Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/ajiky1MaCWcr0vMeYinKov8kD1Q.roa
File: ajiky1MaCWcr0vMeYinKov8kD1Q.roa (raw, json)
Hash identifier: Bht5dp2wXF07Anw/eqEGFMYThst+hrKz18viFOg2ESg=
Subject key identifier: 6A:38:A4:CB:53:1A:09:67:2B:D2:F3:1E:62:29:CA:A2:FF:24:0F:54
Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial: 018CC5009B0638F1099F121633B6A59865B8
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/ajiky1MaCWcr0vMeYinKov8kD1Q.roa
Signing time: Mon 01 Jan 2024 12:30:00 +0000
ROA not before: Mon 01 Jan 2024 12:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197965
IP address blocks: 194.180.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:9b:06:38:f1:09:9f:12:16:33:b6:a5:98:65:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Validity
Not Before: Jan 1 12:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a38a4cb531a09672bd2f31e6229caa2ff240f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:6d:6f:68:88:68:64:7c:2a:25:c0:f0:c1:
60:fb:99:dc:ba:96:4b:3a:0d:d7:4f:53:79:27:34:
5f:8d:65:09:da:94:dc:62:0f:8a:97:11:b1:85:d2:
60:95:3d:c6:55:be:e5:12:5c:42:3e:09:d8:a1:df:
78:d4:2d:d2:63:39:87:ee:5d:13:7e:7d:c3:4f:52:
d1:b8:d8:f8:c7:7d:1b:ab:4f:e9:46:2c:9f:31:33:
5c:48:50:72:ad:26:5c:1f:05:33:4b:a6:73:f0:8a:
a3:b0:0a:d1:df:49:98:ba:0a:c8:4d:d5:73:f0:e3:
db:0f:d0:c7:ba:6e:59:2d:ad:da:a6:d8:14:0e:ca:
90:ba:4a:08:25:c5:18:ed:51:3b:77:5d:1a:58:d4:
6a:8c:42:47:ba:6d:c5:25:7e:03:8e:03:de:c7:e0:
fa:09:f8:69:ae:6f:b3:ca:d7:89:63:d2:09:af:31:
0d:e0:e1:45:50:1b:d7:c6:1d:03:88:b9:f1:b5:56:
51:ae:89:2d:60:5a:ad:8b:ea:c5:5a:bc:a6:43:59:
90:e4:0a:29:39:54:61:fe:5d:7f:d3:fc:f7:0b:0a:
2c:04:f2:fe:a1:fd:2f:bc:ea:d1:7e:62:94:2b:b6:
aa:73:67:0d:85:f9:f8:6a:eb:fe:d2:b8:39:75:0d:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:A4:CB:53:1A:09:67:2B:D2:F3:1E:62:29:CA:A2:FF:24:0F:54
X509v3 Authority Key Identifier:
keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/ajiky1MaCWcr0vMeYinKov8kD1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:26:31:ce:25:35:2e:7f:d1:04:6a:cc:b2:fc:f7:99:3a:60:
ed:ff:85:2f:48:92:82:a7:bd:0e:87:7b:13:09:79:65:5a:ec:
c6:35:fe:f4:d9:f3:e9:5b:29:86:e0:07:10:25:8a:5d:e4:41:
e0:c2:6e:48:62:a1:88:98:77:85:99:4f:20:e5:3a:2a:3c:9a:
67:35:58:76:6d:8d:61:4b:73:56:83:0e:f3:14:0c:a4:1a:c7:
c5:10:d8:44:5c:73:2a:17:8c:04:ff:bf:0c:bb:00:32:8f:1e:
f9:e9:d1:f6:66:39:0e:1d:df:9a:29:6b:e9:e1:90:9d:6a:76:
ff:6b:41:9d:75:a4:e3:48:31:40:07:a4:fb:80:8d:54:dd:2e:
d1:41:f9:34:0f:53:fe:ad:0a:eb:52:55:c4:f5:69:73:b1:18:
b5:94:ae:26:71:ee:0a:e4:3b:df:30:27:e5:87:bf:eb:4a:02:
ad:9e:6d:8a:0c:6a:a5:8b:df:73:eb:5c:d1:f8:f8:17:46:74:
6a:bc:e9:fc:59:ce:94:be:d7:fa:fd:8d:2a:86:1f:9d:93:c3:
33:04:43:fb:07:67:cb:49:84:ac:2f:5c:ae:9c:81:a9:16:fe:
f6:2b:fc:23:fb:09:82:65:ac:4b:f3:7e:a2:35:79:63:bd:be:
ea:96:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:11:12 2024 by rpki-client on console-fra.rpki-client.org