Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ovbL4mQ80Pd-9b7OudyHloAibE4.roa
File: ovbL4mQ80Pd-9b7OudyHloAibE4.roa (raw, json)
Hash identifier: psH1NK/AXPukXHkrnavPrNkw6I6dWZnxAf5hJ7GaeWU=
Subject key identifier: A2:F6:CB:E2:64:3C:D0:F7:7E:F5:BE:CE:B9:DC:87:96:80:22:6C:4E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018D1751D106D793DE19408F6AAD384CA54A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ovbL4mQ80Pd-9b7OudyHloAibE4.roa
Signing time: Wed 17 Jan 2024 12:07:34 +0000
ROA not before: Wed 17 Jan 2024 12:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 5.8.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:51:d1:06:d7:93:de:19:40:8f:6a:ad:38:4c:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 17 12:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2f6cbe2643cd0f77ef5beceb9dc879680226c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:40:7d:05:43:9c:7e:81:61:bd:55:de:eb:
7d:38:f1:b8:52:22:55:64:b3:d7:54:2f:e1:02:57:
d7:af:9e:1d:a0:1b:b5:12:42:6c:a2:79:34:ea:5f:
66:a9:40:0a:05:e4:3b:3a:18:15:fd:7e:9b:90:7d:
ba:ab:6e:a4:61:20:31:96:9a:c6:ed:b8:e6:04:56:
fd:f7:94:6d:bc:4d:19:27:f5:82:7a:9e:41:40:ae:
8a:7e:4d:a2:f7:b4:3d:26:0d:0d:6b:e3:fc:8c:95:
b5:3c:87:31:5f:a8:fe:0b:ae:23:08:ec:fa:fb:f0:
dd:a6:1c:ee:7c:c9:10:97:d6:78:92:79:4e:01:4e:
f4:87:4a:08:99:a4:ac:06:9b:c3:ca:d7:bd:09:9d:
8c:7c:dc:78:5f:97:60:ad:a4:0d:2a:9e:ae:e3:19:
9a:ea:e2:6f:0c:f4:c9:bc:3e:8a:13:93:75:48:11:
90:49:ce:14:46:d5:74:49:6c:ce:4d:1b:47:c0:86:
1a:c7:09:aa:2d:52:5d:04:35:c2:20:98:6e:b5:fc:
20:55:89:70:1d:4a:33:aa:f2:7e:32:3f:96:4e:9f:
ad:d1:ce:67:46:e9:87:64:ab:d2:bf:9e:d8:16:6c:
b4:0c:58:93:89:6a:4e:45:6b:aa:a6:54:7d:14:f9:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F6:CB:E2:64:3C:D0:F7:7E:F5:BE:CE:B9:DC:87:96:80:22:6C:4E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ovbL4mQ80Pd-9b7OudyHloAibE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:19:32:45:3c:ad:6a:7b:6b:5a:8f:97:12:a2:2c:0e:15:53:
e3:72:12:de:bb:c7:e5:3e:53:e3:1d:b8:91:4f:fd:b5:e8:b0:
04:74:b7:aa:49:bd:bf:a7:20:e2:85:04:bf:f6:6f:54:ac:7f:
85:7a:aa:97:63:68:58:57:e9:de:4b:12:2d:0f:d0:e9:d6:bf:
cd:5c:67:19:51:93:36:c8:1b:4f:10:b8:7b:da:a9:1c:7c:de:
47:d2:fa:ab:6e:e9:a8:fb:0b:7c:d2:91:2b:24:55:43:3a:a9:
b1:f1:99:4b:f3:7b:7d:c9:8a:ee:66:5c:f2:bd:b7:8c:96:5a:
23:88:03:7c:81:a2:c5:60:13:38:2e:e1:50:aa:9c:51:42:00:
63:80:58:50:ba:ca:20:99:27:cc:69:b1:36:cc:0a:e1:f5:8e:
c8:73:19:37:fd:3d:a2:9c:31:a7:4e:49:17:55:f4:d3:10:f3:
80:2a:7d:c6:ff:f8:d4:30:d0:84:30:82:94:68:e5:4f:77:22:
eb:bf:76:45:5f:a4:35:dc:39:64:84:e5:28:73:21:ae:1a:a7:
e3:58:92:f6:c6:3c:a8:36:2b:5e:99:a4:54:d4:61:82:82:97:
69:60:bb:c9:72:61:5e:1e:b6:e4:76:99:86:af:1a:6d:1c:0b:
ae:44:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:14:12 2024 by rpki-client on console-fra.rpki-client.org