Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lEfQIjHFQkCXMIyscpzDlK-Me6U.roa
File: lEfQIjHFQkCXMIyscpzDlK-Me6U.roa (raw, json)
Hash identifier: 8+UdgH26rBIM1zMarrBfLYICajXYhaYIrD1Gme5wPJA=
Subject key identifier: 94:47:D0:22:31:C5:42:40:97:30:8C:AC:72:9C:C3:94:AF:8C:7B:A5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B6013871E44E1AE3668A1B8436CD5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lEfQIjHFQkCXMIyscpzDlK-Me6U.roa
Signing time: Tue 02 Jan 2024 12:34:49 +0000
ROA not before: Tue 02 Jan 2024 12:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200325
IP address blocks: 194.156.156.0/24 maxlen: 24
185.190.83.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:60:13:87:1e:44:e1:ae:36:68:a1:b8:43:6c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9447d02231c5424097308cac729cc394af8c7ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:db:2f:34:da:0d:67:27:c1:88:a1:4c:04:
9f:ed:46:77:61:22:10:9b:d1:93:e4:86:50:68:8c:
20:00:ef:0a:65:62:57:27:5a:ba:1d:a8:54:bc:db:
4d:94:ca:c6:e8:0b:33:e0:7a:bf:eb:82:8e:3f:0c:
02:b7:9f:75:0b:96:ef:3f:a7:0c:e9:ea:d6:6a:c4:
8f:08:c4:71:f1:9c:71:2c:35:ab:7d:81:3c:63:4f:
52:63:10:f7:ef:15:b5:32:a3:e7:95:f7:44:a2:3d:
3c:f5:23:ab:53:4c:c1:51:9e:0c:f8:70:77:39:3f:
41:8c:3c:c6:ec:36:fe:f2:7e:c8:30:c8:07:4d:63:
da:91:85:30:80:bf:b0:11:49:db:21:e7:68:06:03:
3f:85:19:30:54:c2:42:c1:73:1f:d2:f6:e6:a9:c0:
e6:94:6c:e9:38:ff:37:3f:35:91:a0:80:cf:a0:5c:
15:fe:24:98:57:2f:14:ee:23:4c:70:72:aa:84:40:
d8:2a:db:b0:31:83:8a:fe:14:a5:8e:d8:2d:92:22:
ff:1d:5d:7c:0a:fb:46:67:63:cb:0d:05:a3:c2:0f:
c7:cd:ee:0f:0b:83:fc:69:a5:b8:73:d7:5e:7a:ea:
ce:15:31:79:5a:10:6a:54:d0:4b:c6:ff:20:ef:b4:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:D0:22:31:C5:42:40:97:30:8C:AC:72:9C:C3:94:AF:8C:7B:A5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lEfQIjHFQkCXMIyscpzDlK-Me6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.83.0/24
194.156.156.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:5c:69:0c:ea:44:3b:c4:48:94:7d:3b:47:fd:ae:b7:5b:90:
89:e6:9f:d1:fb:35:51:de:d6:e0:b9:15:8b:9d:23:ea:38:1a:
3e:5c:8b:cb:80:8a:95:8b:ce:48:55:88:c8:bc:27:70:68:97:
08:b2:5f:cc:4a:bd:39:8b:c5:24:cb:f4:d6:8f:e8:f1:14:da:
a8:02:c0:6b:69:98:0a:25:e1:92:28:29:c7:4c:73:8b:db:96:
41:0e:53:ad:b3:cb:f3:04:61:b4:e4:8f:ca:47:73:1c:18:f6:
b3:61:c2:80:9f:29:c0:a9:0c:bc:2a:f3:66:f1:42:ac:66:51:
74:7c:a6:6e:21:38:c2:fc:33:c4:dc:48:d6:4e:30:08:2e:5a:
dd:41:b5:52:6d:e6:a3:c9:fc:5c:9b:8d:e0:4e:af:76:d9:b6:
e2:a9:c0:1e:e5:bd:05:2d:fe:92:07:e4:fa:2c:fe:0d:bd:5e:
0d:a9:d4:6c:0c:77:aa:42:84:6a:1f:bd:e7:37:27:cb:fe:b0:
8b:58:b6:49:3b:e3:40:e2:83:81:23:50:65:07:2d:db:f3:d2:
ef:9d:64:02:cf:30:3d:97:c6:da:e2:27:ba:6c:2e:09:73:9b:
50:a5:a2:4f:29:95:11:b7:da:c1:c0:3e:09:cf:ec:cc:aa:5f:
99:2b:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:43:59 2024 by rpki-client on console-ams.rpki-client.org