Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/p6OlyKsrr8wds-f_NZdmLmdZGok.roa
File: p6OlyKsrr8wds-f_NZdmLmdZGok.roa (raw, json)
Hash identifier: Qg5TCkBP3yzfvjY4gomKIFtFBk/IiUJyLag+efTv6oU=
Subject key identifier: A7:A3:A5:C8:AB:2B:AF:CC:1D:B3:E7:FF:35:97:66:2E:67:59:1A:89
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801231583A086C9DDC19350AD6DB515
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/p6OlyKsrr8wds-f_NZdmLmdZGok.roa
Signing time: Tue 02 Jan 2024 02:29:26 +0000
ROA not before: Tue 02 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15684
IP address blocks: 159.148.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:23:15:83:a0:86:c9:dd:c1:93:50:ad:6d:b5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7a3a5c8ab2bafcc1db3e7ff3597662e67591a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:03:ff:ec:eb:80:12:de:de:79:d0:d0:b3:
e6:01:44:dc:84:c8:2c:5b:5f:02:d2:44:0b:46:c2:
69:70:f4:fd:dd:ad:46:da:7d:e3:2a:d4:43:d5:2f:
d8:a5:a0:72:9d:aa:f9:76:87:2b:bd:76:9c:69:c8:
af:1a:cc:8d:8b:a8:7f:c0:8b:65:c8:6f:7c:37:1e:
f9:c8:b6:16:c0:dc:ed:5c:2a:f2:43:0e:bc:e7:6a:
89:e4:b8:76:d0:b3:4e:65:5a:7e:c5:12:bf:d6:30:
d7:fb:07:d9:f6:b9:9f:3e:67:a0:d2:56:37:ad:d7:
92:d5:1d:64:55:54:8e:58:05:21:43:30:b2:64:00:
c7:5a:04:b0:0c:a0:3b:a3:2b:e8:8d:93:c5:3b:41:
92:f0:7e:73:e5:aa:70:77:32:c4:d7:3f:93:29:94:
b4:05:6d:bd:bb:89:23:4f:04:c7:75:20:5f:9e:35:
58:fc:fa:a3:cd:20:4c:30:73:99:84:17:d0:28:8b:
14:cc:22:f3:ab:5a:e7:c0:46:53:00:37:61:f7:ee:
2f:90:0a:15:c8:c3:44:e8:18:8d:58:52:63:6b:ee:
52:f6:b3:49:52:d2:f2:3d:84:e0:b5:f1:b5:e2:3c:
3e:55:9f:6e:9c:ed:d8:5d:3a:45:df:0e:e4:f3:33:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A3:A5:C8:AB:2B:AF:CC:1D:B3:E7:FF:35:97:66:2E:67:59:1A:89
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/p6OlyKsrr8wds-f_NZdmLmdZGok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:77:60:0c:4b:14:dc:cc:c1:d8:f4:1f:ff:07:0a:78:dd:c8:
71:cd:20:0b:c3:3a:b2:b2:8d:df:71:12:94:e4:c3:c5:3c:64:
43:0c:d1:dd:80:55:61:3b:9a:b6:c8:66:c6:69:c5:1a:b3:df:
30:d6:03:8d:e5:b2:7d:ec:71:ae:e4:ba:13:03:d2:13:3e:a1:
f5:f9:2a:be:45:e5:7b:93:04:9f:b6:4a:5f:15:cc:cf:10:e0:
35:e2:6d:09:06:4b:92:1c:d5:4b:19:93:ed:7c:79:3c:79:e7:
62:14:7c:19:69:ba:21:1f:b2:f4:82:32:84:0f:59:59:c3:83:
45:e8:60:21:83:00:77:7d:aa:1c:2f:a4:38:c1:17:d2:da:41:
82:6e:0b:66:8b:01:72:48:2b:48:b4:de:73:a0:af:e0:94:db:
f4:7e:ca:92:cf:28:72:e2:4f:ee:1d:cf:b5:53:2b:73:77:af:
7e:31:9c:67:38:ef:08:64:42:54:f6:c7:a8:b0:0d:cc:59:c6:
ee:cc:66:0c:7f:bd:48:03:c2:84:c3:a9:c9:d7:c1:cd:6f:52:
d3:0d:25:03:ce:25:21:39:9f:7a:cb:9e:ab:70:3d:52:e0:cb:
9d:43:cb:18:ae:55:06:25:f1:a4:3c:34:5d:ea:9c:81:c3:55:
c5:d9:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:35:54 2024 by rpki-client on console-fra.rpki-client.org