Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ou83-gNeHCRiwgd0o2B9WqbhYRE.roa
File: ou83-gNeHCRiwgd0o2B9WqbhYRE.roa (raw, json)
Hash identifier: O/v+Axv7YcOQGFbMWVG8yIkGr7w5e76SytnA2HitaM4=
Subject key identifier: A2:EF:37:FA:03:5E:1C:24:62:C2:07:74:A3:60:7D:5A:A6:E1:61:11
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801318A1B42B567A88A95FB82810EC5
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ou83-gNeHCRiwgd0o2B9WqbhYRE.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201315
IP address blocks: 85.254.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:31:8a:1b:42:b5:67:a8:8a:95:fb:82:81:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2ef37fa035e1c2462c20774a3607d5aa6e16111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:61:3e:61:36:62:14:f0:f8:ab:ef:bb:58:
01:7b:9e:e8:50:0a:e9:b4:d3:d9:db:dc:3b:63:56:
4f:b4:96:51:ce:33:7f:2c:1b:a3:eb:f1:91:5c:15:
73:ca:06:51:1f:2e:bf:bf:3d:46:ff:fb:7a:b8:e2:
23:8a:9f:06:55:e2:5c:7d:e0:d6:d2:8e:6f:cf:f6:
7f:0d:07:78:b2:f9:bc:2d:03:24:61:36:e8:35:ad:
90:96:9c:9b:c8:7f:7b:98:4f:dd:e0:6f:ac:8b:60:
b9:32:62:0d:bb:3a:8c:d6:1f:08:67:e1:03:e5:be:
68:7e:61:c5:86:f0:6f:4f:22:07:41:c0:b4:51:41:
1f:da:ab:88:34:58:50:13:22:9e:50:68:3f:55:13:
fd:4a:5c:40:9c:cb:32:3d:57:bb:49:30:0e:fe:70:
cf:20:f1:ac:14:b7:d7:1e:44:31:95:86:0d:f4:f4:
f3:9b:47:49:e5:63:0e:c5:ba:f3:dd:f0:6a:8b:a5:
6c:72:25:f9:a0:b4:98:6e:17:ec:fd:64:05:5f:d3:
3f:d7:7b:68:04:f8:36:f1:b2:fe:bf:1d:ca:e1:33:
bd:c6:46:51:ff:51:64:66:00:a9:4d:8d:1c:f2:0c:
3b:d6:78:fc:15:35:26:b5:3f:9c:b9:88:d4:66:c8:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EF:37:FA:03:5E:1C:24:62:C2:07:74:A3:60:7D:5A:A6:E1:61:11
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ou83-gNeHCRiwgd0o2B9WqbhYRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:cd:00:b2:34:ce:9a:17:70:13:9e:d8:33:b8:a4:bf:74:df:
c7:58:de:ea:22:83:69:45:83:df:ed:9e:c9:5e:fe:53:f9:86:
65:e9:b4:79:84:48:c1:31:1e:84:b6:e8:73:5c:a9:b2:93:bf:
d2:b2:65:4a:87:ea:e7:55:33:7a:97:bb:aa:69:59:22:26:81:
08:b8:cf:4d:17:69:1c:77:f0:88:71:41:6b:5d:b4:96:b0:15:
b0:19:20:1c:2e:50:14:05:0e:5e:57:c4:f4:72:16:2f:f5:63:
73:53:20:68:87:bf:24:36:c6:2e:00:74:1f:ca:62:21:cd:aa:
2d:e5:7d:43:c7:8c:40:41:4b:f5:33:f7:16:d5:99:52:bc:41:
aa:50:4b:c7:c8:ef:21:09:3e:4e:88:8b:96:1d:cf:d3:d0:2c:
47:59:d6:b0:60:84:67:91:c0:6b:46:03:85:10:db:17:49:01:
ab:4b:6e:73:92:8b:d0:d1:3e:17:b4:35:a2:74:b1:83:d9:30:
28:ce:bd:f2:12:8b:1c:54:67:c8:07:ff:f3:fa:46:5a:5b:64:
87:fd:fa:f5:af:66:60:da:bc:27:bb:78:6a:e8:12:f0:27:cc:
a3:bf:24:b0:f9:f5:89:6e:36:5c:29:99:22:de:17:7b:fc:1c:
36:8c:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:04:46 2024 by rpki-client on console-ams.rpki-client.org