Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/A0BuWm4ITs82VOVkKLUmeJS0PIE.roa
File: A0BuWm4ITs82VOVkKLUmeJS0PIE.roa (raw, json)
Hash identifier: 1ZtpJv6NjPpWWpYweTzGS9eMrFUTXK3sb4D8ivFh7XU=
Subject key identifier: 03:40:6E:5A:6E:08:4E:CF:36:54:E5:64:28:B5:26:78:94:B4:3C:81
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 018CC56EC0658E0F2BA5BE167045C3F2992C
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/A0BuWm4ITs82VOVkKLUmeJS0PIE.roa
Signing time: Mon 01 Jan 2024 14:30:18 +0000
ROA not before: Mon 01 Jan 2024 14:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12874
IP address blocks: 194.59.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c0:65:8e:0f:2b:a5:be:16:70:45:c3:f2:99:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Jan 1 14:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03406e5a6e084ecf3654e56428b5267894b43c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:19:0b:f9:6a:cc:55:18:f2:46:ed:d0:97:
56:9b:1a:07:7a:d9:3c:3f:45:0c:fe:3e:bc:51:d7:
8a:fc:aa:f2:8b:cd:62:b0:f0:5b:bf:6d:3e:44:4e:
8e:3b:a4:ce:19:62:5f:29:47:81:95:b2:b1:14:ea:
e8:b1:23:79:03:41:b6:e3:2c:11:d3:c1:5b:11:39:
71:5d:fe:16:db:be:21:e8:84:43:e2:4d:c0:10:6d:
96:22:d6:6c:3d:f5:55:9b:61:36:ed:fa:36:6c:1f:
36:be:fc:78:91:d5:f6:e1:db:c1:55:7e:1a:ab:e8:
4f:ac:d3:7d:f8:24:7c:19:4e:8b:e0:88:14:4d:b5:
97:01:74:bd:07:6c:a1:77:c7:f9:c7:f8:16:bf:02:
c8:6d:f0:2b:32:16:70:b5:49:4e:0b:9e:a7:58:29:
5a:a8:94:3f:ac:39:68:4f:91:4c:43:28:ab:84:73:
7c:86:6f:a4:a6:47:4b:8b:d2:e3:2f:0a:fd:10:b2:
ec:91:e9:a3:ef:7a:f8:f5:32:6c:a8:d0:92:28:8e:
39:80:47:3d:29:dd:cb:72:6a:33:d7:31:31:f6:e9:
61:4d:21:b1:fa:77:85:95:14:65:75:d7:b6:60:f4:
7c:e2:cc:64:80:5a:bc:4e:bf:6c:0d:b1:74:29:1c:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:40:6E:5A:6E:08:4E:CF:36:54:E5:64:28:B5:26:78:94:B4:3C:81
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/A0BuWm4ITs82VOVkKLUmeJS0PIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.208.0/22
Signature Algorithm: sha256WithRSAEncryption
19:b9:98:1f:e1:20:64:5a:a7:8c:df:41:2a:8f:38:0b:d5:ae:
7c:00:b4:f5:43:25:93:43:06:4e:b8:37:60:fa:f1:3f:ac:01:
2b:bd:13:9c:5b:67:60:5a:2e:e2:f4:87:33:3a:9c:b5:36:ab:
af:76:ad:e4:e6:95:b9:47:b6:85:16:48:8d:cf:a5:f3:d2:28:
93:d6:64:5a:f4:e8:d9:b5:77:48:75:54:ed:e6:39:43:19:03:
5f:e5:77:2d:83:88:4a:bf:b8:b4:c9:3b:e1:f7:a2:48:94:e3:
a4:65:1e:9f:6b:e3:df:41:c1:0f:4b:c5:e5:85:f5:1c:7f:e5:
3a:76:f1:84:cf:00:57:23:69:82:9f:bc:4a:33:2f:c2:29:97:
07:d4:85:47:5d:c2:ed:63:92:b1:5a:6e:74:a1:5a:8c:24:33:
9f:7d:19:66:27:70:bd:8f:97:8a:ad:57:2e:d1:6e:e7:5d:e3:
68:a5:a5:7f:a9:68:18:23:85:95:a7:43:64:30:51:79:e2:e5:
d8:ad:57:d8:f9:df:84:5c:2f:66:c5:58:3c:ef:2f:c1:15:e2:
2c:4b:82:33:45:8b:89:d5:e4:40:b5:bb:6b:1c:5e:d0:dc:71:
2c:92:d6:c1:09:33:d1:cf:cd:d8:b0:e5:90:83:bf:50:29:4b:
c3:ab:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:26 2024 by rpki-client on console-ams.rpki-client.org