Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/0mEloQ-vg-lMDokWyZZNhb8WvJA.roa
File: 0mEloQ-vg-lMDokWyZZNhb8WvJA.roa (raw, json)
Hash identifier: cSY8cb9OPa40lnNS/4umgwKdGglEBaun8PPiL6BqF2g=
Subject key identifier: D2:61:25:A1:0F:AF:83:E9:4C:0E:89:16:C9:96:4D:85:BF:16:BC:90
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 018CC9B88DA3334B01789016DD69AC604F98
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/0mEloQ-vg-lMDokWyZZNhb8WvJA.roa
Signing time: Tue 02 Jan 2024 10:29:24 +0000
ROA not before: Tue 02 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34946
IP address blocks: 94.126.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:8d:a3:33:4b:01:78:90:16:dd:69:ac:60:4f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jan 2 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d26125a10faf83e94c0e8916c9964d85bf16bc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:4a:0b:61:e3:d3:d3:5a:80:19:5c:0c:e4:
93:7c:7c:e7:96:a2:3f:d7:30:67:69:2d:f3:07:34:
7e:a8:93:23:37:c1:2b:3d:c0:81:1c:ad:1e:3d:27:
10:b2:fb:fb:6c:59:bb:78:aa:3d:fc:99:87:43:1e:
f0:68:5e:73:43:2a:c9:5d:e3:82:84:ee:e6:84:71:
0b:ab:55:c8:d2:c9:fd:1a:ee:cf:47:c6:47:82:cd:
24:ee:19:af:2c:b5:b3:f2:ae:ed:b7:86:ee:63:7d:
b2:0e:f8:c4:0b:71:8e:b6:4b:00:cc:25:e9:0f:56:
e9:89:ff:cc:b6:28:10:01:6d:86:40:15:40:19:35:
b0:cb:1b:52:97:b6:75:a8:d4:8b:f4:4d:f6:01:72:
e9:61:2e:b1:8b:30:14:cd:e7:4e:8a:9f:25:2d:ef:
47:7e:24:68:33:6a:0f:85:6a:9e:41:54:84:e3:ce:
f7:80:74:f2:9f:84:70:c9:4c:e6:e8:33:4a:be:bf:
06:8d:c0:cd:03:ff:37:34:7a:d8:be:64:99:fc:2c:
74:1b:41:eb:33:a4:7e:d3:d1:eb:9e:05:7e:83:1b:
aa:c2:ea:8d:f8:f9:56:ce:15:95:19:af:8d:b7:26:
51:82:24:7a:de:30:66:71:a4:89:c7:52:c1:1f:5e:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:25:A1:0F:AF:83:E9:4C:0E:89:16:C9:96:4D:85:BF:16:BC:90
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/0mEloQ-vg-lMDokWyZZNhb8WvJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.80.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:c0:f8:80:d3:8f:09:07:7f:e7:67:a1:80:74:d7:51:65:f9:
c9:68:63:9a:fe:eb:ee:41:83:91:68:bc:84:96:f8:7c:13:49:
e6:e3:1d:c0:2e:fa:7f:3d:14:0c:b4:61:8a:e5:a6:e6:10:61:
11:8a:33:0a:88:0d:d4:e9:8f:75:51:be:5f:06:b0:10:09:fa:
ef:05:0b:57:0d:49:33:b2:20:29:6b:22:9d:fa:a3:cd:6c:1a:
22:8c:18:ce:7c:2c:76:6b:b2:13:40:99:d2:67:c3:46:65:3c:
57:61:8d:41:37:5c:53:7b:86:0b:f7:04:3f:c2:86:cf:9c:c5:
c5:61:01:cd:ad:99:2e:68:24:d1:96:90:1a:e2:df:28:1b:10:
06:8a:78:2f:84:c6:40:b6:57:7b:a6:00:96:0a:94:74:58:19:
18:12:79:fa:7f:c3:9c:47:dc:b1:fd:8c:0f:44:d2:8f:db:3f:
dc:1b:fe:fb:81:6d:af:34:86:d1:0c:f6:86:ef:34:85:6c:30:
c5:d7:ae:2e:67:72:26:c1:25:41:02:df:6b:13:b5:e0:9a:8e:
42:26:2b:64:3c:e6:ca:8a:79:3d:b7:12:66:55:7e:52:6b:f8:
67:ba:8b:e0:52:f0:28:bb:dd:12:5d:f4:3d:f1:32:3d:b2:54:
85:4e:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:29:10 2024 by rpki-client on console-ams.rpki-client.org