Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/Ott_T1R8mTHvCUvO3sI-6zSOT0A.roa
File: Ott_T1R8mTHvCUvO3sI-6zSOT0A.roa (raw, json)
Hash identifier: 0mZ49bnc8SfwvqsAHbfZqmoTnt790vI7gI0bFqsruS4=
Subject key identifier: 3A:DB:7F:4F:54:7C:99:31:EF:09:4B:CE:DE:C2:3E:EB:34:8E:4F:40
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 018F72FCDE1B26A6AC12E33A8E39FFFDB250
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/Ott_T1R8mTHvCUvO3sI-6zSOT0A.roa
Signing time: Mon 13 May 2024 17:25:25 +0000
ROA not before: Mon 13 May 2024 17:25:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:fc:de:1b:26:a6:ac:12:e3:3a:8e:39:ff:fd:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: May 13 17:25:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3adb7f4f547c9931ef094bcedec23eeb348e4f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:d2:2f:b6:4a:a4:4d:9c:7f:ca:92:83:25:
5c:18:64:44:1c:bd:78:19:f1:e0:1b:f8:a9:d9:6e:
ec:46:6c:bb:f5:2f:3f:2e:08:5a:a7:83:74:33:ee:
02:8f:d3:d9:5e:27:50:37:55:c3:10:91:fd:87:4a:
13:85:80:0e:68:d2:e8:26:59:35:36:3c:9a:b1:3a:
e4:72:e0:57:6c:c2:a9:e5:21:38:90:ca:6b:0c:be:
94:f2:91:5a:07:62:e3:47:cb:87:2f:81:df:80:7a:
11:67:73:47:1d:71:5b:d6:b9:b9:5f:16:da:ce:f9:
9a:e4:28:c0:00:4b:51:dd:72:83:61:9f:fc:48:07:
94:89:3c:52:3a:7d:87:39:3a:d2:59:51:61:0f:0a:
02:34:e3:aa:27:46:6d:46:c5:f8:32:39:f6:c7:59:
e4:dd:b8:8d:9b:8c:a0:e6:a1:33:e9:fc:c5:e9:0e:
ae:0f:d6:7f:cf:a8:3d:ae:0f:8a:5b:c5:79:21:b1:
12:e4:de:d7:6a:a9:a3:72:60:cf:50:7a:a4:a8:02:
b9:7a:32:a1:27:e4:04:bc:ba:21:89:ac:5b:c7:46:
05:1c:e3:19:72:13:51:ea:20:14:3a:f3:ba:b6:69:
ad:23:8a:c0:1a:ed:ed:96:49:bd:5a:11:50:95:42:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:7F:4F:54:7C:99:31:EF:09:4B:CE:DE:C2:3E:EB:34:8E:4F:40
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/Ott_T1R8mTHvCUvO3sI-6zSOT0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
57:81:61:0f:03:83:8f:ec:e5:d3:cb:42:d5:17:62:8f:43:78:
8b:5c:fd:d6:1e:9c:da:13:1c:e4:a0:b0:76:4a:e3:e0:09:aa:
3f:62:b7:9f:ef:60:a7:0f:77:2e:0b:62:f0:88:18:0d:26:62:
d0:1b:98:aa:d0:0a:2a:a9:2b:4a:57:3a:40:27:27:d9:d0:a8:
b9:82:2d:19:11:15:2c:dd:d4:a8:42:a0:9e:a9:32:f0:7e:5b:
bf:24:f1:52:7e:9b:13:d6:b7:c3:4e:b5:f8:6e:19:6c:bd:07:
d7:95:b5:01:4d:00:47:c3:d5:fa:f5:1e:79:f1:45:22:97:cf:
a4:7c:f3:42:97:59:93:1d:75:8d:85:b8:d2:18:1d:94:4f:c7:
b9:c3:e6:7a:fe:37:9b:c7:c1:ae:21:3e:e9:c1:48:5a:86:23:
c8:2b:7b:28:4a:9c:63:dd:85:c6:46:bb:7e:05:13:86:c7:6a:
57:d7:e2:b8:a3:23:0c:c0:c4:f9:4f:22:cd:e2:07:cc:94:58:
a8:df:ae:49:0f:ac:38:a2:a5:70:e9:da:fc:e2:8f:00:99:dd:
81:ac:fc:79:95:b4:e1:49:6c:b9:2d:85:01:45:e9:05:52:36:
89:a7:a8:4a:57:d3:35:be:8f:66:a9:1f:2b:8d:d4:2f:13:41:
fe:08:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:05:51 2024 by rpki-client on console-fra.rpki-client.org