Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/aaPxbQ5mqse6EKrpPOnGsEXPJ7U.roa
File: aaPxbQ5mqse6EKrpPOnGsEXPJ7U.roa (raw, json)
Hash identifier: cOGi31H5hU+m+SY7Xd3niPO2e4rHJw+j5205DoFJMuE=
Subject key identifier: 69:A3:F1:6D:0E:66:AA:C7:BA:10:AA:E9:3C:E9:C6:B0:45:CF:27:B5
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 0190100FE0CCB5FBA0A25867D042D827011C
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/aaPxbQ5mqse6EKrpPOnGsEXPJ7U.roa
Signing time: Thu 13 Jun 2024 05:26:34 +0000
ROA not before: Thu 13 Jun 2024 05:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49651
IP address blocks: 194.180.56.0/22 maxlen: 24
194.180.56.0/24 maxlen: 24
194.180.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:0f:e0:cc:b5:fb:a0:a2:58:67:d0:42:d8:27:01:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Jun 13 05:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69a3f16d0e66aac7ba10aae93ce9c6b045cf27b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:55:ef:7f:ba:a6:b2:cb:57:3c:f1:28:7d:
97:58:5d:49:85:ee:75:13:94:8f:e3:de:e8:75:ef:
28:b3:8b:d1:b1:40:8d:5c:96:96:04:7f:21:c6:d0:
ab:23:a3:49:89:a2:8e:44:f6:fe:59:77:98:26:ad:
96:4d:54:3c:6f:9a:5a:9b:f0:63:66:8b:fe:f7:68:
3c:12:d4:a9:9e:22:f9:55:a4:5b:2e:2a:da:2c:70:
4d:d2:31:c0:7a:51:ac:55:dc:23:aa:b9:f9:f9:2d:
2c:08:46:22:d9:0f:41:7f:0b:a9:eb:29:9c:c4:1c:
c4:1f:3e:78:7e:d9:0a:88:f5:b2:49:b0:15:eb:fd:
78:cd:1c:f1:ef:e8:d3:ba:6b:18:26:15:14:dc:52:
a5:19:8b:3a:3d:0b:fe:3b:d0:c9:f8:de:4d:bc:27:
d5:4a:d8:78:04:ec:3f:67:4e:85:21:16:53:1e:4e:
fd:6b:5e:0a:69:b7:9d:a8:0b:57:87:5d:b6:44:98:
67:15:c6:c3:8e:12:e2:ef:07:c8:99:15:6d:17:43:
7d:bf:52:7d:2d:1e:67:63:c8:0f:49:74:d9:b0:30:
18:6c:6b:cf:71:ce:79:9e:03:f1:b5:1b:f1:03:05:
eb:64:97:be:0a:3d:49:74:eb:c9:8f:db:8a:c4:f3:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A3:F1:6D:0E:66:AA:C7:BA:10:AA:E9:3C:E9:C6:B0:45:CF:27:B5
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/aaPxbQ5mqse6EKrpPOnGsEXPJ7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:01:24:f7:53:fd:c5:20:ae:a2:2e:61:00:7e:a2:40:fe:de:
e4:b9:77:ed:0b:45:40:b9:8c:53:48:f4:9e:9e:6b:0b:4d:5f:
1d:8d:1a:b2:a3:68:a8:c8:ee:f4:23:36:3e:8d:53:f4:7f:6c:
30:90:96:05:c8:11:c3:43:e9:f3:38:97:df:47:e6:09:65:03:
9a:66:55:15:24:c9:f8:29:af:c5:40:01:e0:91:29:aa:29:bf:
91:74:8f:47:45:51:8a:a2:3e:06:1c:94:f2:ef:53:85:87:fe:
15:50:0d:8d:cc:93:1d:bf:67:dd:60:d4:c4:b8:d7:6f:5a:47:
d3:17:9b:cc:eb:e1:8e:53:c8:e2:96:84:06:4b:83:0d:be:d5:
cb:c1:46:1d:05:ae:48:e8:2a:3a:3e:7f:a4:cf:18:53:d7:cb:
18:a2:25:73:04:72:9b:f6:19:0a:26:50:1e:34:33:34:ae:64:
e6:0e:0f:16:cc:eb:f6:14:9c:25:4a:c0:47:99:f3:3d:aa:1e:
5c:f7:ca:52:7d:18:d7:b5:45:c6:a9:d8:b0:57:03:a2:91:0e:
7f:44:04:b0:e7:0f:c3:c3:b7:4e:71:ff:8e:f7:6c:74:1a:2b:
99:eb:00:d3:51:5b:e7:22:3c:61:41:33:6d:c0:41:18:84:bb:
7a:94:90:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:12 2024 by rpki-client on console-fra.rpki-client.org