Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oCMThH5lWuSWPw9EwURzDp5SGoc.roa
File: oCMThH5lWuSWPw9EwURzDp5SGoc.roa (raw, json)
Hash identifier: dN3Ae2PCCrjKGgySk54rtbe2SynvdLhKBKCaGyQ+XHQ=
Subject key identifier: A0:23:13:84:7E:65:5A:E4:96:3F:0F:44:C1:44:73:0E:9E:52:1A:87
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 018CC56E855E06C30D7D3F7916C5CBA118F9
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oCMThH5lWuSWPw9EwURzDp5SGoc.roa
Signing time: Mon 01 Jan 2024 14:30:03 +0000
ROA not before: Mon 01 Jan 2024 14:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43131
IP address blocks: 81.161.226.0/24 maxlen: 24
2a03:e842::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:85:5e:06:c3:0d:7d:3f:79:16:c5:cb:a1:18:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a02313847e655ae4963f0f44c144730e9e521a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:13:30:b1:49:b0:ae:7c:d7:41:d4:eb:5c:
da:e0:c4:3b:86:2e:59:d7:90:5b:75:87:1f:38:c3:
4f:0c:e0:6b:22:fa:54:1e:a0:0b:6b:2e:b2:55:06:
63:f4:9e:b0:b1:4b:ae:99:91:3d:af:dd:d7:4f:e6:
43:27:aa:45:3d:df:19:fd:9b:08:5d:45:4d:a2:d9:
23:dc:9d:6c:de:0a:87:c5:a0:87:af:fb:8b:4f:bb:
f4:be:a5:fd:59:aa:8d:4e:62:e0:5f:6b:8a:52:76:
27:b8:c8:0f:59:7b:7f:5d:00:2a:b5:6d:c2:6e:f5:
42:53:5d:a9:14:bd:d9:55:0b:5a:a5:9e:bc:09:84:
2e:b0:ca:25:4b:7b:50:e6:c8:10:fd:6d:03:95:90:
2e:7c:bf:f7:05:e3:65:72:1e:3a:e0:fe:b2:67:ec:
a8:31:87:77:44:39:80:c3:57:f0:52:8a:c4:5b:80:
d0:8e:19:2a:b4:e9:92:9b:e5:ec:34:83:14:bc:e7:
a9:42:30:d3:14:ec:84:ef:13:be:c1:63:1c:aa:d8:
93:24:2e:0d:4d:5e:03:7a:78:80:93:63:b7:1e:6a:
d1:63:cc:be:a7:e3:67:b2:f7:39:ba:82:0e:05:89:
48:db:37:7f:7d:46:87:02:6c:7a:e8:37:47:c5:78:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:13:84:7E:65:5A:E4:96:3F:0F:44:C1:44:73:0E:9E:52:1A:87
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oCMThH5lWuSWPw9EwURzDp5SGoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.226.0/24
IPv6:
2a03:e842::/44
Signature Algorithm: sha256WithRSAEncryption
03:11:a3:80:fd:74:d9:99:00:84:98:85:6e:bd:eb:18:30:56:
4d:45:b7:8f:f0:e2:6b:fe:0d:71:2a:e2:32:6a:44:11:f2:94:
49:2e:c9:07:32:4c:f5:2a:db:41:4e:6a:6f:96:ab:3a:53:3e:
71:6e:48:95:e3:ba:ad:88:99:40:4a:85:4b:78:f2:4b:6a:70:
6a:8d:ed:ef:6c:26:f8:cd:97:59:75:77:4d:14:41:8b:f9:3a:
b5:eb:83:82:6f:9e:3b:48:b3:13:2c:e3:5c:7a:53:97:e1:29:
1d:ce:99:96:ab:cc:8f:18:f9:ae:d8:cb:03:38:97:b3:2e:d3:
b9:23:65:25:e0:77:97:82:f4:87:98:b9:2f:ec:3d:5c:7f:58:
f4:bf:a9:1f:1f:f6:63:d1:a1:88:61:cc:71:42:71:f0:c1:e6:
87:27:b3:6a:82:27:de:58:3f:82:52:55:b2:63:89:c8:07:f6:
a1:6a:05:63:15:16:49:4f:a2:b6:19:a0:60:f3:80:77:71:3c:
11:f4:36:96:bf:56:e3:d5:1b:f9:d9:5a:60:ed:a9:54:cb:0a:
e8:b5:22:b1:b7:fa:23:f6:d5:b9:42:b5:1d:4d:28:1f:42:91:
5e:3f:14:e2:82:17:1e:6f:0f:06:f1:c3:8f:a1:1d:df:6b:7a:
af:0e:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:54:46 2024 by rpki-client on console-fra.rpki-client.org