Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/OIhyWOTKjlptxci_fO3PEZsxwgk.roa
File: OIhyWOTKjlptxci_fO3PEZsxwgk.roa (raw, json)
Hash identifier: w6Xub6dt16GDeGADmTQgAO1Jtz3XszSh33NrLDUKASk=
Subject key identifier: 38:88:72:58:E4:CA:8E:5A:6D:C5:C8:BF:7C:ED:CF:11:9B:31:C2:09
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 018CC794053E16CE1E17C05AC83093793ECF
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/OIhyWOTKjlptxci_fO3PEZsxwgk.roa
Signing time: Tue 02 Jan 2024 00:30:15 +0000
ROA not before: Tue 02 Jan 2024 00:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 185.161.150.0/24 maxlen: 24
185.238.176.0/24 maxlen: 24
185.180.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:05:3e:16:ce:1e:17:c0:5a:c8:30:93:79:3e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 2 00:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38887258e4ca8e5a6dc5c8bf7cedcf119b31c209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:13:b5:79:75:9f:72:fc:34:16:1f:c1:dc:
7f:19:a1:da:4b:d3:f3:3f:dd:2b:5e:d5:67:f4:19:
eb:98:da:4f:1a:08:b6:e6:aa:e8:46:d5:3d:b2:cb:
85:47:e7:87:7c:48:59:10:9d:78:1f:9b:45:e3:d3:
61:45:d4:82:1c:c2:30:c1:13:83:38:78:70:28:af:
43:3c:1e:4f:60:c8:bc:d3:8e:e7:11:8d:51:c5:6d:
8b:0d:bd:ca:eb:6c:2d:63:13:e1:aa:c2:c8:d7:d5:
0a:00:2c:31:d8:8b:68:d5:2b:cc:82:f1:1f:a8:f1:
54:25:b5:5d:d8:51:83:7e:e8:69:a2:55:3f:fd:65:
7c:09:7e:f3:5f:75:55:98:18:44:ed:15:15:ba:5f:
1f:f5:08:52:e4:b5:ff:22:fc:a2:20:68:92:cb:cb:
99:e4:ff:3a:47:6c:d8:ee:05:14:66:82:e6:5a:48:
98:c1:79:12:7e:e6:c5:90:40:8b:f4:c7:c0:e8:93:
16:d1:41:fb:eb:63:f1:22:eb:1b:18:8c:0f:54:1c:
b5:08:50:58:6b:ee:3e:18:38:39:2a:83:d3:13:ec:
79:64:31:8c:f0:57:4a:4a:41:bb:cd:b8:26:19:ff:
e5:74:91:f4:91:c6:eb:89:17:2a:19:ef:ee:44:b4:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:88:72:58:E4:CA:8E:5A:6D:C5:C8:BF:7C:ED:CF:11:9B:31:C2:09
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/OIhyWOTKjlptxci_fO3PEZsxwgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.150.0/24
185.180.193.0/24
185.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d3:be:e4:e0:20:5d:5c:0e:d4:a7:23:c8:26:f3:28:44:25:
00:50:c1:c6:51:fc:79:31:ee:b9:24:33:e7:c9:76:1e:02:af:
de:51:3a:c6:0f:95:e5:d8:5d:d6:cc:c0:4e:b8:9b:3d:08:80:
5a:a8:36:c3:52:bb:3f:fe:0a:21:f6:c7:0d:4c:09:91:6c:ed:
d0:6f:aa:80:42:68:f4:6d:1e:3a:68:72:86:76:ee:7c:93:d2:
10:ad:19:18:63:3b:49:2e:8c:be:4a:db:70:8e:72:64:ed:eb:
92:2f:c9:ab:83:af:c5:06:62:28:f5:3e:6b:43:50:b1:40:bf:
93:71:d2:40:e7:a1:43:18:8e:b7:63:65:7f:7d:64:49:a1:50:
df:aa:c7:d9:e0:96:ec:89:19:f7:03:6e:d8:e1:23:2b:a0:50:
74:d0:99:d8:ea:0f:ad:67:10:56:cc:28:10:0e:b5:69:8d:25:
9e:39:8f:f1:7e:7b:d7:cc:2f:04:ae:64:9a:5d:ec:be:58:7a:
38:00:83:44:74:f7:11:46:4c:70:22:7f:9f:13:6a:54:5a:9a:
29:d8:e3:ee:da:d6:7b:3e:a3:ef:7e:5b:c8:a3:fa:9f:81:02:
93:b7:03:7e:4a:d5:af:40:fc:13:6f:19:41:a6:4c:72:3a:f8:
a7:ab:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 21:44:39 2024 by rpki-client on console-ams.rpki-client.org