Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/0kjSfa1zIIk04y_iUOWlTGlCj0g.roa
File: 0kjSfa1zIIk04y_iUOWlTGlCj0g.roa (raw, json)
Hash identifier: Ul01bxIysxB1Tfgy1l3bEFRJBTxaCicMHEy2QenaSZk=
Subject key identifier: D2:48:D2:7D:AD:73:20:89:34:E3:2F:E2:50:E5:A5:4C:69:42:8F:48
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 018CC3B7148E8BCF2BDA89EEF2521D8E6DB1
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/0kjSfa1zIIk04y_iUOWlTGlCj0g.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207815
IP address blocks: 194.11.83.0/24 maxlen: 24
194.11.16.0/24 maxlen: 24
194.11.19.0/24 maxlen: 24
194.11.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:14:8e:8b:cf:2b:da:89:ee:f2:52:1d:8e:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d248d27dad73208934e32fe250e5a54c69428f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:69:bc:d6:83:3c:a0:21:6a:05:d7:fc:e2:
d6:77:b5:77:ee:9e:e0:19:6e:f4:62:57:54:24:bd:
d3:b2:9a:ef:0a:b4:c0:ab:8c:74:c6:76:68:3d:25:
97:9d:bb:10:1a:97:60:b2:ec:a3:de:bc:92:24:cc:
ce:7d:c1:31:41:e9:3c:e6:cf:9e:ac:72:30:1d:97:
57:c5:78:ef:ce:6e:a4:6b:33:a2:49:98:13:24:bd:
4c:e0:a0:cd:2e:89:2e:17:19:3f:88:98:7a:7d:92:
d6:27:62:08:13:b7:ef:b9:73:43:e4:5c:0d:24:40:
ae:15:27:96:e1:c6:14:99:93:2f:d5:d7:cf:0e:e4:
d0:6d:4f:04:a2:63:be:c7:1d:f1:8f:5c:d0:b8:44:
ad:84:ef:e8:b4:54:8d:ba:f5:9c:e3:f1:ea:d1:3b:
37:c0:76:00:8e:fe:16:9c:5d:bb:ae:8a:a1:57:a7:
a1:ee:6e:68:32:38:93:a8:f9:fb:dd:97:a3:11:f1:
c3:34:72:09:12:e8:25:24:3f:70:3d:7d:09:16:a2:
49:1e:32:0c:47:c9:f4:9e:c3:e6:f5:c0:09:cf:34:
1c:82:1d:33:ee:40:30:df:58:5e:18:9e:98:8a:94:
0d:32:7c:24:9d:29:7b:fc:66:34:05:ac:7f:85:60:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:48:D2:7D:AD:73:20:89:34:E3:2F:E2:50:E5:A5:4C:69:42:8F:48
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/0kjSfa1zIIk04y_iUOWlTGlCj0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.16.0/24
194.11.19.0/24
194.11.25.0/24
194.11.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e4:88:c8:1e:92:49:b7:2f:5f:9b:8c:9b:f5:96:ad:4c:93:
aa:ee:b1:ed:eb:04:91:a8:53:ed:3b:fc:5a:47:dd:a0:0f:67:
c0:41:b8:39:c1:8f:f1:1c:71:70:c1:b1:be:0a:e0:b1:ad:f1:
ec:f0:a3:c4:d6:5b:c0:8b:ca:9e:d7:54:f0:2f:6c:4c:b0:84:
a8:f0:e3:14:c4:ca:5d:90:ec:c8:cc:15:fa:fc:fd:3b:06:0c:
d8:9c:3b:2a:b3:66:59:26:74:fe:73:4d:cd:d9:7e:62:44:62:
78:00:be:f9:42:d5:36:ee:ca:a7:2e:b3:28:e5:be:57:1e:d5:
43:fb:78:0d:ae:3a:9d:3f:6e:b1:e2:e4:fe:fe:14:a1:cf:d7:
a6:50:33:a9:47:d9:f7:27:2e:d4:09:08:49:b1:4a:e4:06:c3:
8a:26:b2:0c:85:a1:9a:96:79:1c:64:72:41:5a:c5:5b:cd:54:
f0:1e:f9:e7:aa:68:0e:35:44:ef:6f:ed:e7:f2:e4:7a:f7:b6:
da:9f:e9:d1:a8:2b:cc:ca:22:72:7e:1c:46:67:2a:91:5f:81:
97:8f:db:1b:06:e5:c1:aa:a3:8d:1d:8b:0a:e8:5c:74:e5:47:
c3:7c:c7:63:4c:b6:e4:2a:da:59:8e:d1:6e:ca:f2:50:d3:1e:
2f:40:cb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:09 2024 by rpki-client on console-ams.rpki-client.org