Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/0AhtjUjAUpT7Iix3NxmBH93iKzU.roa
File: 0AhtjUjAUpT7Iix3NxmBH93iKzU.roa (raw, json)
Hash identifier: kqitnxJhEv/ExQpNbNmyRVQuATkCeU/aCdSx2AEPiWU=
Subject key identifier: D0:08:6D:8D:48:C0:52:94:FB:22:2C:77:37:19:81:1F:DD:E2:2B:35
Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial: 018CC7256F5D842B7D0FF4F580C3B39578AC
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/0AhtjUjAUpT7Iix3NxmBH93iKzU.roa
Signing time: Mon 01 Jan 2024 22:29:28 +0000
ROA not before: Mon 01 Jan 2024 22:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62146
IP address blocks: 194.150.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:6f:5d:84:2b:7d:0f:f4:f5:80:c3:b3:95:78:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0086d8d48c05294fb222c773719811fdde22b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:8e:b7:e3:61:75:0f:09:33:ee:24:c9:70:
8e:c3:d9:77:12:f4:c4:c5:b7:0d:e0:2c:5f:04:2d:
a5:a2:ae:f1:ae:51:9f:04:65:2c:19:4b:05:b3:85:
07:6e:65:dd:18:45:b2:5c:eb:38:93:9e:2a:80:6a:
f1:8f:06:2e:74:04:55:d1:96:6b:06:0d:3b:91:d4:
e1:b6:24:3e:12:13:ac:b1:f0:dc:f6:ba:62:07:f1:
b7:f8:f7:d2:17:ee:e4:ee:d7:73:c0:a4:34:6e:2e:
82:4a:3f:c9:ba:42:a5:86:d8:91:ee:da:00:d3:f7:
74:27:cc:3b:41:6d:c1:12:c4:bf:40:c1:f9:67:cc:
49:53:9f:75:7d:60:17:57:90:de:9e:1e:92:80:07:
4f:d2:fd:b9:05:d4:2b:96:3f:8b:de:0c:5b:e0:98:
ea:99:a5:18:26:a1:af:94:b6:b0:ca:4d:85:57:be:
8c:2e:89:01:83:53:cb:08:fc:9d:a5:f0:05:73:82:
13:59:4e:3a:62:dd:c1:29:de:dd:19:7b:89:18:f4:
b2:62:de:1d:f3:04:cc:f9:4b:36:88:12:e1:4d:2c:
53:12:bf:40:03:bd:39:ad:63:d8:36:c4:36:74:b6:
f8:3c:9f:3b:69:1b:a3:0b:a5:73:b7:99:29:5c:a7:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:08:6D:8D:48:C0:52:94:FB:22:2C:77:37:19:81:1F:DD:E2:2B:35
X509v3 Authority Key Identifier:
keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/0AhtjUjAUpT7Iix3NxmBH93iKzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.106.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f9:de:4f:9c:40:8c:85:69:a8:9f:a6:ab:f1:2c:da:05:2e:
42:e0:9c:f1:b7:79:74:b4:88:d4:5b:b0:df:72:70:01:31:b8:
d2:da:32:f4:47:3f:14:23:57:af:4d:65:52:2f:71:22:2e:18:
8a:c6:a8:90:9a:3c:43:1f:e8:d9:ed:e2:c8:2b:b4:61:ef:af:
d3:57:67:13:ac:e8:78:38:a0:2f:6c:44:f8:b0:b3:57:82:da:
03:8f:a1:09:de:cb:cf:dd:34:d9:78:96:ec:be:28:c5:a9:48:
2b:c2:32:0b:be:cf:98:87:39:4d:db:d9:03:a0:34:d0:c3:7e:
7d:17:2e:1b:b2:16:61:30:9d:a6:02:0f:af:ea:c8:7b:fd:97:
c7:03:ee:dd:0a:55:fc:87:cb:51:7b:cb:fc:f3:ec:7e:a7:6c:
68:9d:36:22:64:44:20:b7:c8:d9:3d:f1:66:29:71:39:93:03:
3e:62:15:dd:17:3d:2a:e6:3d:ee:25:25:41:22:bd:f2:e5:89:
a1:a2:20:ed:1f:cf:21:bb:f5:d7:af:82:d0:1c:88:e6:c7:85:
60:61:c7:83:96:73:cc:22:3e:6a:8b:42:fa:51:e1:eb:5b:6c:
08:c8:5b:d8:d2:c1:45:34:14:e3:6a:36:0e:50:b6:3b:3a:4c:
2d:de:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:04:23 2024 by rpki-client on console-ams.rpki-client.org