Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ohmxW7qpi3xWS9YPKcPwf9HzDjQ.roa
File: ohmxW7qpi3xWS9YPKcPwf9HzDjQ.roa (raw, json)
Hash identifier: 99GktVCYPQMedI/AQFFuEoc3Z2T6kLNqfgnaUT5VjnY=
Subject key identifier: A2:19:B1:5B:BA:A9:8B:7C:56:4B:D6:0F:29:C3:F0:7F:D1:F3:0E:34
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348DF7429854536004C6F905ACEBFBE
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ohmxW7qpi3xWS9YPKcPwf9HzDjQ.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199802
IP address blocks: 194.209.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:df:74:29:85:45:36:00:4c:6f:90:5a:ce:bf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a219b15bbaa98b7c564bd60f29c3f07fd1f30e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:d4:1d:75:ea:4a:f5:19:10:73:f3:c8:92:
f9:f2:01:5b:f5:72:bd:32:eb:98:a9:ee:3d:61:44:
bb:9b:7e:3a:83:4c:6b:11:e7:bc:5f:28:f7:e2:f2:
45:be:41:0d:78:14:3d:73:b4:99:f3:2c:83:36:fd:
03:73:6c:54:e7:df:b0:2b:46:fb:59:ec:49:7d:8c:
1c:26:b3:88:e2:34:8f:68:4a:39:ef:57:9f:c4:0e:
3a:84:31:95:ae:7e:16:50:13:7a:22:d3:c0:24:37:
53:ed:6c:c9:3b:1e:ac:cf:a9:2c:5b:a1:5e:74:be:
08:6b:29:f7:24:a1:f4:b8:9c:52:06:42:d7:56:95:
eb:db:64:9b:78:e2:08:cf:25:70:40:19:d7:b4:8b:
ad:18:5e:c1:9d:71:d3:dd:b8:e6:da:0d:6a:a8:40:
15:e5:e6:d2:08:85:f9:e7:fa:38:a8:63:87:b9:fb:
df:f4:cf:18:40:db:eb:5d:44:84:8f:30:d7:1f:e7:
c3:b1:1c:8e:00:91:31:a8:5c:8b:1d:06:76:98:a5:
e0:e1:36:c8:3c:fb:91:d9:16:13:50:70:60:fd:86:
ac:5c:ec:4a:60:c8:51:bd:e7:89:c3:85:85:e3:ad:
59:f4:4b:37:1b:be:d2:b7:b4:c4:06:9c:84:69:6e:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:B1:5B:BA:A9:8B:7C:56:4B:D6:0F:29:C3:F0:7F:D1:F3:0E:34
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/ohmxW7qpi3xWS9YPKcPwf9HzDjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0c:e6:19:75:78:d1:cc:fa:59:78:f8:fa:80:45:ee:03:8b:
d4:e9:89:67:95:91:24:7e:93:95:46:f8:ca:98:7a:3c:10:3b:
9e:e2:6c:02:5c:9a:09:c8:a8:fe:0f:d2:6e:af:6c:2a:f9:53:
dc:b6:2a:b8:8d:8d:25:20:3b:a7:b0:e2:4b:98:0c:87:6c:09:
12:e4:84:b1:b0:ae:67:e0:aa:71:ba:ef:c3:d8:7f:44:9f:e2:
e6:28:1b:ff:31:77:2e:25:cd:fa:8e:d2:3f:44:72:7c:31:90:
02:f9:7e:e3:01:8f:e3:1f:c2:b8:77:7d:88:ca:02:48:70:e8:
e9:07:25:58:4b:f4:0a:5d:5c:94:50:65:89:56:e1:26:d2:5e:
42:42:8f:67:a6:18:8c:da:5d:1a:f0:6b:3d:39:4a:4d:16:9d:
48:ed:6c:48:c2:dd:37:f7:db:c2:af:c0:fd:2d:0e:c3:59:37:
e0:98:46:29:01:cc:0d:91:2f:0e:48:db:59:ff:26:16:7f:fa:
cb:8d:15:da:90:4f:7c:59:33:60:35:cb:70:4c:28:dd:a4:b2:
6f:1d:75:5f:07:ef:38:55:56:a8:f4:23:1b:a0:c0:19:01:d2:
2e:8f:a6:16:c3:1c:11:24:7e:d6:53:78:2e:65:87:7a:44:5c:
b0:80:aa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:27:20 2024 by rpki-client on console-ams.rpki-client.org