Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/oetSQVLubwKO0TgIBTUgpluU2pc.roa
File: oetSQVLubwKO0TgIBTUgpluU2pc.roa (raw, json)
Hash identifier: HIkKszCZGLcz6b391IZ37PFLYZXxDp96T7I2jtDMe8I=
Subject key identifier: A1:EB:52:41:52:EE:6F:02:8E:D1:38:08:05:35:20:A6:5B:94:DA:97
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B930D27388ADDFF61868BAD38E2B06
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/oetSQVLubwKO0TgIBTUgpluU2pc.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31674
IP address blocks: 212.133.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:30:d2:73:88:ad:df:f6:18:68:ba:d3:8e:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1eb524152ee6f028ed13808053520a65b94da97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:cc:51:e2:83:3b:69:f4:57:d0:c0:5c:9c:
4e:52:5e:7f:8f:ee:51:eb:83:24:fd:7d:da:b0:04:
5e:15:08:e1:22:29:c0:07:0e:57:27:56:ab:ad:da:
fc:c0:70:9d:26:80:f2:2b:ff:ce:3f:9d:84:31:72:
f7:8c:07:83:de:30:7d:39:18:f5:9c:c5:be:05:77:
0c:f6:4c:d6:ce:d6:7e:db:e5:07:de:74:96:8c:21:
a6:8f:b6:f5:f1:7c:8c:f7:e1:81:d8:f8:f1:6b:f2:
1b:31:ee:ce:ac:e3:75:e9:09:98:2a:9a:d6:2b:5e:
7c:69:cb:09:fc:ae:f0:01:44:fe:95:7e:00:0d:b3:
d0:8e:f0:e3:13:1c:21:2d:00:eb:6a:94:28:66:cf:
c5:e6:cc:cc:2c:09:16:19:79:a8:13:ac:5b:1b:8b:
76:ce:ca:33:7a:20:67:1b:54:91:de:a0:54:bd:80:
b7:7e:94:39:ca:36:dd:76:d8:5a:b3:e2:1b:66:fc:
81:e7:9c:65:ea:f0:cc:f2:81:37:68:09:2b:4c:5b:
a1:f4:5f:19:af:d2:c8:82:6f:0f:52:9a:64:41:a5:
ac:b3:3f:de:29:33:da:10:4d:65:22:de:f8:9d:c7:
48:5e:ce:61:8a:a5:f8:bf:cd:61:23:30:7c:18:fc:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:52:41:52:EE:6F:02:8E:D1:38:08:05:35:20:A6:5B:94:DA:97
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/oetSQVLubwKO0TgIBTUgpluU2pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.133.164.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ea:31:91:1a:05:2f:79:eb:03:57:84:33:8b:23:94:44:18:
df:7a:6b:8a:ac:83:a9:15:bc:ca:5d:6b:53:a9:db:6c:db:31:
ae:a4:3f:c0:48:c7:28:ff:59:3b:45:ba:3d:bd:8f:97:d6:62:
ea:64:d6:7b:93:82:9c:3c:0f:93:61:6a:a8:a0:e9:c8:be:b8:
f8:15:f7:b6:0f:31:a6:4f:27:f1:9a:e8:68:cb:aa:a9:ec:63:
eb:a1:27:41:42:d4:a9:73:fd:66:85:ad:fa:d8:bb:a8:ae:b9:
f3:35:4d:bb:68:19:78:a0:ec:df:fe:6d:ee:d5:3e:9c:4c:82:
16:ed:92:59:53:f5:a2:05:20:d8:7a:98:5d:80:18:8d:58:3c:
c4:c9:4e:bf:00:3c:62:d7:e0:b4:06:08:b4:b0:79:1f:5c:a1:
f2:dd:18:5f:f6:26:7f:ef:71:af:61:66:d8:bb:35:8b:1e:c7:
6d:e6:95:df:f6:c8:ef:d2:43:f7:d2:85:21:d3:fc:03:c8:69:
c2:b4:04:cc:51:c6:a7:18:08:c4:8d:0f:2d:64:f9:42:62:dc:
b2:00:09:79:60:c1:bd:cd:57:57:e3:8c:6e:21:5e:2b:24:0e:
59:1b:6a:e2:ca:da:89:3f:8f:03:09:9a:6d:53:c0:9d:07:a4:
a3:5d:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:26:14 2024 by rpki-client on console-ams.rpki-client.org