Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ogj0dhRztg15haIt7ZTBdoHQYFg.roa
File: ogj0dhRztg15haIt7ZTBdoHQYFg.roa (raw, json)
Hash identifier: 0rzpxsg+Qj2c6gqaFlccwBG/OTZPxSj5cH3VjvFykuk=
Subject key identifier: A2:08:F4:76:14:73:B6:0D:79:85:A2:2D:ED:94:C1:76:81:D0:60:58
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FAA9AC2EC0374D2A0AF15513B637F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ogj0dhRztg15haIt7ZTBdoHQYFg.roa
Signing time: Tue 02 Jan 2024 04:30:10 +0000
ROA not before: Tue 02 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51681
IP address blocks: 45.88.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:aa:9a:c2:ec:03:74:d2:a0:af:15:51:3b:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a208f4761473b60d7985a22ded94c17681d06058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:93:ab:35:5a:39:8b:bc:d8:30:bd:ae:60:
76:07:3d:52:67:f6:29:c5:03:1c:f1:77:9a:29:0b:
53:4a:0b:f0:47:bf:9d:7d:2d:1e:23:53:3c:ef:59:
46:1c:69:30:f5:66:72:25:4e:65:e7:a2:f5:f2:c9:
6c:ec:e8:7a:70:f8:7f:f6:6d:7d:41:cf:8c:6a:fc:
39:83:e5:0a:8e:df:25:b9:fd:b5:ac:aa:57:31:3c:
44:37:d7:76:03:60:1d:ed:38:f3:d0:59:12:de:1d:
df:42:7f:ac:24:cd:c2:15:3c:6e:68:d5:70:20:db:
ca:8c:a6:29:65:2e:92:d0:53:7a:f5:9d:80:f3:af:
b2:6b:18:62:04:f3:7f:04:0c:1d:b0:43:89:5b:35:
46:36:8a:c9:8c:7f:4a:58:ba:41:87:f3:fa:d4:eb:
ea:05:ff:c0:4b:15:69:bf:67:b7:97:fe:36:45:3b:
48:10:77:70:de:9c:7f:94:e0:e7:47:a5:d7:ad:60:
c4:a9:29:d5:6f:eb:bd:d1:74:8b:f4:09:4c:b9:41:
58:73:71:54:15:82:42:cd:88:35:bb:9f:10:73:4f:
ce:86:43:8c:1f:e2:5a:b3:7f:65:ac:7f:73:70:d5:
e1:20:62:45:9b:99:d2:f4:7f:db:f2:89:04:ff:02:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:08:F4:76:14:73:B6:0D:79:85:A2:2D:ED:94:C1:76:81:D0:60:58
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ogj0dhRztg15haIt7ZTBdoHQYFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.244.0/23
Signature Algorithm: sha256WithRSAEncryption
13:aa:55:8e:a8:3f:26:47:83:3a:36:df:75:68:f7:8e:57:96:
56:f4:05:9c:17:2e:32:eb:58:58:65:6f:86:29:a1:9a:ee:ab:
f6:dc:31:de:ac:0e:d7:f8:71:c2:fc:65:52:14:86:a0:09:9b:
a1:45:a9:c0:c4:27:81:0d:07:fe:f9:7a:ba:d7:11:03:cf:29:
34:c6:79:30:3e:f8:5e:d4:d8:d8:74:97:fb:e4:94:90:d2:6b:
8c:bd:22:93:3a:2f:ee:ee:40:b2:98:cb:62:21:81:31:5f:17:
1c:da:3b:72:64:24:1b:d2:6b:19:29:59:6f:6b:b1:de:b8:eb:
64:25:7b:6e:2f:b4:19:24:54:33:1f:39:40:32:b8:b1:67:a7:
f7:bb:07:89:c4:4e:5b:d0:0e:73:e3:7d:3d:19:1a:85:e5:c6:
50:00:ea:f0:e1:f6:a5:6c:a9:d2:54:d5:2d:87:30:7c:6c:66:
f7:7b:d7:9c:c2:a6:cc:f2:4b:2c:78:b3:63:b4:e4:60:a3:3b:
ae:de:b5:a4:f0:0b:18:d3:d7:0e:b3:8d:97:fc:c7:bb:bf:b5:
15:51:ea:c7:9c:b2:73:7f:f1:19:93:d7:5f:d9:00:19:0a:10:
c5:ce:24:f3:8f:3c:a1:ed:a7:f3:b6:ea:22:96:5c:ba:3b:91:
e9:c7:2a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:38:34 2024 by rpki-client on console-ams.rpki-client.org