Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/aTqIfhHYtCUd0jXuRoeYM0hQ4DQ.roa
File: aTqIfhHYtCUd0jXuRoeYM0hQ4DQ.roa (raw, json)
Hash identifier: 6wLHa1xWl8HABpjamyuy5yqri41pn94ZmAPdMXiyO+E=
Subject key identifier: 69:3A:88:7E:11:D8:B4:25:1D:D2:35:EE:46:87:98:33:48:50:E0:34
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 018CC649C18E471F7137974235E9B767599F
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/aTqIfhHYtCUd0jXuRoeYM0hQ4DQ.roa
Signing time: Mon 01 Jan 2024 18:29:31 +0000
ROA not before: Mon 01 Jan 2024 18:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200020
IP address blocks: 194.62.131.0/24 maxlen: 24
194.62.129.0/24 maxlen: 24
2a0d:8c40::/29 maxlen: 29
2001:67c:608::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:c1:8e:47:1f:71:37:97:42:35:e9:b7:67:59:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: Jan 1 18:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=693a887e11d8b4251dd235ee468798334850e034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:b6:0e:52:65:23:38:39:d6:33:b5:c8:6b:
7c:65:56:cc:35:7c:b1:3f:72:84:28:9c:53:99:84:
46:86:30:fd:4c:60:40:9a:c1:7d:ff:b3:89:4e:d1:
1c:2e:c3:97:f3:78:18:eb:b2:93:74:30:e7:be:7b:
19:9a:11:11:bd:9d:31:e9:03:86:99:63:ee:f1:0e:
ab:83:49:02:88:e7:38:c4:97:ae:7c:18:40:e3:1f:
82:e6:14:de:4a:99:9d:e1:c9:72:d9:8a:d9:43:0c:
45:27:8b:20:dc:7d:ca:7b:54:51:9a:d3:06:03:51:
d2:2d:cd:79:ab:f7:5b:e9:2d:20:6e:65:07:41:38:
b4:10:30:32:fd:79:c2:4c:a2:5e:2c:f6:04:07:c9:
02:16:1e:5f:ee:83:99:ac:98:3e:81:95:b1:80:c1:
c2:7a:af:54:f0:8d:ab:13:c0:19:ec:9a:0f:32:f0:
2a:de:b0:41:3c:02:23:90:fb:a3:30:91:c1:25:b0:
6d:b2:94:b9:59:a7:60:3f:35:22:62:2d:fd:94:68:
2b:07:a8:9b:37:ce:86:b0:c8:09:57:21:82:2e:72:
b4:ed:93:1c:14:74:13:8d:ef:ed:7a:4a:32:c1:b6:
d5:54:d3:f1:45:ef:7c:c2:4e:1e:c3:6b:4d:8b:9a:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:88:7E:11:D8:B4:25:1D:D2:35:EE:46:87:98:33:48:50:E0:34
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/aTqIfhHYtCUd0jXuRoeYM0hQ4DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.129.0/24
194.62.131.0/24
IPv6:
2001:67c:608::/48
2a0d:8c40::/29
Signature Algorithm: sha256WithRSAEncryption
3c:7d:78:fd:b7:78:56:85:bd:49:55:bc:87:e2:8b:d5:55:e0:
c9:5b:78:bc:d7:60:5a:b7:b9:6f:fc:66:35:eb:8f:cd:c6:e9:
2d:b7:b5:d6:c6:eb:10:6a:2d:90:78:bf:cb:84:c2:a6:0a:42:
4b:40:5f:7c:d6:9c:c3:e1:e8:43:49:18:14:85:ae:cc:3f:cc:
66:df:0d:ce:ba:ae:94:cf:d2:fd:7a:d5:c4:7b:31:05:68:69:
61:61:fd:03:56:73:60:32:d9:b4:cb:13:50:85:ad:4c:81:94:
c2:b8:14:92:9e:5a:10:a9:8a:4f:e3:79:ad:d2:65:25:7d:ab:
c1:05:35:49:63:3e:84:bc:77:fc:44:15:3c:a7:b9:b0:e3:63:
77:06:ae:bb:31:18:ea:65:d6:92:1b:44:28:ff:06:21:1e:3a:
92:5f:b1:04:9c:23:37:a4:aa:95:eb:56:23:79:60:b3:c2:24:
e4:7b:70:f1:94:d7:b3:ac:36:98:3e:0d:29:89:be:5f:0f:dd:
0f:2d:fb:08:a3:62:e3:d1:de:9c:1b:3c:e8:2b:a7:bd:07:e3:
ca:f9:4c:f4:6b:41:60:a5:b2:14:a3:37:d5:25:b6:e0:84:c7:
8e:bc:5f:32:0d:75:63:45:dc:d1:89:8e:50:d7:88:e0:e9:ca:
13:b0:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:42:11 2024 by rpki-client on console-ams.rpki-client.org