Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/aUloGwmaTQ_qbtvN2aexR4yEB5c.roa
File: aUloGwmaTQ_qbtvN2aexR4yEB5c.roa (raw, json)
Hash identifier: RsZFxiyFPt3TyygGylNFbNM+VxnjxQbBIDKarfn91Vg=
Subject key identifier: 69:49:68:1B:09:9A:4D:0F:EA:6E:DB:CD:D9:A7:B1:47:8C:84:07:97
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 018CC3B69C8A4D51EFBD670D4022F6DAF29C
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/aUloGwmaTQ_qbtvN2aexR4yEB5c.roa
Signing time: Mon 01 Jan 2024 06:29:33 +0000
ROA not before: Mon 01 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12337
IP address blocks: 87.237.216.0/23 maxlen: 24
87.237.218.0/24 maxlen: 24
87.237.222.0/23 maxlen: 24
192.189.151.0/24 maxlen: 24
206.195.32.0/23 maxlen: 24
2a04:5781:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9c:8a:4d:51:ef:bd:67:0d:40:22:f6:da:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6949681b099a4d0fea6edbcdd9a7b1478c840797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:2f:00:fa:33:65:73:a0:6d:9e:c8:ef:db:
87:35:79:57:d8:45:42:bf:4b:41:25:5b:8f:f7:70:
27:4d:da:fd:68:7f:11:a7:2a:f3:bb:7e:b9:b0:bb:
79:d7:cf:98:ea:74:db:a6:de:50:c7:f7:b5:51:30:
08:a8:7b:c2:d6:3a:2b:22:e4:5b:13:5e:4c:0e:92:
1b:bb:88:19:28:42:2a:43:1f:00:db:a5:81:83:f4:
ee:47:da:e7:69:b8:d8:9c:20:3d:c8:41:d8:92:cd:
1d:68:9b:cb:da:dd:24:43:de:e6:35:56:31:c3:89:
c7:3c:3b:2f:db:a7:0e:1b:c1:d6:9a:70:f1:15:a2:
d8:af:99:43:1e:91:fc:97:fc:68:cb:e2:28:6a:85:
7c:40:0b:55:4a:86:fd:37:b1:09:d3:f4:1a:63:21:
a2:09:e5:85:17:4a:b0:d7:ba:ea:04:2b:43:47:b1:
f2:08:08:dd:be:a0:a9:c0:c4:19:9a:63:fb:d5:6a:
df:38:f3:19:03:d9:04:7e:dd:9c:d6:f3:c9:38:c7:
2b:02:ec:b1:5b:b0:97:dd:32:2d:d4:3c:54:19:e2:
9e:de:1a:03:27:74:6f:f2:04:1e:fd:a1:a6:92:32:
fd:a3:3a:8d:a0:b0:77:f9:92:ae:5c:0b:24:39:5b:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:68:1B:09:9A:4D:0F:EA:6E:DB:CD:D9:A7:B1:47:8C:84:07:97
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/aUloGwmaTQ_qbtvN2aexR4yEB5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.216.0-87.237.218.255
87.237.222.0/23
192.189.151.0/24
206.195.32.0/23
IPv6:
2a04:5781:2000::/40
Signature Algorithm: sha256WithRSAEncryption
81:3f:77:7f:c4:fe:8b:ac:4d:9a:e8:d8:c5:63:90:a1:05:c4:
9d:06:25:03:4b:11:cc:a3:9c:b5:82:a4:2b:5f:da:72:6a:7a:
3e:88:9a:02:dd:38:0a:fb:f5:18:c3:89:ab:2c:64:1c:07:51:
33:ba:6b:49:38:c9:02:bc:59:ee:c1:43:fe:98:1e:35:26:91:
50:78:08:df:5d:a1:1d:b6:c7:f0:e4:34:bc:41:0c:c4:8c:d8:
68:60:c0:09:54:7e:53:8a:d9:62:85:c8:dd:c6:73:66:f3:e1:
76:1d:9c:dc:e1:04:7b:61:a6:15:94:e8:62:98:bd:f7:3a:8f:
68:2f:ca:3e:38:05:1d:03:a0:ff:57:6f:5c:76:12:4b:55:f4:
4e:35:57:02:9e:da:fa:81:a9:b5:13:82:b9:8c:17:0b:89:22:
f7:9d:2c:c2:e8:ed:35:3f:f7:de:d8:98:d5:ed:a8:d6:c9:c1:
9e:58:41:03:3b:07:3d:48:5c:a6:db:21:d1:f5:8c:b1:80:05:
42:4f:41:6a:d0:94:08:71:1f:69:1d:31:b1:54:72:06:db:f1:
7a:94:f3:38:a7:d4:d8:b2:d1:bc:d0:1c:8e:84:06:39:5d:b3:
6a:60:07:43:7b:42:ba:5d:4a:d1:b2:48:66:25:81:05:99:53:
dc:f3:e1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:50:13 2024 by rpki-client on console-fra.rpki-client.org