Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/0aUCIU1fXtBQNyy2BZ3KWp0Osvs.roa
File: 0aUCIU1fXtBQNyy2BZ3KWp0Osvs.roa (raw, json)
Hash identifier: mR8A8ZIrqwnvbLjRgkDvolTxPUBxcAmoTuz/VMX/BOs=
Subject key identifier: D1:A5:02:21:4D:5F:5E:D0:50:37:2C:B6:05:9D:CA:5A:9D:0E:B2:FB
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 018CC8DF6E41ECED944F7592CFCEB391C0E6
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/0aUCIU1fXtBQNyy2BZ3KWp0Osvs.roa
Signing time: Tue 02 Jan 2024 06:32:15 +0000
ROA not before: Tue 02 Jan 2024 06:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197874
IP address blocks: 194.246.159.0/24 maxlen: 24
194.246.156.0/24 maxlen: 24
2001:67c:22ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6e:41:ec:ed:94:4f:75:92:cf:ce:b3:91:c0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Jan 2 06:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1a502214d5f5ed050372cb6059dca5a9d0eb2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:37:b3:72:4e:db:0d:3f:5e:db:4b:4d:1f:59:
50:15:e7:8b:b7:56:fe:fa:14:62:5b:b9:b0:57:85:
53:54:89:27:de:ae:24:06:c4:c1:ef:68:b3:85:99:
03:8b:f0:5b:a9:48:36:d5:d6:0a:48:5e:a1:26:25:
1d:dd:10:2a:24:c2:eb:13:81:cf:4d:48:80:5d:c3:
da:51:2b:4d:18:64:c8:4c:ae:4d:e2:26:6b:2e:14:
e6:cd:6a:88:9c:da:94:17:5c:31:43:a6:ad:7a:df:
a0:9c:c2:2a:07:6d:77:03:f5:3b:96:a8:e5:ca:c1:
95:4b:f0:c0:cf:e7:73:16:95:f8:62:f6:23:c6:8d:
47:bb:6f:19:a0:2a:09:e7:ff:5d:8b:92:8d:eb:90:
ad:5f:fd:78:82:d0:a6:94:1f:3c:ce:9d:fa:6b:9b:
cf:c2:fa:cb:2d:ca:6c:a5:ae:eb:74:eb:97:91:c2:
3c:4b:85:42:cf:dd:ed:83:bb:80:68:48:27:82:30:
a8:bd:3e:07:ff:5b:6a:cb:d7:61:48:54:b3:28:a5:
37:5d:1c:48:78:08:10:09:7a:2a:0d:8f:d2:a1:08:
80:2c:5d:26:21:ba:ad:03:a0:61:25:da:6c:ed:a7:
0c:e3:ac:aa:7c:29:02:9a:60:c1:30:c7:c0:ac:40:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A5:02:21:4D:5F:5E:D0:50:37:2C:B6:05:9D:CA:5A:9D:0E:B2:FB
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/0aUCIU1fXtBQNyy2BZ3KWp0Osvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.156.0/24
194.246.159.0/24
IPv6:
2001:67c:22ec::/48
Signature Algorithm: sha256WithRSAEncryption
b0:45:86:4b:8a:24:ba:f0:f3:1d:6f:1d:99:7b:6c:d3:3c:60:
29:07:5d:b6:05:a4:74:38:91:de:6b:d0:44:66:f4:f8:e4:8f:
e3:ed:7d:c3:ef:cd:08:aa:d9:2c:4e:70:e8:44:6d:f3:3a:7d:
bf:8a:6e:17:fb:13:07:7c:87:37:4b:ce:a9:72:34:86:3f:41:
b7:a1:65:b6:4a:45:10:8f:f2:61:54:f5:54:28:97:78:51:50:
f0:3f:cf:01:72:3e:28:1e:d1:1d:5e:75:97:f8:11:dc:46:1c:
d0:6b:9b:d8:8e:86:99:6a:2b:e1:bb:2e:73:a3:a0:52:cf:9e:
24:de:00:d2:d3:91:40:4d:47:18:83:5c:48:30:37:d3:ca:9d:
7b:a4:be:5f:82:d1:ba:5f:10:56:97:58:a4:21:4c:a6:af:93:
db:e4:10:cd:e0:99:c1:e6:fb:99:da:9f:da:1a:3d:ad:50:45:
23:46:42:b9:8a:89:c9:5f:00:fc:b4:aa:2c:bb:c0:fb:9d:b3:
cc:cb:75:a7:01:cc:09:e8:98:2b:1e:d8:f2:38:7b:3e:f6:ea:
da:3e:ea:c6:e9:c1:b0:ab:79:6b:dc:99:02:eb:6c:f8:49:0f:
11:3d:d0:33:73:8c:d7:eb:ec:cf:fe:28:2d:58:33:e8:e7:1b:
95:cb:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:06 2024 by rpki-client on console-ams.rpki-client.org