Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4oj2qy1ix5PDYmc5vjx5REOUfZI.roa
File: 4oj2qy1ix5PDYmc5vjx5REOUfZI.roa (raw, json)
Hash identifier: ovtOrLVZkOjPAkfSbjwA9BOSZtoEgZLTB8l8NSfVpoM=
Subject key identifier: E2:88:F6:AB:2D:62:C7:93:C3:62:67:39:BE:3C:79:44:43:94:7D:92
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018F62EEA167DAF1CBEF73F6049F22F1A96B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4oj2qy1ix5PDYmc5vjx5REOUfZI.roa
Signing time: Fri 10 May 2024 14:35:57 +0000
ROA not before: Fri 10 May 2024 14:35:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48806
IP address blocks: 185.227.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:ee:a1:67:da:f1:cb:ef:73:f6:04:9f:22:f1:a9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 10 14:35:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e288f6ab2d62c793c3626739be3c794443947d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:62:4e:9e:c2:2c:d2:08:ab:4d:48:a7:a6:e8:
6b:cb:7c:76:ca:b5:0e:e1:65:89:65:4d:a3:f6:9a:
88:2a:73:12:c1:50:0d:a1:1e:5a:3b:46:39:49:93:
b0:12:93:dc:55:12:84:f4:bd:06:12:5f:b6:bd:17:
24:ad:5a:a4:ed:6e:43:ca:f9:2e:f1:58:3c:5d:ed:
23:3f:1c:3b:47:b3:6a:43:27:6b:be:8d:5d:a3:08:
3e:02:af:f8:75:41:74:8a:21:10:e7:79:7d:4e:16:
9f:6e:30:68:f8:8d:20:b3:77:35:a8:1e:53:67:ec:
bf:67:af:22:7f:3e:a1:24:99:b0:ca:15:4f:e7:35:
1c:d1:99:f4:ff:d4:3e:1a:55:02:01:e4:a7:66:b4:
26:6f:4b:5a:fe:41:8f:75:ce:d2:48:dd:e0:a3:78:
8b:ce:83:23:ba:24:9a:04:63:4f:be:61:5e:4e:b4:
30:4b:d1:1c:8e:26:10:9b:fc:ea:c1:9a:b0:49:e0:
ad:12:5d:9b:39:6d:43:20:59:3f:a9:3f:f9:67:81:
0a:6b:34:ba:bc:89:58:d6:67:35:6a:31:e6:35:85:
a9:6d:70:d9:c9:53:00:2d:38:12:a0:80:53:a0:94:
61:55:3c:d8:a1:23:2f:28:8e:0a:77:96:ab:14:96:
ea:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:F6:AB:2D:62:C7:93:C3:62:67:39:BE:3C:79:44:43:94:7D:92
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4oj2qy1ix5PDYmc5vjx5REOUfZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.33.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5d:70:ed:ac:6c:5a:87:2f:94:e6:a7:d7:4c:48:99:a5:27:
40:54:09:8f:e5:31:8b:d7:f3:29:08:e5:9f:3c:68:ea:be:7a:
d0:f3:ce:13:19:84:45:d9:4f:3a:97:2f:a5:28:5e:d0:5d:f4:
b1:7f:d4:78:b1:65:1d:f4:5c:6a:c7:b9:56:3e:a8:98:58:ed:
73:50:cc:de:ff:e9:4f:63:9f:5a:26:95:40:86:22:29:55:fa:
dd:e5:3e:1e:60:15:bf:b7:cd:87:7d:bb:32:f7:11:de:90:a4:
cb:72:33:79:08:37:f0:77:b5:6e:40:a2:46:cf:74:0e:26:8d:
fe:c4:57:66:f7:7f:fc:d7:ed:30:dd:62:ed:b6:7b:f9:5b:6d:
ce:3a:12:de:7b:26:a2:55:e5:63:b1:7a:73:33:04:11:23:e1:
aa:60:a5:9a:37:ae:3a:d8:e8:f7:86:b8:3d:0f:9c:cb:0d:74:
64:88:c6:f8:95:41:90:8e:e8:56:7e:5c:a4:b6:b8:e7:7b:d5:
58:4b:7e:e3:ca:f5:56:49:70:5a:f5:33:bb:4b:a5:d3:4f:97:
a6:e2:88:81:35:bc:f6:e3:0d:45:39:f0:b5:af:f8:30:d6:16:
25:9b:9c:c7:3c:11:10:82:c0:a1:f1:c0:0d:fe:37:5d:63:86:
b9:f1:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 09:05:20 2024 by rpki-client on console-ams.rpki-client.org