Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/OWJQlf-6clcUixfoFOWZaB1XClw.roa
File: OWJQlf-6clcUixfoFOWZaB1XClw.roa (raw, json)
Hash identifier: OlTPdOcI0kN2FBNVbaTP9ZxJbQaDdPJN1x/fCRiUFqo=
Subject key identifier: 39:62:50:95:FF:BA:72:57:14:8B:17:E8:14:E5:99:68:1D:57:0A:5C
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 018CC4935F44690933011BD8D18933A56E58
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/OWJQlf-6clcUixfoFOWZaB1XClw.roa
Signing time: Mon 01 Jan 2024 10:30:41 +0000
ROA not before: Mon 01 Jan 2024 10:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20857
IP address blocks: 193.111.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:5f:44:69:09:33:01:1b:d8:d1:89:33:a5:6e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Jan 1 10:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39625095ffba7257148b17e814e599681d570a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:f4:d5:61:0e:c7:43:df:51:6e:62:94:4d:
3e:cb:7f:8e:70:bc:7e:6b:38:de:06:e9:9a:0f:9a:
7f:2e:12:03:c9:ce:00:d1:a7:28:95:d3:ae:1d:f0:
dd:41:d0:f9:b2:fd:f4:e7:68:3e:39:20:f9:d5:56:
50:3b:51:8b:25:91:49:45:ac:ad:87:ac:05:2b:5c:
3d:b4:26:65:c5:6a:8c:20:b2:b2:56:c1:39:4f:22:
a5:f5:47:d6:1b:df:31:d3:b1:99:28:98:b3:23:04:
7d:0d:9f:bc:05:00:fd:fb:04:94:10:4e:bf:05:b9:
8e:30:d2:f2:90:e6:cd:21:0e:e1:37:bc:8d:a5:71:
41:26:61:77:9f:7e:10:d3:30:c0:71:b5:4f:09:19:
cc:96:b7:2f:21:35:65:25:fd:1b:e4:d0:86:d6:68:
89:40:7b:c6:d5:1c:6b:1f:c2:2a:ae:20:af:ea:6e:
2d:53:86:fb:c1:48:65:07:99:b3:03:51:8f:07:7f:
b5:c9:b8:63:1a:80:d8:4d:f7:0d:6c:04:c3:a2:d9:
8d:09:db:67:a7:83:da:38:0c:9a:68:e6:0c:97:1a:
13:ba:93:f7:ce:bd:7b:78:39:50:47:67:1e:a0:f8:
e6:89:de:e5:0d:73:03:fb:c3:9f:64:fa:e1:41:01:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:50:95:FF:BA:72:57:14:8B:17:E8:14:E5:99:68:1D:57:0A:5C
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/OWJQlf-6clcUixfoFOWZaB1XClw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.95.0/24
Signature Algorithm: sha256WithRSAEncryption
02:46:cb:90:de:e7:45:ad:12:b2:30:78:6b:24:e6:f7:03:2a:
2b:10:50:b8:12:33:39:04:47:4f:85:df:ea:38:fa:14:5d:f6:
20:17:41:64:76:8d:f9:2b:bb:ce:aa:4f:45:d1:9a:52:53:29:
b0:3e:f4:9b:2d:89:16:7c:57:ed:bd:8b:91:91:f2:51:2a:cc:
a2:1d:81:4e:91:e0:e3:d4:8a:d5:07:21:c5:eb:45:06:d8:fb:
7e:d9:aa:59:d2:1a:df:35:23:0d:27:f7:8e:49:aa:0d:80:8e:
04:5d:23:e8:61:a6:fd:94:a7:1d:9e:33:07:ee:67:97:27:63:
b5:17:28:f4:29:57:42:8e:10:fb:75:d0:1a:85:5e:f5:23:86:
84:99:74:e4:e2:36:5f:b9:5f:04:78:61:cd:fa:ee:f7:24:80:
d5:be:b8:be:fd:a5:06:d6:70:af:56:a0:32:9b:db:92:74:cb:
02:ac:44:bf:99:cb:c4:a4:f0:41:fa:26:49:9e:9b:e3:c6:be:
31:e1:8a:20:06:91:91:1a:d2:2f:bc:bc:7a:76:71:d3:ff:de:
9a:ae:0e:71:19:60:16:41:e7:71:85:c2:70:31:a9:1a:76:d3:
62:70:b2:ca:40:89:88:73:d9:38:fa:17:72:de:74:db:ec:95:
1b:a3:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 04:05:28 2024 by rpki-client on console-ams.rpki-client.org