Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/3OU7DEPCcwq8mtXf9odnmmtJKuo.roa
File: 3OU7DEPCcwq8mtXf9odnmmtJKuo.roa (raw, json)
Hash identifier: 49XqWQXAdMLlc85avLVcVxibJgVgfWuozGKN14gEp9c=
Subject key identifier: DC:E5:3B:0C:43:C2:73:0A:BC:9A:D5:DF:F6:87:67:9A:6B:49:2A:EA
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018CC493379E14DEE724572F2A3222654C99
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/3OU7DEPCcwq8mtXf9odnmmtJKuo.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49805
IP address blocks: 185.118.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:37:9e:14:de:e7:24:57:2f:2a:32:22:65:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dce53b0c43c2730abc9ad5dff687679a6b492aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:c0:69:d7:10:e2:7d:82:09:a6:98:62:98:
da:2c:26:a3:58:03:03:0e:7f:6f:9e:f7:54:a9:4a:
9d:da:9e:50:e1:60:c5:c0:8a:df:c0:8a:e0:84:b7:
76:64:32:ad:cd:bb:01:9e:a6:13:c9:67:2f:83:ce:
21:46:91:93:87:0d:59:17:5a:37:24:39:6b:6a:19:
bf:63:a2:5c:5f:d5:ea:d8:0a:2f:9c:09:e8:b9:75:
33:a9:36:e3:c5:9c:aa:1d:e2:ef:47:24:7a:e4:2f:
e7:53:52:50:96:24:5f:44:6e:19:60:cc:48:72:05:
69:cb:3c:b5:ef:ad:65:53:fa:b5:89:75:6b:ee:33:
49:bf:86:b9:d3:35:10:c0:a0:44:9c:1d:e1:44:98:
ae:7a:62:c0:92:0c:67:8a:ac:d1:e6:e4:3c:23:39:
d2:d3:8b:61:fa:95:13:3b:eb:03:d8:ba:73:1b:e9:
06:75:db:ee:01:91:b1:ac:b6:8a:41:58:b2:74:f0:
eb:eb:14:18:ae:61:ca:49:ef:0e:88:98:5e:bd:12:
1f:47:fd:16:1d:33:94:71:92:f2:0a:64:70:d5:ff:
a4:3c:ac:57:1e:fd:49:4d:f7:bd:fb:95:33:f2:f2:
16:d2:b4:87:41:51:fd:5a:b9:c6:4a:0d:74:44:6f:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E5:3B:0C:43:C2:73:0A:BC:9A:D5:DF:F6:87:67:9A:6B:49:2A:EA
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/3OU7DEPCcwq8mtXf9odnmmtJKuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3f:5a:6b:c5:38:52:89:b5:0a:99:5a:98:8e:7e:2c:e7:92:
96:03:c7:c0:89:7d:54:f3:09:64:4c:62:93:d0:17:69:5b:71:
7b:ae:49:3e:91:3d:f6:40:65:12:38:aa:02:93:02:11:5e:1c:
4d:d6:48:b5:2c:0c:9a:3d:a4:8c:6b:0d:67:b7:21:31:40:fc:
ae:de:70:4e:f6:c6:38:38:b9:9e:6f:fc:e8:d3:88:3e:19:ea:
65:50:cc:83:18:87:a2:97:bd:f8:14:52:e8:ed:71:86:4b:4f:
43:e5:a1:37:fc:9a:f9:15:78:ff:a0:2b:91:1d:5d:5f:d7:7f:
25:11:83:b3:42:a2:9a:11:12:15:2f:25:8e:60:ac:9e:58:2b:
6f:f4:82:40:74:e3:7e:5a:ae:a6:ef:88:84:64:18:96:35:6c:
b2:92:68:3c:ab:f6:f9:6f:2a:88:d6:14:70:5e:8a:4c:b9:26:
bc:38:dd:35:43:ba:a0:73:88:be:cd:fa:0e:a6:bb:13:6f:27:
7d:0f:8f:72:9b:a5:00:91:77:5f:5e:ec:4f:7a:22:59:cf:bf:
1d:65:f6:aa:28:57:d3:fa:51:5f:b7:b3:cd:c9:cf:c8:55:20:
29:6f:4d:30:ad:71:39:bb:16:81:df:82:a5:ca:62:7b:f0:88:
a0:6f:52:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:12:41 2024 by rpki-client on console-ams.rpki-client.org