Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/oF66taBoMRy38apPe7b-RJgOWTg.roa
File: oF66taBoMRy38apPe7b-RJgOWTg.roa (raw, json)
Hash identifier: AAHYT+KZfTT/2LwFdhk3i4UOs+3p96v8nNDmwJJHxy4=
Subject key identifier: A0:5E:BA:B5:A0:68:31:1C:B7:F1:AA:4F:7B:B6:FE:44:98:0E:59:38
Certificate issuer: /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial: 018E37CCFDE25C2EF92311C294F3EA417BE4
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/oF66taBoMRy38apPe7b-RJgOWTg.roa
Signing time: Wed 13 Mar 2024 12:32:44 +0000
ROA not before: Wed 13 Mar 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28905
IP address blocks: 46.30.64.0/21 maxlen: 21
185.174.44.0/22 maxlen: 22
213.226.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:cc:fd:e2:5c:2e:f9:23:11:c2:94:f3:ea:41:7b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Validity
Not Before: Mar 13 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a05ebab5a068311cb7f1aa4f7bb6fe44980e5938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:dc:97:86:96:87:e9:c4:c7:c1:72:99:70:
cf:cd:7e:29:83:da:ef:00:4c:9b:e3:38:d2:7d:75:
a2:59:d3:4c:51:45:cd:0c:ef:04:74:d7:ed:e9:51:
1c:06:02:93:7b:f4:8c:43:ba:51:aa:77:85:16:ec:
33:75:23:a7:2e:6d:de:04:28:53:ef:92:75:63:32:
91:fc:5c:cf:6e:35:5a:65:40:7e:73:64:64:6d:b7:
e0:73:1b:8c:3d:11:60:39:99:90:a1:de:6b:8d:61:
83:43:0d:9c:74:49:ee:ef:e8:7c:75:a9:fd:be:55:
02:7d:b5:f4:95:b0:74:cc:32:71:83:eb:c8:59:82:
ef:ab:bc:d3:5d:46:57:e6:11:6d:38:dc:7a:b8:ab:
07:d5:15:a5:96:19:8b:b8:5b:24:35:f3:da:00:97:
e7:dd:5f:47:74:f6:e5:0f:44:52:40:55:1f:5d:b7:
31:a3:46:5e:f2:90:bb:ca:20:96:11:f8:55:9b:9e:
fc:46:d9:ee:e6:5a:17:09:c2:9a:7b:96:9c:66:74:
21:df:c4:b6:c9:18:c3:48:b6:96:ac:e6:6e:b5:13:
61:b6:a6:fe:47:fb:fa:87:d2:15:a6:e3:7e:a8:e3:
cc:25:db:9e:9c:e6:60:26:9a:cb:34:07:ce:c3:de:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:BA:B5:A0:68:31:1C:B7:F1:AA:4F:7B:B6:FE:44:98:0E:59:38
X509v3 Authority Key Identifier:
keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/oF66taBoMRy38apPe7b-RJgOWTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.64.0/21
185.174.44.0/22
213.226.192.0/20
Signature Algorithm: sha256WithRSAEncryption
12:87:95:7c:46:af:94:c5:77:5f:33:e5:61:00:73:3b:8c:8c:
fa:34:d8:02:ea:70:91:28:2d:c2:da:60:67:7c:a0:48:a6:fb:
f1:d8:e1:36:3b:d8:7b:37:69:bf:4d:4f:c9:b5:4c:e1:e6:5d:
5f:95:b2:f6:c1:d7:ee:52:7d:bb:c5:53:dc:23:2a:a7:a1:fd:
20:f3:79:bf:2c:d4:51:87:c1:ec:bd:9e:33:75:36:b8:b2:c4:
5e:68:45:b7:91:1d:98:c0:3c:d9:e5:f6:b3:4b:6d:6b:a6:96:
44:15:d5:a8:9c:ae:99:00:5c:90:cf:e3:36:18:75:c2:54:e4:
72:63:ae:2d:80:bd:6d:ef:3b:b3:72:83:c1:70:50:3d:a5:d4:
37:95:16:61:d5:ed:ac:28:ea:f3:15:06:d1:87:56:a3:e4:62:
1b:e0:cd:d5:a2:29:4a:07:5e:71:92:fa:b8:36:dd:0a:d0:39:
cb:b7:74:d0:d4:95:d7:3b:25:d0:06:ef:85:fb:48:80:43:9e:
28:f0:ee:34:8e:e9:17:16:29:bf:0c:4b:4c:95:8f:41:1d:97:
37:39:12:e7:52:ae:cd:5e:cb:44:5d:51:b0:53:34:b1:ac:66:
ba:62:b7:8c:07:95:8a:54:5b:b4:8a:63:d1:84:f1:5c:fe:34:
e0:06:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:02 2024 by rpki-client on console-fra.rpki-client.org