Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Cu1ZEOnx9H_y--7H5cMc3zDgW-w.roa
File: Cu1ZEOnx9H_y--7H5cMc3zDgW-w.roa (raw, json)
Hash identifier: RvBECpbMAJHDS+AFHTKaKWwhpTsjJePh4Iihv5f17Uo=
Subject key identifier: 0A:ED:59:10:E9:F1:F4:7F:F2:FB:EE:C7:E5:C3:1C:DF:30:E0:5B:EC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B6B3F80A1BFA7ED71D445713EE5EE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Cu1ZEOnx9H_y--7H5cMc3zDgW-w.roa
Signing time: Tue 02 Jan 2024 12:34:52 +0000
ROA not before: Tue 02 Jan 2024 12:34:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398397
IP address blocks: 194.34.231.0/24 maxlen: 32
45.12.161.0/24 maxlen: 32
45.13.246.0/23 maxlen: 32
185.120.20.0/23 maxlen: 32
185.207.177.0/24 maxlen: 32
195.85.41.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:6b:3f:80:a1:bf:a7:ed:71:d4:45:71:3e:e5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0aed5910e9f1f47ff2fbeec7e5c31cdf30e05bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:d8:55:7d:4e:3e:5e:e0:c0:4b:6f:04:1c:
53:cb:bc:13:21:73:a5:9f:91:af:7e:cb:cd:c8:a6:
0a:c1:15:a5:72:69:32:33:93:09:36:60:88:56:90:
a8:02:2b:e9:03:5c:e4:24:7d:77:19:74:58:cb:b4:
3f:71:12:e9:d3:f6:c5:5f:b7:d0:c5:17:f5:3b:e1:
7b:8e:15:d2:bb:c0:c2:55:ad:a9:68:d2:dc:ce:f7:
39:a2:4d:83:ff:f2:37:b5:c6:0a:4e:2c:c6:40:eb:
e6:e7:3b:b7:c3:9b:63:16:53:53:8f:18:12:2e:dd:
30:12:89:59:4f:ab:c1:de:c9:ca:38:40:5a:b5:ac:
8a:46:8b:0b:e6:ce:24:7a:72:b6:7d:a2:86:6d:4b:
80:42:2a:32:f5:f8:1c:9e:0a:0b:b6:66:fd:1d:6e:
4a:81:31:cd:9e:06:79:6c:2e:28:78:a3:1b:8f:4a:
43:09:cf:26:4d:34:69:7f:47:06:98:02:2e:48:b9:
2c:83:ff:96:c0:b1:b9:3a:10:38:15:50:d8:d7:3a:
4c:f7:31:34:c2:f8:d3:5f:36:17:07:63:12:9e:cd:
9f:7e:4e:8c:ed:1e:1b:a1:d1:0a:2c:4a:ec:76:d4:
e8:7b:2f:16:a6:c9:b3:d0:e5:28:35:0c:e6:c7:7e:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:ED:59:10:E9:F1:F4:7F:F2:FB:EE:C7:E5:C3:1C:DF:30:E0:5B:EC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Cu1ZEOnx9H_y--7H5cMc3zDgW-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
45.13.246.0/23
185.120.20.0/23
185.207.177.0/24
194.34.231.0/24
195.85.41.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:5d:b8:bb:75:03:7c:ee:03:25:2d:ee:15:a7:27:c3:84:16:
d3:24:25:c6:05:a4:3e:a4:e5:60:39:6f:48:63:c1:75:08:ea:
1b:a8:83:50:09:f9:48:2a:78:c0:1f:29:e0:fc:01:94:bf:3d:
c2:1c:7f:b6:37:bb:68:37:a0:b0:5a:6d:2a:c2:9d:5e:af:c6:
69:55:7e:da:1e:bc:a3:de:9c:98:64:89:9d:d5:e3:59:22:5c:
bc:f6:c2:7f:01:26:f5:ae:4b:41:bd:e3:ab:b3:69:bc:53:f3:
d9:ce:ab:0c:b7:16:2a:99:6c:f6:41:17:e3:9e:8e:88:e9:66:
93:e6:68:20:e4:bf:4d:04:b3:cc:8b:9a:23:b3:65:3f:ba:92:
2d:88:c0:08:76:ce:9a:b9:92:4f:42:95:7d:57:31:df:24:59:
42:6f:4c:f3:eb:91:31:96:53:03:a0:af:df:24:09:30:c3:b3:
32:70:99:81:14:57:22:ed:42:f0:34:9f:73:0d:37:f1:81:af:
9b:2c:a0:59:1e:09:6b:0e:96:2b:ae:25:1a:0d:26:03:e0:a7:
0e:e9:aa:4f:80:f0:66:f6:03:6f:f6:b8:71:3b:e9:bf:41:b6:
a2:ef:09:97:17:c6:3d:ae:71:0d:b4:64:ff:c5:aa:1d:08:88:
d6:89:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:43:59 2024 by rpki-client on console-ams.rpki-client.org