Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/loD0F1jcPWbpDP43o_lkBrOd7Rs.roa
File: loD0F1jcPWbpDP43o_lkBrOd7Rs.roa (raw, json)
Hash identifier: DUoOSwYo5m/Vr5HrhIh4DIBX9AmFyMx+tmCyxn1jd8c=
Subject key identifier: 96:80:F4:17:58:DC:3D:66:E9:0C:FE:37:A3:F9:64:06:B3:9D:ED:1B
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 018CC3B69D7DA3CFB042E6DFB28405164811
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/loD0F1jcPWbpDP43o_lkBrOd7Rs.roa
Signing time: Mon 01 Jan 2024 06:29:34 +0000
ROA not before: Mon 01 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397918
IP address blocks: 206.195.48.0/24 maxlen: 24
2a04:5781:3001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9d:7d:a3:cf:b0:42:e6:df:b2:84:05:16:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9680f41758dc3d66e90cfe37a3f96406b39ded1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:8d:cd:6b:46:e1:e3:4d:38:0b:3b:3a:52:
5a:70:c3:ce:07:89:b4:f6:26:0f:2d:a6:40:4a:2b:
78:c4:51:cd:e1:83:5a:fa:3c:90:85:1a:49:47:7c:
d3:58:fc:6c:11:59:11:7d:62:3f:fe:63:d0:3a:ab:
9a:1c:0d:4a:2a:7b:05:94:71:29:cd:e1:a3:9e:01:
b2:e1:54:5c:5f:a1:e0:e0:e7:2c:50:8c:e1:d4:21:
35:ba:19:c4:30:4a:1a:53:fd:65:06:54:d0:62:0a:
34:40:57:00:a9:10:15:f3:3e:77:fe:fa:fa:f1:80:
60:71:9f:e3:9b:b3:2d:fe:9f:1e:5a:95:d4:a8:0d:
3c:d4:0a:4d:8e:21:7d:65:3c:71:91:a4:9e:86:6e:
7e:0d:66:72:fc:3b:05:0b:7a:c4:38:2e:e5:ae:08:
f2:80:10:84:df:f6:ae:06:5e:42:fc:0e:a0:46:54:
41:2d:ba:28:d8:ec:a5:ac:4b:61:24:c3:be:7e:43:
5e:f5:40:75:65:0f:4d:d7:db:6d:2e:75:27:9f:00:
8b:65:40:77:cb:a4:5a:a8:6f:9a:17:a5:2d:35:b1:
1c:40:8b:06:46:a9:38:f2:8c:af:82:e6:b5:ed:f5:
a8:7b:f1:1c:c7:c6:68:b2:06:b2:f0:f0:80:38:94:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:80:F4:17:58:DC:3D:66:E9:0C:FE:37:A3:F9:64:06:B3:9D:ED:1B
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/loD0F1jcPWbpDP43o_lkBrOd7Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.195.48.0/24
IPv6:
2a04:5781:3001::/48
Signature Algorithm: sha256WithRSAEncryption
47:a9:07:f4:14:74:3b:b5:05:cf:4e:d2:1a:aa:50:83:f7:6c:
ca:5a:43:1b:05:e1:4d:14:71:97:ca:41:a3:54:87:61:a1:f8:
6c:2d:49:9f:42:26:e2:4f:4a:dc:87:37:79:01:e9:c5:41:0d:
3a:1b:e9:6f:22:6d:f7:47:1f:7a:be:37:fc:c8:1e:a0:85:d2:
17:27:cf:34:38:16:9b:b8:ef:bc:e7:42:79:aa:60:97:19:96:
4d:d9:88:f9:47:20:f1:df:2d:22:40:c2:6b:dc:85:3c:58:cd:
e1:5d:9a:be:c9:d2:57:3c:ec:2c:58:93:4d:22:6a:9f:b7:1a:
a8:61:36:1a:be:22:74:6d:c8:9e:d0:dd:9f:3b:d6:ee:00:55:
6f:3f:f4:38:2b:cd:6d:cc:92:f8:66:6c:ca:35:52:fa:3e:c4:
3f:bc:58:38:a0:0e:44:b6:7d:43:46:36:b4:be:bc:cd:28:ac:
ac:f4:25:1f:fb:5f:89:94:4f:cd:bc:12:be:e6:36:fd:a8:08:
fb:1c:9c:11:2d:bf:74:50:ac:69:3d:a3:f7:a7:b2:4a:61:28:
26:0d:4b:89:13:8d:2f:f4:8d:97:1e:ed:7a:df:f0:85:d9:1b:
4f:0d:10:d9:5e:a3:42:ba:a8:bd:8f:e5:1b:81:92:50:f9:99:
37:ce:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:12:55 2024 by rpki-client on console-fra.rpki-client.org