Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RUOYNq8I8fOQ7CHDxjsKxcq9oys.roa
File: RUOYNq8I8fOQ7CHDxjsKxcq9oys.roa (raw, json)
Hash identifier: S8glaYtXfDI81c4rK3sVeD4THyNY5voW/+GGIGF3J9Y=
Subject key identifier: 45:43:98:36:AF:08:F1:F3:90:EC:21:C3:C6:3B:0A:C5:CA:BD:A3:2B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A95DC54623B4D78469094A89E6B4C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RUOYNq8I8fOQ7CHDxjsKxcq9oys.roa
Signing time: Tue 02 Jan 2024 12:33:57 +0000
ROA not before: Tue 02 Jan 2024 12:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 266169
IP address blocks: 194.87.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:95:dc:54:62:3b:4d:78:46:90:94:a8:9e:6b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45439836af08f1f390ec21c3c63b0ac5cabda32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:f1:54:24:f0:ed:ee:33:76:ba:70:f5:95:
c2:8b:2a:27:f6:38:60:b4:5b:10:03:b5:84:61:25:
8f:66:4c:9a:45:fc:2d:dd:34:ba:cd:a4:f8:12:d7:
ed:4f:98:51:9f:4e:a9:fd:67:13:bc:07:3b:6e:14:
d8:a2:e5:ae:f7:71:3e:f1:9d:21:f2:b5:d7:48:13:
06:10:e3:70:5e:28:a6:8e:fa:ce:83:72:fb:20:3b:
d8:20:c9:88:2e:bd:4c:4b:4b:e5:95:ff:4a:db:4c:
17:49:38:93:30:21:bf:19:0e:1f:f5:2c:95:ee:11:
77:55:26:15:7e:91:77:c8:20:6d:5e:aa:2f:70:70:
73:82:a0:c6:b9:0a:80:03:9f:45:cc:51:ec:80:85:
aa:21:d0:0b:d6:78:5e:f4:64:da:c6:d5:1d:c7:7b:
d8:9c:7c:e8:13:d5:a9:06:56:e8:6e:19:84:26:2b:
0c:f0:6c:2a:8a:8f:9c:53:10:fe:ae:a6:1e:32:b2:
7d:4e:14:b1:01:44:fb:49:91:e3:cc:0f:1d:57:84:
11:07:83:61:59:f4:5a:89:20:1a:b5:1f:10:49:c8:
e7:3a:bb:1f:f8:0f:b9:f1:b1:73:c6:41:1e:0c:9e:
2c:b6:4a:da:9f:b0:9c:72:73:0e:d3:bf:a7:9f:f9:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:43:98:36:AF:08:F1:F3:90:EC:21:C3:C6:3B:0A:C5:CA:BD:A3:2B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RUOYNq8I8fOQ7CHDxjsKxcq9oys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.164.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d3:48:e2:7e:69:fe:ea:03:88:3b:34:dc:0c:98:98:ae:d0:
f8:8d:e4:90:15:be:b4:57:06:37:4b:8a:a2:d6:39:55:52:e2:
47:41:db:0c:0d:57:cc:eb:2f:e3:33:3c:f9:f1:84:30:c0:77:
fa:b0:cb:a3:e0:6a:cb:bd:1e:d6:3e:46:fa:39:88:e8:ca:ea:
c7:30:fd:c5:e1:1a:8c:d2:63:19:7d:b4:83:86:76:a1:82:d4:
f1:97:cb:9b:17:50:2e:1a:32:fe:1d:d7:61:8b:15:b9:72:f3:
0d:0e:c9:9f:d7:6d:13:46:e5:58:b5:23:a0:95:1b:17:86:11:
4b:d6:dc:ff:6d:9c:c3:7e:b1:3d:c6:24:cc:7c:d2:bd:99:64:
83:6c:b4:40:1b:ab:e0:5e:97:0d:e4:6e:f0:46:3a:77:16:5d:
af:05:64:a4:ca:ba:0b:47:dc:d2:33:8f:c5:75:1b:0d:0d:8b:
70:8d:82:d3:23:14:24:40:da:a4:2e:69:f3:ae:c3:02:d5:cf:
04:8c:c1:7c:f4:e0:17:41:2c:32:26:55:3d:0d:2b:a8:56:50:
65:08:86:cb:f5:bf:1b:d9:59:63:3c:0b:b0:f0:50:1b:9b:0d:
46:24:20:fe:af:44:73:9d:b0:78:c4:f3:b7:f2:65:c9:62:de:
86:05:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:05 2024 by rpki-client on console-ams.rpki-client.org