Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/cLoZFOm_ukzvbu6JDH84uCRwMK0.roa
File: cLoZFOm_ukzvbu6JDH84uCRwMK0.roa (raw, json)
Hash identifier: 3MT0t6YKrck03tpVHwlVRvdsOJHrLPEQs7XX7gZsY3A=
Subject key identifier: 70:BA:19:14:E9:BF:BA:4C:EF:6E:EE:89:0C:7F:38:B8:24:70:30:AD
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 018CC5008C6856C7BCA14F011B18D4D8A571
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/cLoZFOm_ukzvbu6JDH84uCRwMK0.roa
Signing time: Mon 01 Jan 2024 12:29:56 +0000
ROA not before: Mon 01 Jan 2024 12:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 194.169.245.0/24 maxlen: 24
176.103.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8c:68:56:c7:bc:a1:4f:01:1b:18:d4:d8:a5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 1 12:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70ba1914e9bfba4cef6eee890c7f38b8247030ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:4a:1e:51:04:58:38:72:3d:93:e1:fa:e1:
f7:a2:3d:34:fd:fe:77:42:15:21:1e:3b:9a:dc:75:
3a:ac:cd:ef:01:46:cf:ee:b6:26:e6:c2:2a:b6:77:
ad:4b:14:2b:65:98:8d:66:ca:7b:d8:2d:fc:ac:5d:
ae:d4:6d:55:7c:a0:ef:2a:88:54:af:b0:c4:b2:ff:
f8:64:7b:d3:a1:1e:0e:69:b5:2d:75:69:4b:ec:12:
0f:76:a9:6a:04:2a:05:2b:51:68:f1:12:48:3b:c4:
e4:0e:8b:cf:d0:11:af:eb:50:82:a8:e1:4f:60:b8:
73:70:46:23:61:71:bd:52:5a:43:02:96:b1:cb:99:
2a:9e:ce:06:89:03:b3:c4:3e:58:1a:92:93:7f:a8:
a1:a2:4a:ac:13:c0:8b:f8:53:9c:5e:e5:83:86:90:
f4:0a:0b:a6:79:94:85:e6:16:cb:83:fd:bd:ec:08:
0e:5a:5f:71:73:e4:11:b2:0a:11:36:89:5d:36:78:
cb:81:fd:07:ca:35:d4:d0:d2:e5:d0:07:c0:98:93:
2d:78:91:df:72:a3:f5:5a:a4:a6:36:25:2f:ed:85:
2d:00:78:9e:d4:1e:1e:4a:d7:2d:14:17:12:08:31:
40:72:58:9a:75:0c:6d:0a:3a:f6:ce:0f:84:ae:aa:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:19:14:E9:BF:BA:4C:EF:6E:EE:89:0C:7F:38:B8:24:70:30:AD
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/cLoZFOm_ukzvbu6JDH84uCRwMK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.222.0/23
194.169.245.0/24
Signature Algorithm: sha256WithRSAEncryption
be:88:6a:73:f6:90:29:ad:11:88:8c:48:94:cc:3e:92:b9:df:
2f:fd:0f:17:d3:a8:d4:8b:ed:e8:64:51:6f:0e:7f:a7:c8:6f:
d2:0d:3e:74:26:96:7d:6b:c5:52:d6:75:08:99:5f:32:34:06:
ff:50:25:ae:26:4d:34:55:7e:3e:72:93:cd:e6:0a:25:87:53:
0b:b7:3e:31:75:9f:d4:13:bd:a9:6a:43:dc:b0:36:26:d4:b3:
f2:0c:ee:e4:db:b8:02:2c:6b:35:0f:32:57:c0:ec:49:ac:96:
00:9a:71:a7:10:eb:6c:1d:1a:15:70:2b:36:97:bd:35:ef:0b:
d4:5e:62:68:91:ca:82:eb:d5:83:63:d5:37:56:66:fd:fe:0c:
12:84:b3:86:4e:c3:c5:f0:60:1f:76:8a:9f:f4:32:0c:e3:fa:
9f:3b:49:52:f4:d3:58:8b:a2:63:60:79:67:1b:5a:5c:d1:22:
4f:9b:bf:40:ed:5a:5c:aa:0d:3e:e9:c6:77:73:94:de:f6:6f:
0a:ac:e9:9b:6f:90:f4:ed:49:f9:a3:bb:45:6c:af:1a:4b:53:
e6:00:dd:e2:6c:29:61:f9:b5:d1:6a:30:2a:6b:fe:8f:9a:38:
df:f8:70:e6:d5:4e:34:1d:89:46:35:2b:e9:fd:ad:26:db:38:
fd:42:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:59:57 2024 by rpki-client on console-fra.rpki-client.org