Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/oQgZc3nYtakcc9CnRKTzG2FZ-4o.roa
File: oQgZc3nYtakcc9CnRKTzG2FZ-4o.roa (raw, json)
Hash identifier: GdS1KipdRklCUq36lfM+lQRqWlLzE4tjIxPjguWVWp4=
Subject key identifier: A1:08:19:73:79:D8:B5:A9:1C:73:D0:A7:44:A4:F3:1B:61:59:FB:8A
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 018CC3B69782E22AA8B71A0E3BC6383CC016
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/oQgZc3nYtakcc9CnRKTzG2FZ-4o.roa
Signing time: Mon 01 Jan 2024 06:29:32 +0000
ROA not before: Mon 01 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205384
IP address blocks: 188.241.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:97:82:e2:2a:a8:b7:1a:0e:3b:c6:38:3c:c0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a108197379d8b5a91c73d0a744a4f31b6159fb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:c7:ea:b1:29:4c:38:34:87:e8:53:9b:95:
0d:21:45:8b:9a:f2:79:26:06:cd:fa:08:36:8b:28:
70:75:9c:7d:c4:fa:81:93:de:96:5d:23:b6:d3:8a:
04:1d:92:75:cc:2e:1e:f2:1d:ee:f8:54:52:43:59:
21:16:11:3e:12:5e:7b:1a:89:14:6e:d6:36:dc:1d:
f7:08:80:8b:37:61:bb:a0:6b:92:26:54:27:99:e1:
b6:d7:80:1d:f2:53:8c:31:ec:13:43:dd:d5:47:95:
3b:f9:50:26:ab:3a:fa:9c:fb:59:0b:b4:f7:4a:e1:
80:75:61:26:31:93:7f:51:30:c2:70:95:e2:fa:99:
85:7f:c3:22:65:af:4b:4a:1d:73:18:8e:ea:4e:2a:
05:cf:48:a2:61:26:f2:8c:01:5c:61:be:cb:f6:fe:
4e:a0:21:a0:5f:90:96:eb:1d:46:ae:ea:3d:17:3b:
14:e6:5b:0b:f6:16:4e:8e:e0:18:83:8f:bf:64:7a:
f5:51:95:81:35:6b:0a:c9:2b:a1:3b:5f:f8:93:07:
a9:6c:4b:11:bd:1e:74:9b:8c:1b:b6:26:67:c5:af:
88:01:ed:61:c8:28:84:2f:46:7b:f3:96:3b:dc:a1:
1b:ae:9f:54:ec:1b:91:ee:fc:38:50:67:88:48:5a:
a4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:19:73:79:D8:B5:A9:1C:73:D0:A7:44:A4:F3:1B:61:59:FB:8A
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/oQgZc3nYtakcc9CnRKTzG2FZ-4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8a:91:a7:2f:62:6a:4f:73:77:46:28:08:0f:1f:e8:79:c8:
be:ad:ac:cf:eb:79:b6:5a:ea:13:ad:b4:6a:97:0a:c4:38:53:
ce:4e:73:7a:23:96:e3:d3:91:55:d2:b8:a4:0a:0c:fe:43:7f:
be:a2:00:03:4b:df:da:34:65:af:57:1f:f7:a9:f6:01:0e:c6:
f3:41:2c:47:be:e2:a4:37:d6:31:1c:4c:22:81:83:30:83:d1:
03:ef:57:bb:2d:4f:9a:f2:67:8d:db:fd:87:f5:25:9d:75:22:
e7:c4:7a:f0:21:24:ed:ab:1e:48:25:1b:08:64:66:e7:0b:3e:
d7:f7:34:a7:42:98:62:b9:22:e7:55:8c:53:0d:c1:c3:89:db:
6a:6d:ca:ae:4d:95:51:76:98:07:e3:e5:f7:2d:a8:4d:2f:d4:
c1:0d:c9:fe:1b:ef:c6:7e:33:bd:66:1a:9f:52:e4:42:44:89:
6a:63:73:ed:94:f4:cf:23:1e:7f:e7:75:75:1d:5b:71:e6:95:
54:bd:16:1b:40:31:6d:fa:4a:cf:9e:62:b7:d7:33:8e:4e:d0:
f1:e4:60:50:75:d6:28:bd:f1:a2:3a:f4:78:e4:06:b0:85:1a:
5f:81:db:f7:ec:4d:93:fa:5d:11:1e:78:9e:bc:7a:12:7b:44:
5c:c9:d6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:51:14 2024 by rpki-client on console-ams.rpki-client.org