Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/zEoBJHVP_wosCQoNtpHeedTWO1I.roa
File: zEoBJHVP_wosCQoNtpHeedTWO1I.roa (raw, json)
Hash identifier: 8qPtch+Kmx7W46N28VGPMxr/VA+SwTvpN77+MONG9jA=
Subject key identifier: CC:4A:01:24:75:4F:FF:0A:2C:09:0A:0D:B6:91:DE:79:D4:D6:3B:52
Certificate issuer: /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial: 018CC2DB53E3F90F25C7C821C8C4092292BA
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/zEoBJHVP_wosCQoNtpHeedTWO1I.roa
Signing time: Mon 01 Jan 2024 02:30:02 +0000
ROA not before: Mon 01 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2116
IP address blocks: 194.146.244.0/23 maxlen: 23
194.146.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:53:e3:f9:0f:25:c7:c8:21:c8:c4:09:22:92:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Validity
Not Before: Jan 1 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc4a0124754fff0a2c090a0db691de79d4d63b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:05:c7:cd:ae:dd:3c:2c:d2:b0:76:bf:aa:d1:
e5:66:33:b2:47:cb:36:e6:38:d6:f9:a8:69:60:58:
60:d6:53:32:93:f5:b4:20:33:a3:6a:d9:5e:fe:c2:
21:a1:7f:9d:bc:1e:55:f9:7e:76:21:37:b3:8a:04:
fb:3b:fd:8d:5c:22:3c:02:cf:f8:bc:4d:b2:0b:8a:
23:b1:62:9a:9f:1d:ff:59:cb:f8:58:6f:91:55:96:
57:8c:b4:4f:61:76:1b:ba:04:83:54:7c:51:5b:97:
18:62:35:75:52:b7:fd:13:8b:6d:79:f4:a5:77:06:
f7:13:b2:4f:7e:71:c2:84:db:2e:74:4b:79:18:be:
fc:da:6f:1f:ca:70:d4:31:f8:60:53:2c:18:31:58:
be:f8:6b:53:07:46:18:08:0d:4a:0a:d5:8a:e3:5d:
77:01:cf:2a:3e:3f:5a:a1:44:f8:2b:e1:d5:89:8f:
40:4e:8d:af:1f:21:42:31:02:5f:48:68:ae:cd:eb:
79:9f:56:38:5e:c9:00:aa:bf:cd:a5:4e:8e:e6:a7:
c1:2c:1b:71:e2:62:07:73:e9:d8:2f:a2:9b:63:0c:
93:e8:f3:16:5f:40:3e:69:40:20:12:5d:90:74:10:
e7:c5:ab:2e:88:ef:f7:79:5d:6e:54:eb:dd:cf:52:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:01:24:75:4F:FF:0A:2C:09:0A:0D:B6:91:DE:79:D4:D6:3B:52
X509v3 Authority Key Identifier:
keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/zEoBJHVP_wosCQoNtpHeedTWO1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.244.0/22
Signature Algorithm: sha256WithRSAEncryption
54:96:ac:90:17:f9:8f:1d:89:dc:bf:9f:ec:ef:2a:20:0b:0e:
f9:03:33:14:d8:d6:56:a3:6d:3f:c5:bd:ab:47:98:22:4b:67:
16:b0:d6:5b:20:da:22:cb:37:5a:43:5f:cb:8e:53:8b:d7:ae:
0a:a8:95:74:3b:00:1a:b4:ca:02:e9:e8:85:e9:66:2f:8e:c4:
e9:b7:7a:4b:e7:8d:cc:bd:99:1a:bf:03:51:a5:dc:af:6d:63:
45:c4:f9:f2:f1:2b:15:8e:b6:02:21:c6:19:d6:09:5a:2a:bd:
bc:55:ed:47:09:36:bc:f0:11:36:9b:36:0a:f5:c4:48:fe:1f:
c1:61:51:20:5c:c8:a8:5c:a7:d6:c3:50:d8:b3:3e:bb:16:ac:
a6:7e:5a:af:b6:4b:21:16:69:dd:e1:07:f8:95:d6:d1:e3:fa:
83:fa:9c:7f:dc:8d:cf:e2:98:9d:ac:75:41:d6:df:6e:b7:98:
6e:10:68:a1:af:af:00:1e:29:05:2a:e3:62:df:e9:a3:1a:0d:
87:ad:90:38:df:e8:b4:e6:fb:b7:51:f6:6a:c1:06:58:f8:a6:
17:90:64:bf:09:1a:c3:25:38:e5:3e:36:8c:86:b5:5b:5d:2d:
9f:d8:23:2e:88:a5:30:0e:bc:d1:d3:d6:ea:0d:d6:de:79:f3:
76:34:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:30 2024 by rpki-client on console-ams.rpki-client.org