Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/_dC2cstTDxTyqC2TLsIhxdWSmq4.roa
File: _dC2cstTDxTyqC2TLsIhxdWSmq4.roa (raw, json)
Hash identifier: rI0MQHe6T/AWFSzgsfoqz6Vv4DGJcJDco16bELTUkUw=
Subject key identifier: FD:D0:B6:72:CB:53:0F:14:F2:A8:2D:93:2E:C2:21:C5:D5:92:9A:AE
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 018CC64B2E70EB555C5B5B3D64878E82E9AC
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/_dC2cstTDxTyqC2TLsIhxdWSmq4.roa
Signing time: Mon 01 Jan 2024 18:31:04 +0000
ROA not before: Mon 01 Jan 2024 18:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25091
IP address blocks: 94.158.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:2e:70:eb:55:5c:5b:5b:3d:64:87:8e:82:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Jan 1 18:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdd0b672cb530f14f2a82d932ec221c5d5929aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:63:4c:75:51:5e:fc:a3:77:51:18:2d:08:
fa:08:84:57:c5:76:67:7b:cd:6e:ec:dc:58:41:6c:
50:5c:f6:0e:c8:1d:80:9e:a8:ab:ce:8d:e0:61:28:
b7:cb:4a:fe:06:8f:42:ec:a4:49:9e:bf:0d:90:a1:
d9:49:66:7b:1e:17:5a:45:04:a8:37:f0:a9:52:a1:
ca:c6:fa:ba:f2:25:30:eb:1c:df:bf:81:0f:10:a9:
cc:0c:ef:97:55:33:f2:fe:05:0e:7c:af:db:05:8e:
6e:1e:b1:07:27:05:6b:ca:5e:b2:e7:0e:e1:36:d6:
8e:05:fd:bc:24:29:14:6b:f1:7a:e3:da:29:1c:45:
ce:1d:2a:4a:21:fe:1e:4b:42:1f:6a:96:66:67:d3:
4c:98:16:a0:de:cd:b7:5d:f2:f0:ec:3d:82:ab:bf:
87:51:e7:42:c7:66:d5:aa:07:37:a4:82:43:ea:1c:
d7:77:6c:b5:0a:bf:ca:f8:fc:69:5b:5b:2e:c5:bf:
b1:3d:68:17:f5:e5:42:4e:99:c2:ed:34:eb:e9:2e:
20:59:53:e5:2b:d0:e7:bf:da:69:fa:9b:0f:59:67:
42:da:50:c2:e0:0f:bf:10:93:b5:0b:e6:8e:27:bb:
59:3a:9c:38:25:81:19:f4:07:c5:b1:6d:ce:75:2d:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D0:B6:72:CB:53:0F:14:F2:A8:2D:93:2E:C2:21:C5:D5:92:9A:AE
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/_dC2cstTDxTyqC2TLsIhxdWSmq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.28.0/22
Signature Algorithm: sha256WithRSAEncryption
69:20:73:14:48:09:ab:49:4b:6b:9c:49:48:a4:f9:84:b1:6e:
fc:68:f0:50:23:b7:83:7c:76:f2:b2:ac:fe:81:0e:eb:94:d5:
ee:70:5a:7c:0d:3b:2b:cc:2e:4c:f5:80:19:7a:90:d8:76:f9:
59:10:f3:d0:04:89:16:4a:c0:84:b2:44:0d:e2:ff:a6:8a:62:
4d:8d:bd:17:10:f5:f7:ee:5d:db:37:ed:d7:15:b2:b1:0c:ab:
e6:e0:94:e5:7c:39:22:c9:65:58:94:a6:be:8a:f7:23:9e:f6:
b5:10:d5:82:55:f4:05:8c:76:4a:b1:59:ad:72:be:95:77:65:
d6:1b:43:53:e0:8d:ed:24:6b:b4:de:18:d7:45:67:ff:39:25:
4b:d9:2a:ce:31:12:d5:6a:d1:20:08:08:ed:70:94:41:ed:7d:
bc:42:f5:78:a8:9e:bc:c3:1b:29:16:03:10:4e:bc:f5:2f:db:
b4:e4:59:e7:e6:0a:c5:f3:0e:02:c5:b2:de:73:46:1d:38:70:
b0:ef:de:ee:77:53:c1:c6:9e:d7:52:69:39:51:a7:0d:66:fb:
31:69:15:7d:64:cf:53:0c:65:63:90:b5:29:57:8e:37:20:bd:
78:db:b2:b3:91:f2:dd:c8:ec:ff:f9:1a:4e:e4:33:24:63:87:
ea:ef:1a:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSy5w61VcW1s9ZIeOgumsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMWViNDA3Zjc2Y2ZhNWM3ZGExNTIxODM5N2IzYzQzMTc3
NjJhYzAwHhcNMjQwMTAxMTgzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGQwYjY3MmNiNTMwZjE0ZjJhODJkOTMyZWMyMjFjNWQ1OTI5YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh1jTHVRXvyjd1EYLQj6CIRXxXZn
e81u7NxYQWxQXPYOyB2Anqirzo3gYSi3y0r+Bo9C7KRJnr8NkKHZSWZ7HhdaRQSo
N/CpUqHKxvq68iUw6xzfv4EPEKnMDO+XVTPy/gUOfK/bBY5uHrEHJwVryl6y5w7h
NtaOBf28JCkUa/F649opHEXOHSpKIf4eS0IfapZmZ9NMmBag3s23XfLw7D2Cq7+H
UedCx2bVqgc3pIJD6hzXd2y1Cr/K+PxpW1suxb+xPWgX9eVCTpnC7TTr6S4gWVPl
K9Dnv9pp+psPWWdC2lDC4A+/EJO1C+aOJ7tZOpw4JYEZ9AfFsW3OdS35OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP3QtnLLUw8U8qgtky7CIcXVkpquMB8GA1UdIwQY
MBaAFKIetAf3bPpcfaFSGDl7PEMXdirAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDct
MjZjZDM4NzFmMzY1LzEvX2RDMmNzdFREeFR5cUMyVExzSWh4ZFdTbXE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85OGIyNzgtMDY4YS00NjhmLWFjZDctMjZjZDM4NzFmMzY1
LzEvb2g2MEJfZHMtbHg5b1ZJWU9YczhReGQyS3NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXp4cMA0G
CSqGSIb3DQEBCwUAA4IBAQBpIHMUSAmrSUtrnElIpPmEsW78aPBQI7eDfHbysqz+
gQ7rlNXucFp8DTsrzC5M9YAZepDYdvlZEPPQBIkWSsCEskQN4v+mimJNjb0XEPX3
7l3bN+3XFbKxDKvm4JTlfDkiyWVYlKa+ivcjnva1ENWCVfQFjHZKsVmtcr6Vd2XW
G0NT4I3tJGu03hjXRWf/OSVL2SrOMRLVatEgCAjtcJRB7X28QvV4qJ68wxspFgMQ
Trz1L9u05Fnn5grF8w4CxbLec0YdOHCw797ud1PBxp7XUmk5UacNZvsxaRV9ZM9T
DGVjkLUpV443IL1427KzkfLdyOz/+RpO5DMkY4fq7xrQ
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:56:06 2024 by rpki-client on console-ams.rpki-client.org