Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/b0kRhhsd_ne9Iv92CoNoQZuY1Io.roa
File: b0kRhhsd_ne9Iv92CoNoQZuY1Io.roa (raw, json)
Hash identifier: fvLos1F6m5DYw1J41j8sGsjmx8NGfFZ6xdHukjz5Oo0=
Subject key identifier: 6F:49:11:86:1B:1D:FE:77:BD:22:FF:76:0A:83:68:41:9B:98:D4:8A
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64ADE378D6EA91327DC1ABA7106B9BF
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/b0kRhhsd_ne9Iv92CoNoQZuY1Io.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48646
IP address blocks: 94.247.45.0/24 maxlen: 24
178.251.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:de:37:8d:6e:a9:13:27:dc:1a:ba:71:06:b9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f4911861b1dfe77bd22ff760a8368419b98d48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:f3:4c:5d:6c:39:cb:fe:1a:ba:36:2b:ef:
4a:bc:4f:d2:00:d0:12:98:d3:e2:9f:59:61:0b:a2:
f0:e4:0b:43:23:27:3c:c4:e6:c1:27:e0:48:91:28:
32:83:70:d7:1d:b5:45:dc:cb:ca:5d:2e:43:68:78:
2a:c6:09:6c:e7:52:8e:bd:0b:44:97:ba:35:70:77:
1b:e2:70:35:82:26:79:f3:a5:d6:d3:91:ba:a4:90:
36:b2:4e:44:d0:92:55:76:f3:c7:f4:df:fc:e6:fa:
3b:65:2a:61:32:e3:53:07:2a:d3:99:25:63:ec:17:
31:06:32:6a:28:94:a0:9b:60:2b:d5:4c:c7:e8:08:
3c:07:89:35:dd:5a:c5:41:5e:73:5f:90:01:d0:1d:
21:4e:61:2d:db:df:c9:41:b7:e6:a5:78:5b:09:86:
a1:58:79:bc:37:c1:f2:03:fd:bd:3e:26:7a:8f:34:
ce:09:7c:30:d7:ce:10:26:99:c7:44:db:20:14:d3:
22:2e:78:1c:e8:d7:17:92:92:81:47:89:ab:d2:b8:
7b:b4:60:80:b7:da:9c:04:61:d0:b0:d0:9d:28:a5:
9f:de:8f:b5:6f:3c:25:de:86:cd:62:86:4f:f9:58:
9d:c4:49:01:d1:d7:d7:1a:3d:04:f0:f0:19:7a:cd:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:49:11:86:1B:1D:FE:77:BD:22:FF:76:0A:83:68:41:9B:98:D4:8A
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/b0kRhhsd_ne9Iv92CoNoQZuY1Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.45.0/24
178.251.226.0/24
Signature Algorithm: sha256WithRSAEncryption
66:4e:05:99:4a:a9:5e:3d:da:4b:26:93:9a:13:7c:78:62:4a:
99:09:d1:b3:57:f1:38:10:19:d8:f1:21:d4:1c:ca:9c:3e:f6:
a7:26:1d:32:37:7d:07:2a:35:ce:31:d5:2f:16:c4:fc:43:59:
05:a7:dc:21:aa:00:c2:49:d7:26:fd:dc:92:ca:07:44:d2:63:
ec:ef:ec:3f:f0:8b:36:95:0c:3a:0b:a6:bc:5a:0c:aa:24:20:
bd:d9:d3:1b:70:82:dc:7d:3c:8a:9f:60:0c:dc:10:46:92:cf:
87:0f:25:54:59:8b:8c:b7:7b:df:c0:f3:be:3d:de:36:9a:e4:
10:8d:8f:99:35:cc:41:d7:62:d1:82:65:e9:41:01:42:a4:38:
fa:32:77:57:ee:46:f3:27:2d:73:25:f9:2a:cd:5f:c4:67:7a:
1d:bf:2e:34:da:4a:94:12:43:84:96:68:43:74:82:79:43:ac:
25:4c:f1:43:08:8c:af:9d:3a:5b:5b:f9:2b:5e:a7:bf:24:43:
4f:f5:c2:2d:8f:8a:32:ae:a1:44:ad:7f:73:4b:d2:c1:47:bc:
82:de:d2:14:ed:5f:ff:34:26:7a:2f:a0:4e:be:fb:3d:da:02:
5d:b8:59:91:00:78:0d:66:3b:31:85:dd:6e:d1:f9:ac:63:9e:
c7:93:7b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:10:11 2024 by rpki-client on console-ams.rpki-client.org