Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/OpmonBFO56vtMRogn9acRiXVcTE.roa
File: OpmonBFO56vtMRogn9acRiXVcTE.roa (raw, json)
Hash identifier: Bhcs7RL3jgxTeM8ESoQ6WKXtdI+kNOY4w1sNhAloyuQ=
Subject key identifier: 3A:99:A8:9C:11:4E:E7:AB:ED:31:1A:20:9F:D6:9C:46:25:D5:71:31
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018CC64A7483E21D0350A095EAC8268C3128
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/OpmonBFO56vtMRogn9acRiXVcTE.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2865
IP address blocks: 193.44.172.0/22 maxlen: 24
193.44.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:74:83:e2:1d:03:50:a0:95:ea:c8:26:8c:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a99a89c114ee7abed311a209fd69c4625d57131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:01:3b:54:32:73:ef:de:68:e7:6d:b7:16:
74:a2:67:61:18:88:6c:9b:87:31:46:0a:55:67:d3:
61:de:bd:31:00:7b:97:c9:b0:09:87:77:12:2c:1d:
58:1a:46:c7:0a:d7:12:3a:92:0c:51:49:d4:38:29:
37:1e:fe:6a:6e:63:96:cb:43:46:96:52:39:e3:21:
4d:62:cb:56:2e:13:91:51:0d:0f:80:c2:23:f0:ad:
0d:1d:dd:9b:a0:47:fc:e2:69:0d:2e:b7:9a:34:b8:
02:62:69:23:80:ee:62:2f:0a:52:f7:db:04:06:2b:
84:46:e8:7b:bb:c8:59:7d:56:e7:45:a5:c1:45:2e:
37:50:3e:4c:86:8e:19:79:11:ad:ef:0e:5e:c4:d8:
45:7e:55:21:dd:02:e7:20:c4:2b:1d:84:70:3e:f0:
2f:2c:0e:3a:24:c4:d4:ba:36:ab:63:00:7a:64:a3:
28:ae:1e:63:b3:90:99:b0:78:62:5d:4a:91:b6:8a:
6a:a2:69:7b:d3:d2:b9:55:d8:f2:88:33:68:bd:9d:
68:45:59:d2:43:b4:30:0a:59:cf:c9:39:7a:d5:14:
13:87:e4:4f:dc:e1:fb:77:78:91:95:db:68:b7:e2:
b5:a6:cf:82:9e:a3:ab:15:c4:11:5b:3a:64:00:cf:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:A8:9C:11:4E:E7:AB:ED:31:1A:20:9F:D6:9C:46:25:D5:71:31
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/OpmonBFO56vtMRogn9acRiXVcTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
50:7b:0a:72:26:b9:c4:9c:9f:2c:46:8b:72:88:25:cb:81:0b:
0d:bc:db:58:2f:e3:78:d6:7d:06:6c:8d:19:bf:49:8a:92:47:
8b:f3:d5:f1:a0:7f:a1:c1:dd:28:63:70:ea:f7:02:ad:2d:8e:
21:5a:1b:d0:5e:86:c0:1a:ac:27:b2:97:02:bf:c5:8d:9e:63:
b9:b7:1e:85:4c:96:d3:08:10:8e:db:4e:e7:9a:fc:38:08:df:
1a:9a:4b:67:64:64:85:d7:21:a3:65:0f:e2:b4:a8:4f:5a:d9:
20:c3:92:59:da:a7:08:e1:78:89:2e:d5:1f:67:6b:9e:d3:dc:
df:61:89:8f:f8:d0:c5:9e:85:1d:58:bf:e3:e7:4b:44:42:79:
63:8f:65:13:42:2c:e9:05:37:77:08:01:1c:01:cc:76:c2:1f:
ae:e8:2b:64:eb:3c:6d:ab:06:01:5f:6d:d4:21:ad:74:e5:b7:
98:60:29:97:d9:27:17:71:8e:85:ae:4a:3b:c1:3e:0e:9a:1f:
0d:7b:b6:9f:4d:4d:e4:13:34:f3:50:10:7c:43:67:c0:f1:ed:
1a:16:e9:18:cd:23:b1:9e:96:ce:9f:c6:7a:45:83:33:ba:4c:
1e:57:4a:a8:84:45:05:0c:5e:c0:af:ea:da:bb:4d:a2:50:13:
e3:20:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 08:59:56 2024 by rpki-client on console-ams.rpki-client.org