Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/1-t9Ky1EAz9uUOT6WokTwIqeu2w4.roa
File: 1-t9Ky1EAz9uUOT6WokTwIqeu2w4.roa (raw, json)
Hash identifier: MnhDxBkvqJrYgtmeTD2zJm5ieQBzY3Dlv/SqzG7B6IU=
Subject key identifier: FA:DF:4A:CB:51:00:CF:DB:94:39:3E:96:A2:44:F0:22:A7:AE:DB:0E
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 018E3DAD351AF44928CAAEAC33322482530E
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/1-t9Ky1EAz9uUOT6WokTwIqeu2w4.roa
Signing time: Thu 14 Mar 2024 15:55:45 +0000
ROA not before: Thu 14 Mar 2024 15:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12480
IP address blocks: 194.120.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:ad:35:1a:f4:49:28:ca:ae:ac:33:32:24:82:53:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Mar 14 15:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fadf4acb5100cfdb94393e96a244f022a7aedb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:22:56:ec:97:94:f7:3a:b8:48:b1:3b:36:
bb:66:97:a2:d2:5c:a9:91:d9:a9:fc:1c:1b:25:a5:
d1:2e:a4:5a:0e:c3:19:ac:ed:2f:be:0c:ad:33:04:
d0:87:2d:ad:19:a2:7a:0f:ef:29:4a:9f:98:5f:de:
b0:7b:cc:f9:58:8d:2d:ba:9e:dc:fc:16:f9:60:a1:
63:fd:16:9d:a5:f0:78:67:0f:9c:cf:1e:15:4b:24:
dc:0d:e8:1a:4a:17:67:39:42:53:41:18:bc:d8:84:
b4:24:a3:6f:ec:0d:66:26:02:9e:2e:e5:b5:d7:3e:
3d:71:e5:72:1d:f5:7b:dc:d7:29:d7:85:e4:ad:5c:
52:19:1b:75:f5:db:47:89:c8:de:f3:61:73:2b:cb:
ec:67:87:a2:37:2f:eb:45:56:0c:64:87:42:00:e1:
2b:15:e1:b2:db:9e:cd:c6:8d:1a:5c:29:ee:96:80:
cb:f1:a4:d9:67:0c:79:78:fd:cc:11:15:44:b1:c6:
b5:50:68:ce:d5:83:3a:d7:d8:94:96:21:3d:fb:c7:
77:8f:14:05:a0:87:a4:4f:a1:a5:6b:ed:fa:78:b3:
e7:7b:34:00:a1:08:ec:8b:88:0b:6a:9d:b2:41:c2:
ae:68:61:8c:39:07:65:73:2c:7b:f2:e1:b8:2c:cb:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DF:4A:CB:51:00:CF:DB:94:39:3E:96:A2:44:F0:22:A7:AE:DB:0E
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/1-t9Ky1EAz9uUOT6WokTwIqeu2w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:61:e4:ab:80:a1:63:38:09:95:21:7c:3d:42:d9:80:83:9a:
3f:38:a2:44:42:da:59:f2:32:08:6a:0f:e0:50:d9:7c:7f:e9:
5c:9c:a7:e1:af:18:a0:7c:6e:51:74:a5:b2:1b:3f:2c:28:34:
71:44:7c:31:8b:12:ab:77:b2:e9:36:5e:2e:d1:84:d9:89:e3:
f3:6c:58:95:db:97:68:ff:4c:d8:5c:76:d2:ec:5a:32:f9:95:
8c:83:d5:f5:c4:07:d1:cf:87:af:a7:85:ec:5e:7d:17:ef:7e:
ee:c3:4c:b8:76:59:84:92:97:57:c4:56:c5:6a:44:3d:a6:7c:
05:32:0a:2f:ac:3e:96:a4:0b:2d:19:ab:81:51:24:ed:c4:fa:
97:c5:dd:76:9e:e2:17:a3:e2:fb:c9:19:fa:7b:23:e8:0f:be:
10:61:29:70:7b:95:5e:80:56:fd:9d:64:3d:cb:94:53:c9:6f:
72:6c:3e:d2:bd:93:0f:2c:67:13:88:3e:ba:4e:74:b7:12:d9:
86:bc:45:3b:a3:e1:8a:58:51:b2:5b:35:04:4c:1a:e7:22:1b:
db:02:46:b7:9f:69:b4:9e:b1:b2:50:19:4f:9f:5f:ac:46:45:
47:b0:6d:95:19:c4:d5:fe:4d:bc:06:35:40:33:25:02:a4:b2:
f7:e9:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:36:04 2024 by rpki-client on console-fra.rpki-client.org