Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OsBZkHARu2BgYWnwElV_uiF8_LI.roa
File: OsBZkHARu2BgYWnwElV_uiF8_LI.roa (raw, json)
Hash identifier: /t0p/urMCUYpKdLFQ0LQZDPZqZ5vGLenVT5L4mYBF4Q=
Subject key identifier: 3A:C0:59:90:70:11:BB:60:60:61:69:F0:12:55:7F:BA:21:7C:FC:B2
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC72777FEF8239B7E7F5085EBDE8EEA4B
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OsBZkHARu2BgYWnwElV_uiF8_LI.roa
Signing time: Mon 01 Jan 2024 22:31:41 +0000
ROA not before: Mon 01 Jan 2024 22:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57011
IP address blocks: 188.93.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:77:fe:f8:23:9b:7e:7f:50:85:eb:de:8e:ea:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ac059907011bb60606169f012557fba217cfcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:e6:f2:c8:c6:24:04:42:10:85:74:2b:d0:
0d:d3:ee:33:25:43:70:15:25:ae:65:e2:9c:22:87:
13:95:ce:e4:d4:5c:9a:11:a4:7c:1b:94:87:6c:f6:
97:5b:6f:01:a7:13:48:0d:1f:f3:75:9f:77:75:80:
17:09:fa:96:28:cd:07:74:d4:8e:d4:ea:0f:6a:42:
21:e4:85:a3:9a:b9:8f:e4:f7:4a:c2:6e:db:9c:61:
4c:f1:91:e7:f2:45:29:bf:d3:98:3c:f3:8d:43:71:
de:82:3f:69:1f:8a:bb:38:6d:56:08:a7:ea:1f:cc:
2e:23:79:d3:18:ec:85:96:c7:09:ab:a6:78:c9:29:
59:f8:8f:2a:80:fd:aa:30:f9:dc:c9:0e:0a:4c:2b:
5b:a8:09:18:2b:d3:06:2b:de:2c:49:23:98:5f:45:
f9:5b:2d:5f:81:33:8f:55:c9:80:98:5d:92:3c:dc:
57:53:d0:ea:8a:af:d2:00:7d:32:46:d1:ff:23:25:
ba:a5:0a:2e:86:c1:2f:b5:17:68:0d:19:b8:f2:47:
12:f8:fc:8a:5b:91:97:f0:f0:e5:43:42:7a:79:66:
0e:c3:f2:07:86:04:73:6a:be:b6:b1:21:ae:52:df:
6c:e1:a3:8d:15:94:0b:58:73:9c:de:5d:6e:25:48:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:59:90:70:11:BB:60:60:61:69:F0:12:55:7F:BA:21:7C:FC:B2
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OsBZkHARu2BgYWnwElV_uiF8_LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.108.0/22
Signature Algorithm: sha256WithRSAEncryption
50:58:6b:04:76:91:28:b4:11:72:37:cd:52:e2:91:9d:da:71:
f4:7b:c6:e5:46:7d:ed:03:6d:63:6e:ab:97:56:05:6b:ce:f0:
12:61:5f:63:1d:de:27:42:8d:8a:99:b9:ab:ce:8e:d2:60:f3:
17:a6:39:24:3e:e7:5f:48:14:2a:b2:8c:77:0f:58:cc:8c:89:
e0:03:9a:f5:1e:1b:b7:72:f9:08:c6:eb:e8:2a:59:23:6e:0e:
4a:1e:2d:f4:b3:28:b6:ae:20:5b:82:16:4b:cb:5a:d7:82:cb:
de:e9:db:70:6b:ab:34:65:5b:b7:42:69:14:c0:2a:b5:5c:5a:
70:4f:63:5c:7f:42:53:d0:ec:ab:9c:8a:ed:b3:19:33:29:bd:
da:7c:51:b9:c1:70:be:6d:7d:95:c3:67:bd:e6:38:48:b7:6b:
81:07:c2:af:4a:87:2c:be:82:8c:37:07:3d:a3:4c:c7:66:c3:
4e:81:5b:38:12:05:f0:3d:c1:8a:a0:89:99:7b:e7:9a:cf:ef:
1a:4f:94:83:56:17:3b:ee:ed:b7:16:ec:b7:b9:93:b5:a9:80:
43:7b:25:48:5f:53:08:dd:9d:59:e8:5b:5a:bf:49:ca:50:97:
48:09:a2:d5:0b:b2:1c:3c:9c:7d:f8:30:ef:df:d3:cb:de:92:
14:a0:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:16 2024 by rpki-client on console-ams.rpki-client.org