Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/8OiazMxF6i6x2OARB-jjTBxuz_c.roa
File: 8OiazMxF6i6x2OARB-jjTBxuz_c.roa (raw, json)
Hash identifier: bv1YiluWPjdmt4DJoR007Syi/jA279ZMB5uCoC1Fjag=
Subject key identifier: F0:E8:9A:CC:CC:45:EA:2E:B1:D8:E0:11:07:E8:E3:4C:1C:6E:CF:F7
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 018E3E217AC3FDFA632E1E878490C5A4A6CB
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/8OiazMxF6i6x2OARB-jjTBxuz_c.roa
Signing time: Thu 14 Mar 2024 18:02:45 +0000
ROA not before: Thu 14 Mar 2024 18:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31518
IP address blocks: 185.255.188.0/22 maxlen: 22
194.113.141.0/24 maxlen: 24
2001:67c:4a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:21:7a:c3:fd:fa:63:2e:1e:87:84:90:c5:a4:a6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Mar 14 18:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0e89acccc45ea2eb1d8e01107e8e34c1c6ecff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:35:14:59:5e:d9:8a:cd:01:aa:ef:95:af:
59:d1:0b:6f:38:5c:c8:be:e0:52:e8:21:05:d2:a1:
76:10:39:ba:2d:1e:29:ff:a8:59:eb:71:f0:03:07:
4e:61:20:f9:d7:ce:d4:00:2b:6e:49:0c:b7:9a:a2:
6d:25:22:86:59:f9:0e:48:36:94:a2:af:cf:b8:3c:
47:7a:04:61:ed:9b:4c:68:d3:6a:44:eb:c0:dd:3c:
f0:13:58:a5:bc:ea:e2:91:97:1c:a9:44:83:63:27:
52:2e:f0:b0:c1:8f:89:f9:0b:5e:80:90:de:1d:ee:
7d:f5:5f:93:54:b7:f3:d8:1e:3f:3c:02:75:3a:d5:
bd:f7:cd:bc:a6:2d:a5:4e:33:34:55:48:92:a5:1a:
17:b8:67:ff:ef:38:71:20:e3:0b:1e:16:e6:96:92:
a1:bd:96:dc:61:54:11:97:d6:31:bd:47:a6:52:e2:
ea:59:8c:b9:8d:1c:fe:49:fc:0f:b0:bc:00:b4:1b:
d4:77:a1:7e:1e:5a:0d:0d:61:9b:1c:21:51:78:33:
82:e7:be:2e:eb:47:32:ea:0e:ec:67:b1:88:dc:ca:
bb:4d:45:ea:df:b3:01:c6:f1:b9:a7:63:1f:74:ee:
b2:c4:91:4a:33:ac:20:27:25:7f:20:85:d1:06:bc:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E8:9A:CC:CC:45:EA:2E:B1:D8:E0:11:07:E8:E3:4C:1C:6E:CF:F7
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/8OiazMxF6i6x2OARB-jjTBxuz_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.188.0/22
194.113.141.0/24
IPv6:
2001:67c:4a0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:59:8f:88:6a:57:a9:38:3b:97:8f:b6:2c:cb:84:ac:31:f7:
0d:e6:78:91:48:85:de:a7:64:f8:d4:40:52:06:52:d5:cd:6f:
bc:b2:6f:de:ca:33:0c:1d:86:3d:05:14:a7:06:71:c0:aa:e3:
fd:5a:c1:44:00:25:cc:55:49:c4:4c:89:1c:fd:82:f7:fa:97:
cb:e5:d8:4a:d8:00:bd:b9:4f:2d:68:b9:c1:77:d5:7f:c7:70:
5a:6e:67:ec:76:62:99:57:7d:f9:82:66:c4:0b:23:9d:f0:07:
b1:3d:22:69:af:17:fb:70:86:3c:c1:21:61:6b:44:cd:6b:0e:
88:94:ca:13:8e:e9:de:a8:9a:37:25:7d:d5:22:5b:1e:6d:4d:
d7:2f:35:07:10:ca:c9:96:be:4c:5d:57:8e:0b:8c:a4:bf:4a:
52:3d:ca:03:04:c2:62:0d:1d:85:61:87:0e:41:49:1f:08:20:
99:ae:4c:6c:95:9c:2d:aa:d1:71:82:3c:d3:14:57:fb:bd:b0:
84:86:38:b8:13:e4:11:fd:44:ed:b9:00:7b:1d:b8:5b:f0:ba:
21:26:9f:d4:52:26:be:c1:70:4f:76:14:bd:97:12:05:b0:96:
31:ad:e6:6b:9f:b2:ae:59:aa:7c:3e:70:e2:16:c0:54:6f:71:
7c:64:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:00:34 2024 by rpki-client on console-ams.rpki-client.org