Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OFG_bjXlbfnDrIe0waynkKzRfQg.roa
File: OFG_bjXlbfnDrIe0waynkKzRfQg.roa (raw, json)
Hash identifier: bvJoqiWDVEAJiXxEy7hpm+UTpPODySQVji+1Gzugg2s=
Subject key identifier: 38:51:BF:6E:35:E5:6D:F9:C3:AC:87:B4:C1:AC:A7:90:AC:D1:7D:08
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018E76CFABD866F780EA50D630B33E098422
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OFG_bjXlbfnDrIe0waynkKzRfQg.roa
Signing time: Mon 25 Mar 2024 18:11:45 +0000
ROA not before: Mon 25 Mar 2024 18:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 193.233.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:cf:ab:d8:66:f7:80:ea:50:d6:30:b3:3e:09:84:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 25 18:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3851bf6e35e56df9c3ac87b4c1aca790acd17d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:e1:6b:af:e1:e4:ac:03:c2:62:6d:fd:01:
6f:54:49:4c:71:42:b9:89:d0:db:61:ad:78:fa:a3:
ae:1a:5c:c9:9e:c1:cc:4e:ad:f7:48:89:6f:40:a3:
0f:6b:67:3f:6a:94:d7:e1:5b:ad:5b:69:2b:42:c6:
d2:2b:9b:b4:7e:28:b5:0c:2e:ad:04:cf:12:64:d4:
f0:cf:f7:96:73:15:b7:58:85:df:3c:cb:d7:f2:a0:
1d:19:5c:3c:10:d7:39:31:7f:96:d2:01:b2:f7:7d:
f5:6d:43:74:6b:33:3a:db:be:75:a2:8f:03:a9:e3:
69:50:f6:9e:e8:a9:64:83:a9:ca:47:26:a6:ee:b3:
60:e1:22:87:63:c4:5b:d6:03:32:08:cb:83:ee:62:
89:0a:a3:15:b2:f5:b8:67:13:82:77:bf:a4:2d:dc:
bf:65:f6:e0:9f:75:e0:9b:60:ce:52:23:b1:7d:c5:
4b:fa:dd:92:aa:e4:33:d0:02:94:3d:3d:80:d3:df:
0f:0c:7d:b2:64:27:45:36:07:62:9e:57:c9:32:4f:
fb:ca:40:56:d2:5b:6c:fe:a4:cb:2a:1c:b4:2a:e4:
d8:bc:75:64:d2:6f:7d:58:74:54:35:91:db:37:a8:
30:e3:33:2b:7a:5f:c3:06:f1:29:5b:f7:17:68:b3:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:51:BF:6E:35:E5:6D:F9:C3:AC:87:B4:C1:AC:A7:90:AC:D1:7D:08
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OFG_bjXlbfnDrIe0waynkKzRfQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.21.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2a:bb:76:f6:b0:80:55:3a:9a:c6:3b:77:c2:b3:ad:f3:c7:
85:33:89:22:82:2f:76:58:d4:51:32:8b:b8:e6:4e:11:6d:d3:
ac:4e:3f:55:aa:6c:01:3b:86:54:c5:fc:17:a0:15:c6:cc:c4:
07:ab:b1:2b:f8:e7:82:61:ae:c7:90:e0:e3:e1:d4:98:08:1e:
88:0f:ae:cd:c1:16:2e:39:00:53:e1:63:76:57:e6:1f:c8:4b:
f7:96:49:20:51:63:64:3e:1e:ef:ff:f4:a3:63:49:84:3b:c4:
61:a9:af:7b:45:2a:06:3f:99:be:5e:40:a0:84:36:a7:3e:06:
9f:a0:90:a6:18:c7:a2:95:52:07:40:6b:d7:49:6b:1b:ee:61:
ea:a8:44:14:b4:67:82:60:91:84:71:14:e4:85:03:d0:c3:1a:
5e:1d:25:7f:ca:aa:b7:ca:9c:27:fa:c0:44:29:d5:1f:c5:bf:
ff:4c:aa:c5:87:35:ef:4d:a6:fd:2c:86:aa:cd:d7:b0:63:c1:
9d:98:e0:a4:63:c8:ae:7c:13:28:81:8f:0d:0a:8f:31:7b:9a:
d2:e8:ac:28:7b:20:73:f7:0d:fe:0f:a4:dd:6e:b1:7b:2e:c0:
8c:43:3d:b1:0e:14:35:8a:7c:61:fe:8e:da:e5:3d:b9:ae:0b:
7a:2e:50:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:15:45 2024 by rpki-client on console-fra.rpki-client.org