Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/ogNQzi7HEBODKuqOdpA7kLwg4Ns.roa
File: ogNQzi7HEBODKuqOdpA7kLwg4Ns.roa (raw, json)
Hash identifier: Dryouedj5k2fw1IGto73Bmz1rrsygej3wSiW3JRIXm4=
Subject key identifier: A2:03:50:CE:2E:C7:10:13:83:2A:EA:8E:76:90:3B:90:BC:20:E0:DB
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 018CC56EC236215A9256F4430BE55318105D
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/ogNQzi7HEBODKuqOdpA7kLwg4Ns.roa
Signing time: Mon 01 Jan 2024 14:30:19 +0000
ROA not before: Mon 01 Jan 2024 14:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59752
IP address blocks: 193.109.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c2:36:21:5a:92:56:f4:43:0b:e5:53:18:10:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Jan 1 14:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a20350ce2ec71013832aea8e76903b90bc20e0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:ac:b0:4b:19:2f:86:1e:a6:d3:80:e4:91:
e2:db:c3:70:65:ad:14:d1:b3:39:52:b5:c4:46:91:
5f:c7:bd:fe:41:d3:4f:37:d9:bf:df:2f:88:11:90:
ce:1d:5e:21:e8:e7:fa:5e:21:b0:7c:30:5b:27:a4:
04:f0:e8:84:de:04:12:1e:60:88:c4:4c:8c:1a:08:
7a:1c:58:61:16:2c:e4:a1:49:2b:47:73:8d:65:c3:
7a:6a:99:f7:f0:04:01:f9:03:ab:f9:fa:19:fe:d0:
dd:95:16:71:05:63:50:9b:5a:7d:43:6b:22:45:4c:
3b:b2:a8:83:78:75:a8:12:2e:5f:37:d1:52:7c:2c:
62:cf:72:bd:03:ae:16:40:89:ec:96:cd:c5:30:31:
42:06:e4:7e:16:98:20:e4:8e:c2:94:44:4a:b4:2d:
46:a0:fd:57:61:b7:e9:45:6b:96:40:eb:46:e0:c7:
bd:5a:05:64:3b:08:0e:32:6e:93:9e:d6:e2:4d:f5:
87:90:87:a5:2f:42:80:7f:af:b5:ad:47:c9:73:c4:
bd:bd:ca:58:7d:63:f1:59:4a:2f:9c:4c:fb:a4:5d:
ac:28:c0:ef:34:70:ba:fe:bf:e7:9c:d9:7e:92:64:
89:cc:68:9e:dd:3a:86:e3:e4:2a:37:49:8d:80:14:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:50:CE:2E:C7:10:13:83:2A:EA:8E:76:90:3B:90:BC:20:E0:DB
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/ogNQzi7HEBODKuqOdpA7kLwg4Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:01:fd:a7:ec:0a:db:79:78:e3:e0:2d:64:ef:d2:96:ee:23:
5d:7a:5b:d7:c1:d0:98:00:b4:f6:74:9c:ab:a4:62:01:bf:1e:
58:68:2e:b5:93:d0:20:08:58:0a:36:f3:d8:4d:8c:bb:35:63:
10:c1:45:45:6f:fd:9b:a0:bc:11:f1:27:fb:8b:b3:20:88:5f:
d9:ce:b8:3d:ff:f0:f7:1d:1a:8f:54:f5:f6:c1:f8:ee:d3:0d:
37:a6:e4:c6:94:94:1d:6b:93:c2:c4:b2:2b:82:9c:f1:fa:f1:
12:1e:20:68:7e:da:ee:82:20:11:6b:08:47:b4:92:d3:ac:61:
74:dc:ea:6e:92:25:aa:77:df:bc:59:51:34:f3:6d:e4:60:ec:
cd:a2:ba:ff:40:ac:20:da:8d:92:e3:b8:81:0a:3b:da:bb:bc:
40:40:4d:bf:ad:0e:9b:e0:29:8f:7d:d9:cd:84:20:4c:cd:ad:
f7:e4:78:13:29:29:97:b4:33:7e:99:32:a6:65:c8:8b:55:81:
14:68:61:c9:47:c2:4c:44:4b:23:dd:b8:be:1b:a8:1e:74:41:
de:7f:11:ce:d8:58:b6:22:1f:ab:81:13:79:fe:3d:3b:c9:96:
21:e7:ba:3d:5b:3e:74:7e:f4:c6:89:cd:44:a4:6e:0f:b3:ff:
27:58:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:59:21 2024 by rpki-client on console-fra.rpki-client.org