Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/oCbzyFW_iMdJeJOmrQaDzBKeUKc.roa
File: oCbzyFW_iMdJeJOmrQaDzBKeUKc.roa (raw, json)
Hash identifier: xJoPeu1+eFTg2/xxBScBJwYTAZ7d5q/njwo2nTqO35M=
Subject key identifier: A0:26:F3:C8:55:BF:88:C7:49:78:93:A6:AD:06:83:CC:12:9E:50:A7
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 018F813CEC33E18741EB595C15894951DB0C
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/oCbzyFW_iMdJeJOmrQaDzBKeUKc.roa
Signing time: Thu 16 May 2024 11:50:04 +0000
ROA not before: Thu 16 May 2024 11:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199912
IP address blocks: 185.33.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:3c:ec:33:e1:87:41:eb:59:5c:15:89:49:51:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: May 16 11:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a026f3c855bf88c7497893a6ad0683cc129e50a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:29:07:35:06:b7:b1:da:ee:c7:ff:13:c7:
d8:e4:98:d0:dc:2e:30:14:12:3b:3e:47:52:6d:50:
47:65:5b:c0:86:f0:16:cd:e9:f9:c7:fa:a7:94:d5:
28:ea:f4:76:1c:b7:42:3e:1a:84:f3:bd:cf:39:69:
6e:e9:91:9f:8a:9d:e9:09:fc:ee:a0:e6:80:42:17:
f4:d0:03:f6:a6:f7:6a:c4:31:ee:06:ca:c5:54:27:
a6:d6:d7:ba:7f:90:1a:91:ad:68:67:d1:ba:07:92:
08:c5:de:06:9a:d9:9e:d2:d2:c7:c0:54:ea:8e:4b:
1e:87:89:04:cc:8f:9a:c8:17:38:4a:1a:9d:bd:c6:
16:b7:d4:63:41:5d:42:62:32:0e:c8:da:3d:4c:ca:
b9:a4:f7:48:e2:c4:fc:a4:9a:09:e2:6b:b9:5a:a6:
f9:d8:eb:87:1a:57:65:57:1e:b7:80:0e:15:bf:12:
29:3f:21:0c:c1:f6:9f:6c:4b:50:90:68:83:f3:33:
0d:75:48:c5:c8:cb:1c:0d:d9:68:cb:c3:68:a7:23:
9a:0b:89:b2:7d:8e:1c:39:66:03:3c:8b:15:9b:c3:
56:c2:a0:0b:d0:0a:55:08:36:e7:17:12:c9:b9:89:
99:de:01:b1:0f:c4:e7:10:08:e1:70:29:7d:2f:29:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:26:F3:C8:55:BF:88:C7:49:78:93:A6:AD:06:83:CC:12:9E:50:A7
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/oCbzyFW_iMdJeJOmrQaDzBKeUKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:26:2b:29:29:1c:6b:b7:1e:da:8b:0d:68:50:c6:43:bf:e2:
07:ef:20:bf:02:46:84:d9:cd:88:96:ab:05:c4:e8:9d:99:53:
3e:db:eb:47:de:c0:c8:06:dd:db:9f:32:6c:69:48:6c:0e:5e:
62:34:29:e9:20:98:31:5e:f1:d4:c5:2b:34:a0:3e:e9:77:36:
9f:37:16:87:2f:7e:f3:45:e8:a7:2e:02:16:7c:cc:e6:db:ae:
59:fd:4f:20:41:18:31:5e:e8:16:c3:a6:2f:17:5a:91:42:01:
af:b6:09:b1:69:2c:8a:74:43:9b:14:1b:01:84:39:5e:3e:68:
45:2b:35:53:c5:c6:14:e2:c5:5e:6c:ec:c3:e3:d1:65:c3:fb:
30:14:3c:eb:96:49:f0:b8:ad:85:64:76:81:ce:86:8b:14:b9:
f2:e1:e4:4b:14:70:fc:56:1f:9a:33:2d:91:b5:9f:b2:f2:82:
38:68:8c:40:b4:72:08:21:a0:60:9f:bb:ea:1d:8f:9a:4e:db:
99:f1:22:be:50:9d:22:ae:aa:c2:60:e8:a6:84:ea:f6:80:fd:
83:dd:c4:60:40:30:69:61:f2:43:bb:6d:ed:d5:e8:c5:65:f2:
bf:4c:94:8b:2b:83:f3:eb:cd:ed:52:22:e9:03:16:fd:cf:bc:
13:e3:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:41:06 2024 by rpki-client on console-ams.rpki-client.org