Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/OryOSgDE24xa4fkZAbyv0f-248k.roa
File: OryOSgDE24xa4fkZAbyv0f-248k.roa (raw, json)
Hash identifier: LFBv1k3+SydS/oCMTGBgDAcgIGaK/9Puc8BY/PlA7/0=
Subject key identifier: 3A:BC:8E:4A:00:C4:DB:8C:5A:E1:F9:19:01:BC:AF:D1:FF:B6:E3:C9
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 018FA5E77E21926FCD46201098D33999B9B3
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/OryOSgDE24xa4fkZAbyv0f-248k.roa
Signing time: Thu 23 May 2024 14:42:42 +0000
ROA not before: Thu 23 May 2024 14:42:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 86.111.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:e7:7e:21:92:6f:cd:46:20:10:98:d3:39:99:b9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: May 23 14:42:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3abc8e4a00c4db8c5ae1f91901bcafd1ffb6e3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:39:70:64:3b:4d:eb:46:45:c0:b2:37:f9:
ff:6c:c9:f1:ad:d3:46:ca:02:89:3d:19:62:57:87:
58:06:7c:93:04:2f:75:12:b0:a5:a9:d2:d3:15:20:
d9:d5:6c:1c:36:4e:13:a3:b8:4e:43:3c:e4:d7:c9:
5b:aa:5f:f1:fe:27:79:2b:bc:1d:8d:8c:5f:e8:f1:
3b:60:b8:69:02:98:e5:c9:e2:ab:49:ff:6a:67:e7:
52:a8:0d:c8:2c:e1:e3:52:75:3e:9d:51:58:31:ee:
11:9c:59:38:a7:32:46:69:c2:03:bb:55:a4:f1:0e:
c2:31:76:bb:cc:a4:c3:a0:82:0d:cb:7b:8c:20:e6:
a5:3f:97:9a:e0:8d:e3:b1:7e:c0:7c:d5:d1:2d:83:
b2:12:e6:4e:42:c4:93:0c:fe:56:57:55:7a:ed:37:
14:2d:83:b9:63:d0:e5:e0:a6:c7:7a:e2:21:ea:f7:
80:84:73:dd:07:70:7b:0b:ac:d2:86:5b:47:d3:34:
f7:42:f4:be:27:f8:c7:67:80:b1:4c:25:2e:34:62:
56:08:09:4b:96:18:f8:0b:c8:aa:65:b1:59:d7:0a:
af:2a:d9:a0:c3:fa:74:09:98:21:90:7c:44:b7:96:
bd:4f:d0:73:14:74:5a:1b:8b:8f:f3:94:d9:ae:e8:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BC:8E:4A:00:C4:DB:8C:5A:E1:F9:19:01:BC:AF:D1:FF:B6:E3:C9
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/OryOSgDE24xa4fkZAbyv0f-248k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.214.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f1:96:7f:02:e1:04:16:3b:0c:be:74:86:25:fd:22:90:1b:
08:c1:63:29:36:14:14:27:06:78:e0:f0:b3:64:75:7b:a1:83:
77:12:10:f2:16:0d:78:99:ae:14:c9:7c:f3:a4:94:75:e7:ea:
54:f1:f8:f1:3a:86:7b:b5:9e:32:40:36:70:78:e8:96:0b:7e:
df:df:37:4e:83:f6:de:05:d9:6b:6e:3b:7f:18:fe:3b:99:a6:
9e:3e:03:3c:54:51:7f:20:7d:0f:2c:f4:82:73:3d:8a:69:f5:
e8:8f:68:45:25:72:be:86:95:f0:6a:60:e9:1d:76:20:4a:20:
42:46:50:da:e2:92:b6:63:a9:6b:5f:1e:46:e1:11:20:23:f2:
f4:e4:ef:b7:36:1b:71:5f:ff:41:23:b7:c3:7e:57:e1:f4:00:
9f:68:e3:d7:3a:d4:f6:3d:67:0b:d0:6b:97:f1:1b:44:ca:75:
bc:aa:b5:ac:05:b3:bf:5b:10:33:d2:f8:b6:1a:c3:e9:d1:d6:
f9:d9:7d:08:73:79:c8:68:ea:3e:3b:9f:ca:01:58:59:91:61:
c2:51:02:31:47:a0:20:c2:ee:17:82:61:b3:2c:66:9b:aa:11:
13:08:82:66:aa:1f:6a:62:1f:8a:f6:43:af:f1:a7:ce:96:ec:
30:d3:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 06:16:13 2024 by rpki-client on console-fra.rpki-client.org