Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/OsOtkimaMYDjDpcTTM0iLSc53Js.roa
File: OsOtkimaMYDjDpcTTM0iLSc53Js.roa (raw, json)
Hash identifier: teI9eD+9mqZwYR9KKnH/KvzpjMDb1CCNHgIraOadY94=
Subject key identifier: 3A:C3:AD:92:29:9A:31:80:E3:0E:97:13:4C:CD:22:2D:27:39:DC:9B
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79566CEDA5BB30313CAD1EB3D95B00C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/OsOtkimaMYDjDpcTTM0iLSc53Js.roa
Signing time: Tue 02 Jan 2024 00:31:46 +0000
ROA not before: Tue 02 Jan 2024 00:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205275
IP address blocks: 89.44.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:66:ce:da:5b:b3:03:13:ca:d1:eb:3d:95:b0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ac3ad92299a3180e30e97134ccd222d2739dc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:fc:77:32:12:5e:42:ff:b5:65:3f:62:2e:
ee:33:66:b7:54:33:d0:cc:0d:23:35:46:ce:cf:5d:
bd:77:9b:89:a4:fb:e1:2d:b9:6c:ec:ed:86:1d:38:
f5:19:05:c3:46:6d:73:29:10:54:e2:db:bd:92:73:
1a:8e:e8:5f:dd:19:37:c3:27:29:98:2e:1d:a0:8a:
c1:fd:f0:39:3a:a0:55:dd:23:ec:47:29:33:db:9d:
1e:19:a8:48:0c:14:ac:22:39:a7:18:0f:ef:91:b8:
b1:7a:b7:e4:4d:79:48:6e:90:a5:a3:15:08:af:0d:
76:00:43:76:e4:89:85:f6:f9:86:d1:e8:a6:0b:95:
c5:64:99:9d:ea:e5:ae:f1:e9:a7:86:b6:98:24:ad:
99:6a:82:46:9c:49:9d:a5:f0:24:a8:a8:d0:e1:44:
06:99:e1:0d:29:74:80:76:10:93:9e:11:06:a1:aa:
1d:6a:d6:47:a7:e9:72:23:fc:d4:2d:7b:89:be:30:
fd:0e:57:40:28:7d:32:0d:7a:f2:3e:f7:4d:ff:62:
68:dd:12:d1:6f:82:8e:0f:b3:55:be:c0:d9:f4:50:
7c:6e:58:13:ba:a4:21:02:a9:5f:60:8d:45:e5:c8:
bd:e8:92:6d:f8:66:58:ed:c3:8e:c8:78:f7:0f:65:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C3:AD:92:29:9A:31:80:E3:0E:97:13:4C:CD:22:2D:27:39:DC:9B
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/OsOtkimaMYDjDpcTTM0iLSc53Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.124.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f0:61:14:35:ae:f3:71:a4:d8:32:49:82:d0:6e:2b:23:fa:
0a:f8:14:d7:01:4e:04:50:b0:49:a4:a6:0d:0d:50:17:e8:31:
db:30:9d:ff:4d:c2:6b:f4:c0:0b:1d:2d:64:9b:e8:11:7e:7c:
40:7c:aa:91:2c:72:9c:81:03:c6:c1:44:1d:47:b4:f6:b8:ed:
bb:a9:2b:b4:41:33:07:e9:43:02:4a:ed:24:ef:27:98:27:3d:
17:3f:dd:d0:04:63:bd:3c:8e:f4:2a:e4:90:66:15:e7:ec:e6:
91:55:6d:a5:81:cd:00:85:ff:a8:1a:6a:ea:10:77:12:d2:6a:
63:ef:8d:b2:ef:47:ea:25:f0:f7:1a:46:c7:66:25:ec:be:9b:
d5:2f:10:a8:f9:d4:b9:76:2b:75:76:a8:80:49:9f:47:2b:39:
c9:26:af:15:6f:c7:af:94:c0:36:1b:07:01:e3:fa:fb:b6:f5:
69:72:0d:05:5f:f6:f3:a2:92:62:53:d0:32:a5:b8:96:6f:bb:
03:30:d5:b4:b3:56:0e:4a:6b:85:a1:e1:22:dc:79:c0:3e:3a:
6e:f1:63:6e:e3:ed:97:c8:60:2b:7e:b2:fa:72:bd:40:33:59:
78:db:97:8c:eb:1a:24:a4:fc:29:d7:dc:7d:86:10:95:89:e5:
5a:aa:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:22:20 2024 by rpki-client on console-fra.rpki-client.org