Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Okgcg3FzXqw8mvVPFTcrWGNl_LE.roa
File: Okgcg3FzXqw8mvVPFTcrWGNl_LE.roa (raw, json)
Hash identifier: O2oOE7BAjMOfTVpOaZoJzsoOZnA/WbvHmBcQQjKCT0Q=
Subject key identifier: 3A:48:1C:83:71:73:5E:AC:3C:9A:F5:4F:15:37:2B:58:63:65:FC:B1
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018E15CA92C35E998B9F4EAECDE6750DD775
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Okgcg3FzXqw8mvVPFTcrWGNl_LE.roa
Signing time: Wed 06 Mar 2024 22:03:01 +0000
ROA not before: Wed 06 Mar 2024 22:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.135.139.0/24 maxlen: 24
88.218.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:15:ca:92:c3:5e:99:8b:9f:4e:ae:cd:e6:75:0d:d7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Mar 6 22:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a481c8371735eac3c9af54f15372b586365fcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:b6:13:42:b3:9b:5d:51:a2:64:85:d7:75:
9f:a1:ca:66:a6:7e:41:89:d1:10:4f:0d:80:05:e2:
3f:c7:a1:56:f7:38:86:0c:aa:06:09:24:84:f1:7f:
47:81:c0:6a:74:13:41:40:2c:13:07:77:3a:b6:ef:
f1:03:95:00:e3:68:25:6e:b1:a9:4f:c0:a5:46:f6:
7c:95:30:00:c8:3b:15:b0:95:22:6e:bc:c2:64:0b:
73:c7:19:21:04:5b:31:ca:e9:51:2e:f8:54:ee:66:
22:03:c7:5c:cf:e0:ec:b4:b9:15:ab:8b:a1:48:bf:
81:63:1e:d2:84:3d:ca:0e:30:be:21:96:0f:d3:e1:
f1:1e:d2:8d:63:4d:da:93:94:0a:ef:ae:1f:4b:a6:
cf:82:b8:22:20:67:d5:ce:27:83:23:6b:76:5e:dd:
af:24:66:fc:42:90:6d:e5:69:f8:d8:9b:06:f6:ba:
87:77:9f:0b:df:a2:4e:a9:03:6a:7c:3d:94:5c:da:
0c:3f:46:f0:c2:bf:fc:64:d1:27:87:26:29:59:df:
d7:d7:6e:4b:a0:94:47:b3:b6:9c:7d:c5:87:5b:e8:
ff:62:88:56:bb:e9:9c:72:85:fd:74:67:19:e9:1a:
e8:4d:e3:27:42:5a:74:48:08:5d:93:2c:e4:50:b8:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:1C:83:71:73:5E:AC:3C:9A:F5:4F:15:37:2B:58:63:65:FC:B1
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/Okgcg3FzXqw8mvVPFTcrWGNl_LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.139.0/24
88.218.104.0/24
Signature Algorithm: sha256WithRSAEncryption
54:30:4e:0c:28:c0:74:9f:dc:ad:c5:f5:e1:1d:bf:15:47:a1:
93:81:d7:eb:0a:be:fa:1d:0c:7a:78:2c:0f:f5:cc:ca:b0:30:
af:8a:0b:4f:5e:aa:0b:b2:42:f1:47:1d:2a:72:fa:a6:7a:f6:
24:c2:35:78:80:03:98:12:ff:5f:5e:fb:c1:b6:93:f4:a8:3f:
e6:48:ba:23:dd:d7:8a:d8:15:db:ff:6e:de:aa:32:1a:2b:79:
35:f1:1d:71:c6:2c:b5:cf:05:e0:f4:d9:38:c1:84:b1:13:b0:
d2:56:93:d6:6f:05:79:5d:97:fc:7d:82:f0:d9:98:e1:ea:19:
b5:11:3a:7c:60:5d:14:fe:ea:53:3c:51:c6:41:9c:09:57:45:
54:70:a2:86:f9:66:c3:fb:c1:38:dd:86:33:b0:85:6f:71:86:
d8:08:3b:3c:fd:40:f7:bf:1c:44:3a:da:c7:28:5f:c4:a6:d5:
9c:f7:d1:f6:42:ba:d8:8e:3a:ec:75:6a:75:21:54:a4:47:f3:
28:64:06:48:58:9d:45:da:49:af:29:0d:5c:74:85:a7:e1:8d:
0e:9a:a6:4d:75:b9:bb:e5:0c:96:51:40:8c:5b:d0:db:92:58:
66:4b:d7:f3:a4:22:e1:70:f5:fa:50:e0:ed:b9:de:f4:91:9c:
6e:24:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:06:34 2024 by rpki-client on console-ams.rpki-client.org