Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/okPiyX-G0ceAVoVM4I0tQaNyg1c.roa
File: okPiyX-G0ceAVoVM4I0tQaNyg1c.roa (raw, json)
Hash identifier: TNzg8xT0lNWX9Yzp7QsyJh5XaMKqvxh0I+9d/t8YA6s=
Subject key identifier: A2:43:E2:C9:7F:86:D1:C7:80:56:85:4C:E0:8D:2D:41:A3:72:83:57
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 018CC26D3983C24999898370FFEA8C18764B
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/okPiyX-G0ceAVoVM4I0tQaNyg1c.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1103
IP address blocks: 192.31.231.0/24 maxlen: 24
130.37.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:39:83:c2:49:99:89:83:70:ff:ea:8c:18:76:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a243e2c97f86d1c78056854ce08d2d41a3728357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:ec:e2:67:ab:30:5b:59:47:e5:23:46:4d:
3d:8e:ed:ad:67:de:0c:39:89:16:d4:38:12:24:cc:
7d:9a:e6:4c:98:15:ae:a2:f4:17:52:1d:59:e9:ac:
d2:35:d4:a0:52:bb:cd:e9:c3:10:52:7e:a7:c2:10:
96:28:f5:d3:8f:df:2e:e9:7b:2a:52:5f:8f:1a:38:
ba:78:44:da:f3:e0:6e:5d:53:3a:18:60:a4:cd:30:
c8:b5:ca:9a:00:b8:23:00:84:c6:59:73:e3:63:65:
fd:c1:3f:eb:12:b3:29:22:e9:7b:59:21:3b:85:1c:
76:82:13:03:9f:06:63:05:eb:3c:c1:0d:d2:4a:e7:
89:8e:3a:23:52:f3:0a:83:aa:d0:01:dd:b8:6e:1d:
28:1b:51:7a:f3:92:f0:01:2a:42:49:0e:be:99:ec:
25:0f:de:ab:52:33:c4:61:ba:35:5f:44:31:46:a5:
3f:3d:0a:c0:2d:8a:b8:56:30:3e:b3:73:d2:48:b4:
b1:06:9f:5b:86:4b:82:cc:3e:2a:c3:d9:fe:c1:38:
72:e8:84:c3:62:26:d3:b9:23:4c:64:46:8c:46:8a:
83:d1:30:04:02:c7:5a:bd:b9:4d:4c:d9:db:6a:9a:
4a:0f:70:ab:9f:c6:62:a8:6f:1c:6c:c6:6b:a6:a4:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:43:E2:C9:7F:86:D1:C7:80:56:85:4C:E0:8D:2D:41:A3:72:83:57
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/okPiyX-G0ceAVoVM4I0tQaNyg1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.37.0.0/16
192.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:be:80:55:a8:28:17:a6:b8:32:6f:99:db:fc:d3:1f:28:58:
b2:1c:41:97:92:bf:f5:59:33:70:05:1d:27:e1:e1:59:57:00:
01:76:14:33:9f:e9:69:a2:37:2e:44:e0:79:27:c6:20:53:a7:
e5:c4:b5:92:97:5f:7b:23:b0:c3:a8:8c:52:e8:51:12:3d:1d:
3a:bd:f5:e4:28:1f:c7:6a:f0:9a:2c:1f:28:1d:85:da:6a:68:
95:f9:2c:97:d2:4c:85:3f:dd:d9:99:f1:93:4f:fd:7b:87:e0:
79:a2:5e:bd:46:d1:6e:fc:95:df:22:43:28:69:c4:4e:bb:50:
50:af:22:a3:88:c9:65:15:4b:3d:f7:50:c7:9e:b6:89:64:52:
57:0e:4c:b8:7b:26:50:62:69:09:93:4a:fb:6b:d1:f6:7a:d0:
85:4f:f5:d4:bf:93:36:23:f3:24:18:73:e9:d2:f7:ed:e3:db:
ec:34:5a:2b:36:90:6f:3d:92:c5:63:90:e1:5a:9e:50:28:10:
bc:fd:5f:b2:db:29:e3:09:99:53:42:4d:ba:70:ca:b7:d8:52:
06:2d:37:be:eb:d8:be:33:5a:e7:03:8e:be:6a:a8:80:d0:d3:
52:73:89:a3:14:80:d0:68:73:e4:8e:78:1d:b3:5c:8b:bc:91:
d5:9c:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:59:28 2024 by rpki-client on console-fra.rpki-client.org