Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oBm-YCA8p2rEjaD-Zf4YglgmAO8.roa
File: oBm-YCA8p2rEjaD-Zf4YglgmAO8.roa (raw, json)
Hash identifier: X9PpheT9HUrMEKWJZp+IFHHnHJcnQ5MJKzDiX9A2Okk=
Subject key identifier: A0:19:BE:60:20:3C:A7:6A:C4:8D:A0:FE:65:FE:18:82:58:26:00:EF
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB5FF0ECE36F4F642DBAB122274CC8
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oBm-YCA8p2rEjaD-Zf4YglgmAO8.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 193.148.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5f:f0:ec:e3:6f:4f:64:2d:ba:b1:22:27:4c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a019be60203ca76ac48da0fe65fe1882582600ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:9c:ce:68:eb:53:26:83:87:5d:be:ab:17:
46:00:9d:ca:69:7d:71:02:f7:9a:5f:12:8b:bd:33:
49:39:95:9a:a7:83:1c:90:f9:5d:4f:8d:19:d0:35:
20:1f:eb:fa:55:6d:89:0d:12:ce:4c:d8:50:1a:60:
4e:d4:02:54:76:f2:20:89:d7:a5:ea:4c:38:e1:cb:
4d:f3:f1:d5:b8:29:4a:5d:ec:c9:4b:33:da:39:46:
7b:ec:c9:77:b8:0d:33:97:2e:c1:2e:60:d6:99:92:
3a:47:f7:d7:48:d5:6e:26:51:ca:7d:e1:ff:ec:d9:
b1:eb:ed:f6:84:7b:0d:b4:3c:8f:ea:86:24:14:76:
5d:04:a4:4e:1f:be:9b:aa:3f:b9:44:f8:89:24:69:
be:9a:de:f6:2f:d7:59:5d:6b:9e:d7:d3:c2:65:35:
b2:d9:eb:8c:35:b8:bd:c8:9f:60:9b:2d:8c:ff:73:
ea:14:3a:54:4f:f0:57:ff:ed:9c:99:00:a6:1c:ab:
bb:5f:01:31:24:cf:4e:40:68:2d:eb:71:62:e4:25:
c9:e7:f6:4a:b9:c2:72:c3:26:63:dc:15:f9:c7:7e:
6a:a4:d6:2a:37:ca:50:46:35:9d:fd:a5:cc:52:46:
db:d8:a6:24:24:fb:0a:bd:34:77:c5:41:95:33:b5:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:19:BE:60:20:3C:A7:6A:C4:8D:A0:FE:65:FE:18:82:58:26:00:EF
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oBm-YCA8p2rEjaD-Zf4YglgmAO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.61.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e7:e9:9e:59:37:53:34:c8:ac:0f:ab:f4:da:c9:6a:95:02:
f2:00:a5:f0:b8:8c:dd:4b:95:6b:f8:da:72:54:38:68:ac:2d:
04:77:dc:b0:c9:c0:0c:0f:a8:28:0c:e4:22:f1:91:63:09:fe:
59:4e:b7:70:4c:35:80:ec:f1:4e:c1:dc:ec:09:eb:33:4d:bc:
f2:d6:db:15:be:48:8b:44:77:06:91:87:4c:0e:8b:ac:d7:f0:
29:d5:0b:b3:3e:65:33:ba:2e:06:47:70:d5:56:31:0c:ac:be:
75:44:e0:5d:da:08:5f:0f:b2:8a:d8:e3:ea:b6:ec:1a:00:7a:
71:3f:8e:41:48:ab:e2:02:96:db:1d:24:a6:8a:eb:96:54:c9:
05:25:02:da:de:69:ea:8f:93:1c:8f:23:ac:b8:1c:c8:57:8e:
7e:01:ea:8f:91:f3:7a:67:e4:da:cb:6b:82:90:9a:8a:0b:11:
c5:49:57:28:08:1e:6b:cc:11:8e:72:ec:2a:03:d8:52:03:d6:
2b:e4:d4:eb:1c:54:25:ee:00:19:85:cc:fe:3d:88:31:ac:c7:
a0:d9:80:95:a1:0b:ac:a5:0d:f2:8a:c4:1e:d6:95:5e:c6:11:
25:8e:3c:7b:5c:ae:3e:45:6c:b0:85:3c:44:59:b9:0d:10:59:
11:83:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:55:29 2024 by rpki-client on console-ams.rpki-client.org