Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/oeR005IOyaE0H5ydOaBuU5HRxEk.roa
File: oeR005IOyaE0H5ydOaBuU5HRxEk.roa (raw, json)
Hash identifier: WPeWR144fe5VvTmpBQQpsBofr1MYiSlesTEJQ/eNuWg=
Subject key identifier: A1:E4:74:D3:92:0E:C9:A1:34:1F:9C:9D:39:A0:6E:53:91:D1:C4:49
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE9EC0830F8AA18A63680FF5E0B4E
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/oeR005IOyaE0H5ydOaBuU5HRxEk.roa
Signing time: Tue 02 Jan 2024 08:32:55 +0000
ROA not before: Tue 02 Jan 2024 08:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48698
IP address blocks: 94.155.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e9:ec:08:30:f8:aa:18:a6:36:80:ff:5e:0b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1e474d3920ec9a1341f9c9d39a06e5391d1c449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:7e:78:da:71:bf:f4:d2:ab:da:7e:20:f4:
80:12:6a:12:c9:3f:15:b7:d4:65:b5:f4:53:45:22:
bc:3b:9a:c9:0a:f0:af:5c:9d:ef:3c:1e:1d:cc:00:
2d:88:85:7a:46:46:0c:36:a1:f8:fb:e7:52:63:43:
13:a3:9f:73:57:74:5e:3d:c9:72:db:60:71:e9:72:
de:45:68:47:09:b0:fd:f5:b1:ff:57:d0:58:86:73:
ba:c2:9a:62:c5:4f:e4:61:c2:32:79:8d:39:97:27:
ee:a1:e5:7c:42:3e:48:51:72:74:4b:7b:d0:19:2d:
97:b6:46:97:96:09:88:0e:be:55:e7:b5:1a:f3:71:
d7:5f:42:19:9c:cc:a0:e0:b9:da:78:39:83:6d:50:
7b:0f:3b:89:84:2d:f8:7c:28:7e:97:58:63:40:4a:
38:14:c9:9e:27:01:99:9f:cb:08:10:c4:90:ab:dd:
32:a6:d9:05:66:27:df:ee:d0:1a:22:3a:95:a4:f4:
80:43:a4:8f:2d:bb:53:aa:bb:da:a9:5d:8d:93:c6:
6a:7c:0c:27:94:50:31:36:6d:cd:5e:c3:18:49:33:
d2:45:01:be:92:60:37:83:99:c0:22:4f:e7:e7:98:
cd:d0:15:d1:ea:da:13:23:7d:cc:1b:53:cb:78:2f:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:74:D3:92:0E:C9:A1:34:1F:9C:9D:39:A0:6E:53:91:D1:C4:49
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/oeR005IOyaE0H5ydOaBuU5HRxEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c4:e9:42:42:b3:71:0a:60:f3:cd:60:d5:29:8a:bf:98:ff:
17:5a:e0:f0:bb:c5:a2:87:05:6c:1b:50:72:92:fa:fa:ae:d1:
dd:6e:2c:d4:7d:69:a9:58:25:85:bb:2f:8e:7d:37:0e:ff:61:
ff:fe:bb:29:f5:b2:f4:f9:5d:52:df:1a:de:9e:89:17:fc:07:
2f:08:71:be:d7:b7:fc:a8:2f:a6:d4:d6:6b:bc:6f:db:50:ab:
51:61:92:16:bf:49:a2:b1:15:6a:32:e4:70:2b:c6:9f:c6:dd:
8b:a1:cf:fb:47:94:a4:40:e3:0b:20:bb:81:03:c3:e1:23:89:
64:9c:0c:c1:96:e9:fa:a9:c6:56:31:be:e7:c7:c0:64:c5:fe:
2a:07:13:17:2f:a2:8f:03:e5:a3:a1:11:0c:ba:07:a9:b5:62:
86:d4:99:7b:52:b1:00:9d:41:c8:83:9b:d7:25:7e:e8:00:db:
ef:88:85:b3:3c:c6:e7:7b:1b:58:61:cc:eb:7c:1b:45:ae:5a:
61:19:8c:72:a3:6d:6b:31:75:02:ca:8d:4e:6a:06:ad:7f:40:
2b:e2:b8:b8:ae:0d:35:e2:57:f7:23:41:ab:ac:4c:4b:25:a6:
cb:5a:f2:08:65:ea:cc:5a:64:60:f7:70:ca:f5:0f:21:69:67:
db:41:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:44:38 2024 by rpki-client on console-ams.rpki-client.org