Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/oRNmNCc3MMhBkXSmhIPXkjENDwY.roa
File: oRNmNCc3MMhBkXSmhIPXkjENDwY.roa (raw, json)
Hash identifier: 3zZyv41LxqdSyUwfRJUBlhvAaY8g9lyLpudQItirRwM=
Subject key identifier: A1:13:66:34:27:37:30:C8:41:91:74:A6:84:83:D7:92:31:0D:0F:06
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 018CC2DB3351F6EA657ED31E79BAF7E5DDF1
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/oRNmNCc3MMhBkXSmhIPXkjENDwY.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201863
IP address blocks: 212.146.132.0/24 maxlen: 24
212.146.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:33:51:f6:ea:65:7e:d3:1e:79:ba:f7:e5:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1136634273730c8419174a68483d792310d0f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:54:2e:a9:49:32:1b:53:ba:3c:83:44:1d:
e6:15:0a:f2:bc:84:18:e8:8a:f9:4e:69:7c:8d:f0:
6c:98:c7:08:79:20:2e:8f:b2:d3:d5:f9:6a:6a:e8:
18:c5:25:24:d4:c1:dd:29:df:6c:c4:7f:ec:95:49:
5d:43:dd:73:6b:44:d9:28:82:00:da:4f:35:2f:66:
f8:45:06:20:d2:0c:c8:a9:a2:2f:a9:3c:49:d4:16:
36:f1:f7:96:fa:3c:d8:56:91:1f:7d:ec:03:eb:e5:
05:1f:51:98:7b:35:b5:19:2d:db:e0:62:b5:f9:6f:
4d:bd:f1:d6:32:f0:25:87:aa:61:06:28:1a:7b:36:
82:da:d3:d2:2e:6b:a0:b8:46:7f:b7:8d:54:dc:f6:
4e:38:14:a4:54:de:7b:43:a7:21:77:1d:88:60:f9:
65:90:b1:bd:62:59:43:3e:61:a0:95:73:2c:dd:7b:
04:c4:18:61:4f:a2:77:2b:14:49:57:47:a2:28:3f:
19:38:ef:3c:ce:88:16:87:23:8e:55:9e:f1:c8:6a:
b6:8a:36:37:d7:e8:ea:ad:a3:91:2d:b6:d8:2c:29:
c2:75:01:f1:c9:7c:31:21:64:b1:b5:2f:5a:a5:8b:
d8:67:3d:14:6e:b6:f1:e9:d2:a9:5c:e6:ba:09:9f:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:13:66:34:27:37:30:C8:41:91:74:A6:84:83:D7:92:31:0D:0F:06
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/oRNmNCc3MMhBkXSmhIPXkjENDwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.146.132.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:c0:14:99:60:74:f4:c3:f4:19:17:9a:06:d8:7f:16:5a:96:
4f:29:77:a6:11:f6:15:d2:77:62:95:dd:e0:d1:90:6d:b9:d9:
a2:12:28:76:77:78:56:cf:cd:72:9a:66:7e:4b:9c:8e:1e:52:
77:d1:e9:fa:bb:fa:88:c0:97:b3:a3:c6:dd:b1:f3:8c:43:03:
bd:0c:82:ea:8e:a1:eb:ed:5c:d0:ff:93:1d:60:4a:1e:6e:16:
59:45:02:51:ee:4e:34:05:4e:be:17:c1:cf:a2:b5:5c:19:61:
e0:85:43:51:29:9c:9e:1b:85:b7:a7:ed:23:ed:16:7b:5a:2c:
d5:3d:40:3f:6f:75:3a:19:33:c1:b2:22:bf:c7:b7:84:da:19:
ca:93:be:a5:2d:cf:39:f3:06:3c:3f:f9:0a:ca:5c:9c:82:2c:
06:95:e8:7f:d3:c0:3b:d2:cc:2e:0e:c3:2e:26:65:13:e2:90:
66:07:82:65:9f:1c:82:0b:42:64:c1:6a:a2:c1:01:7d:37:a9:
1f:77:6d:d4:61:11:cc:0c:4e:0b:94:56:62:d6:5d:60:24:34:
4b:32:b9:2d:60:f3:41:46:cb:8e:b4:11:85:71:49:ba:22:a3:
79:58:6c:75:05:e6:f8:95:8d:92:e4:8b:ae:05:71:43:7a:93:
d8:d4:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:00:15 2024 by rpki-client on console-fra.rpki-client.org