Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0vaOycG66czrzhcwc-bk1LwTEvA.roa
File: 0vaOycG66czrzhcwc-bk1LwTEvA.roa (raw, json)
Hash identifier: BZvo41Bwj827NUK+g814i6UjQ00P3oZ5uQj7+j74OQI=
Subject key identifier: D2:F6:8E:C9:C1:BA:E9:CC:EB:CE:17:30:73:E6:E4:D4:BC:13:12:F0
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649F16F2ABDB3921711BA1377567DF8
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0vaOycG66czrzhcwc-bk1LwTEvA.roa
Signing time: Mon 01 Jan 2024 18:29:43 +0000
ROA not before: Mon 01 Jan 2024 18:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210646
IP address blocks: 151.251.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f1:6f:2a:bd:b3:92:17:11:ba:13:77:56:7d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2f68ec9c1bae9ccebce173073e6e4d4bc1312f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ef:b9:02:43:52:d0:50:d0:fe:37:a2:fe:ed:
04:a6:b7:56:a6:ff:30:29:46:e2:3c:42:9e:4a:53:
56:27:39:af:f8:d9:ed:0f:d9:c9:e0:af:49:34:77:
b0:09:5a:f6:45:f1:fd:5e:cd:07:d4:e7:53:ca:b6:
8c:9e:9d:3e:d4:b7:ac:5a:ec:e9:3f:58:96:e5:92:
45:69:9e:1b:b6:26:62:09:b1:bd:1d:39:34:f3:e7:
0c:4b:d8:64:b9:c2:24:f3:d4:26:eb:8c:67:26:a7:
d8:00:bd:42:27:f5:da:2a:fe:0d:da:dc:55:fe:c7:
ff:d6:9c:be:3d:3b:b7:b1:d7:81:26:af:9e:7a:f0:
ae:ef:48:19:62:e5:ae:18:3f:02:ec:fc:cc:d9:c8:
22:9a:93:be:8a:68:ae:46:f9:8c:bb:e9:90:79:1f:
6a:db:db:11:b2:9e:96:80:fb:cd:6f:02:31:98:d2:
df:af:2b:9f:10:8b:09:70:d9:8e:f5:52:8a:4a:f8:
7f:52:e0:d2:0b:bc:1a:7e:6c:23:88:e4:ce:ea:f1:
69:a4:90:ec:3a:94:79:1a:73:92:dc:20:7e:e7:02:
23:0e:2d:17:34:7a:81:06:28:81:3e:14:fc:b4:79:
89:1b:17:06:5b:b6:2e:4a:9f:8d:63:4d:6f:52:35:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:8E:C9:C1:BA:E9:CC:EB:CE:17:30:73:E6:E4:D4:BC:13:12:F0
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0vaOycG66czrzhcwc-bk1LwTEvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.66.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:39:5a:cc:5e:49:b6:e8:a1:31:b0:01:cb:99:75:63:4c:ef:
5d:09:26:55:b3:6a:80:b0:47:f3:57:99:bf:4e:e5:03:1b:b5:
33:1c:cd:17:15:96:77:87:95:ca:e6:39:30:ee:3b:cd:ed:e5:
1a:6a:13:98:0e:26:a6:fb:0b:02:74:15:f2:be:e1:a3:2e:02:
d6:20:96:35:f7:fb:dd:12:18:09:88:a8:9b:fc:65:94:2a:4b:
4b:c9:95:ab:36:ac:1a:56:df:2b:e6:93:75:ca:a3:72:43:1e:
b5:85:80:0f:ef:98:8e:04:b0:cc:ce:54:c7:a3:05:10:de:a9:
72:af:75:e1:44:9b:3d:44:c7:68:29:6b:06:25:38:68:05:ea:
7d:57:63:0d:da:03:4c:90:55:8d:f1:63:47:4d:24:18:65:90:
23:ff:6f:b9:20:c7:a1:cc:b5:7c:8b:3e:5c:41:60:ef:ad:69:
db:f7:e3:fa:b0:1f:ef:8e:94:3a:eb:98:b2:a0:ff:cf:58:8a:
7c:6d:09:c1:5a:12:48:1d:ad:36:f2:c9:3a:74:2d:1a:0e:85:
ec:76:e1:e4:76:b7:c3:f0:d2:84:f6:80:a8:96:81:44:80:fd:
77:08:51:a6:22:b0:62:bb:75:db:46:2c:74:50:ad:29:37:72:
3a:6d:0b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:19:57 2024 by rpki-client on console-fra.rpki-client.org