Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/OuuA8vWKbN_-Th7gvBGN6OjQvXY.roa
File: OuuA8vWKbN_-Th7gvBGN6OjQvXY.roa (raw, json)
Hash identifier: Cv1szUYDXmU235lGUNVgrBuKBj8vGnapjD2sUV2F5nM=
Subject key identifier: 3A:EB:80:F2:F5:8A:6C:DF:FE:4E:1E:E0:BC:11:8D:E8:E8:D0:BD:76
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB172EA9AFA7F1F3EADEC94B4B2B2
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/OuuA8vWKbN_-Th7gvBGN6OjQvXY.roa
Signing time: Tue 02 Jan 2024 04:30:12 +0000
ROA not before: Tue 02 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 91.206.169.0/24 maxlen: 24
45.138.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b1:72:ea:9a:fa:7f:1f:3e:ad:ec:94:b4:b2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aeb80f2f58a6cdffe4e1ee0bc118de8e8d0bd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:50:c2:d1:58:85:5a:57:83:fe:1a:71:2a:
d8:51:26:2c:30:b5:5f:be:b9:62:9e:d1:80:79:5f:
f9:b8:fc:b1:95:1e:63:24:60:6c:1c:9d:c7:70:78:
68:90:c8:51:7f:fb:b3:34:5e:3a:9c:e2:7e:67:74:
01:5a:a5:3b:5d:45:30:c6:c8:41:94:1d:29:0d:72:
e9:ac:14:7f:45:1f:f0:e5:ce:a3:c7:c9:84:2e:83:
c8:df:b7:e2:5a:b8:75:1d:88:f7:54:c5:48:e3:c4:
11:c3:95:34:54:ed:62:bf:82:ae:6b:4a:1c:f6:79:
1e:c3:15:28:30:19:d8:d6:d4:c6:e6:7e:90:46:6e:
8b:fa:a2:1c:3a:49:78:85:b5:85:9d:0f:2a:ad:f2:
78:e0:96:69:29:eb:8c:ae:af:5b:2e:b3:c7:a1:1a:
ae:6a:ab:76:f1:e7:6b:9d:10:16:c7:4e:d3:51:68:
5e:5b:2f:f4:be:d5:c2:e5:99:2d:97:e5:f5:17:fd:
48:34:aa:9b:28:13:6e:e0:5b:9e:d3:e4:d2:21:75:
61:82:8e:b4:7e:de:98:99:ca:2b:ca:b5:be:1a:0c:
72:a6:5a:46:4a:0f:aa:a1:82:6c:64:38:e6:0c:01:
fa:fa:3c:48:c6:81:82:da:54:c5:68:21:0e:92:d4:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:80:F2:F5:8A:6C:DF:FE:4E:1E:E0:BC:11:8D:E8:E8:D0:BD:76
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/OuuA8vWKbN_-Th7gvBGN6OjQvXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.16.0/24
91.206.169.0/24
Signature Algorithm: sha256WithRSAEncryption
af:24:c9:3b:ee:3a:54:a9:9d:0a:5e:52:34:a9:de:54:7a:9b:
2c:35:05:51:02:af:f4:83:70:8a:54:f4:f9:66:72:3d:3b:ad:
92:df:4b:93:ff:d8:c4:38:74:87:06:59:77:30:37:36:62:f6:
be:59:a2:4e:4f:00:9a:4b:d3:32:16:07:b7:7c:f2:67:cb:68:
61:f7:2d:c0:e6:08:78:fa:8d:79:64:f8:53:3f:fc:2c:81:09:
fa:bf:33:63:86:cf:f6:dd:73:39:00:cf:3a:c7:24:ed:0e:b5:
af:be:ef:f2:33:eb:ab:5b:af:55:76:82:b5:8c:60:25:f2:d4:
72:65:19:9e:9a:4a:81:6b:0f:57:24:3d:7c:84:0e:06:a6:44:
ca:9b:84:38:a4:85:23:4e:28:83:25:cf:62:4b:ac:8d:2c:23:
e1:1b:90:87:fa:59:ae:3f:37:ba:50:06:01:69:2a:50:b7:a9:
86:23:c2:b3:a9:88:3d:73:62:ce:b9:ce:9f:68:67:55:cc:55:
14:77:a6:54:08:4a:0e:7f:cf:e7:17:0e:e8:ec:7e:1f:65:5c:
d6:35:f1:0d:cf:9d:46:75:0f:9a:20:6d:86:3b:5d:97:9e:4f:
6e:a4:da:df:ef:e7:5c:dc:db:fa:a4:af:a4:23:18:d2:a5:01:
c4:b1:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:43:55 2024 by rpki-client on console-ams.rpki-client.org