a8:0b:09:5e:f7:08:5f:0e:73:2b:d1:af:89:5d:e0:e6:
54:13:fc:43:7a:c7:fb:61:30:ca:4c:d0:ab:83:0e:ff:19:7e:
4b:bf:2e:52:b2:ac:78:46:5b:df:96:ae:3e:85:51:5e:02:fd:
25:55:d5:c6:9d:e3:ac:b3:da:42:97:f5:ba:fb:f9:29:42:80:
f2:bb:27:e9:9b:12:aa:f8:f6:49:7e:90:7d:59:78:ae:d3:20:
74:09:57:17:6c:03:cf:7c:74:e7:66:69:91:37:69:9a:0d:02:
4e:03:11:10:55:00:a9:dd:e2:2f:0f:4c:d6:e3:58:13:98:34:
2f:a6:7f:02:43:88:88:49:30:42:af:bb:3d:15:9c:97:f4:cf:
89:60:9b:a6:73:c9:b1:c3:08:12:17:71:87:f7:37:c7:d6:89:
fc:ae:71:c3:f7:47:4a:6d:ad:e3:6d:8b:eb:de:9b:08:dc:f3:
79:6d:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org