Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/oc3_si9kuMMvjCZ-NlfRI1KJwAg.roa
File: oc3_si9kuMMvjCZ-NlfRI1KJwAg.roa (raw, json)
Hash identifier: 8LmNaCSTJaJpCgiNTo7B29mAaWlinuhbECk3Plmw2ZM=
Subject key identifier: A1:CD:FF:B2:2F:64:B8:C3:2F:8C:26:7E:36:57:D1:23:52:89:C0:08
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 01919DF0B2FB9FE18DB95BE18A2873EF2F4C
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/oc3_si9kuMMvjCZ-NlfRI1KJwAg.roa
Signing time: Thu 29 Aug 2024 11:41:22 +0000
ROA not before: Thu 29 Aug 2024 11:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44780
IP address blocks: 195.149.92.0/23 maxlen: 24
195.158.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:f0:b2:fb:9f:e1:8d:b9:5b:e1:8a:28:73:ef:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Aug 29 11:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1cdffb22f64b8c32f8c267e3657d1235289c008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9a:70:d9:83:0e:bf:0c:34:0f:1d:7e:ab:8f:
d2:79:bd:a3:4b:1f:15:5c:e8:ea:32:58:bc:8d:60:
48:a2:55:fe:78:46:f2:39:c5:25:dc:78:f5:9f:99:
b3:68:9d:1b:e6:b1:aa:51:9d:2d:05:8e:59:39:fa:
36:2b:55:0d:a2:13:f0:03:d4:03:66:0f:46:dd:43:
38:2f:99:6f:df:90:fc:18:a2:87:4f:c6:58:bf:58:
22:07:da:c1:43:03:a5:fd:45:62:94:60:12:ee:29:
e4:82:32:01:58:5c:de:e9:3d:fb:32:eb:ac:e6:73:
f4:1c:82:34:72:a0:f9:7f:cd:5a:91:77:81:c6:49:
da:36:a8:0b:67:bb:dd:fd:92:f5:88:d3:28:c2:40:
3e:48:34:f4:a1:45:21:d2:ac:55:f8:a4:71:73:d1:
ca:12:09:f8:45:14:09:9c:8b:7f:29:e6:ae:5a:a3:
0e:87:c9:10:9c:22:45:87:b3:1f:07:5e:80:10:c3:
55:98:97:2c:c4:c7:1a:14:67:fe:a5:29:31:61:d7:
f7:10:0f:7e:a6:3b:b0:a7:88:0d:84:03:59:fc:15:
68:2b:83:a9:d5:f6:81:f3:17:95:6b:e6:c4:a5:3a:
ef:c9:8b:c9:4d:15:a8:ab:88:a4:99:46:7b:9c:6c:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CD:FF:B2:2F:64:B8:C3:2F:8C:26:7E:36:57:D1:23:52:89:C0:08
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/oc3_si9kuMMvjCZ-NlfRI1KJwAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.92.0/23
195.158.238.0/23
Signature Algorithm: sha256WithRSAEncryption
97:c0:66:2b:f6:f1:1e:c7:7e:04:a2:3a:f6:9a:5f:57:0e:2d:
ae:39:02:11:a3:fc:90:c6:15:ca:13:e1:d0:a9:de:b8:ec:73:
95:2c:cd:31:37:96:53:2c:5e:37:4a:44:ab:5b:d4:a7:5c:f0:
e9:2e:de:1f:b9:83:60:92:30:80:23:80:63:0c:aa:76:ec:3a:
10:a6:aa:bd:1e:cd:46:68:de:07:e8:24:69:c9:65:68:29:62:
eb:66:5c:b5:da:a2:ad:27:59:a5:17:6b:99:88:ec:ee:d6:c1:
c4:92:12:89:7e:37:d3:27:ab:06:c7:99:98:00:fb:bf:a6:05:
94:b3:92:17:8d:42:e4:37:99:b2:9c:eb:93:71:9b:f9:d5:85:
fe:ff:4f:20:49:a1:fd:ca:a5:2b:22:fd:d2:10:f1:2a:44:f5:
2b:81:23:79:c2:42:7a:cb:89:ab:50:85:31:77:7e:5d:dd:eb:
4c:13:df:16:51:6f:62:5a:f8:3d:29:55:20:f6:17:4f:9a:74:
10:78:65:cf:7c:ee:23:55:17:b9:41:33:08:87:17:e1:94:5c:
50:f2:e5:e0:a9:47:ec:5d:65:17:87:81:63:df:6c:21:12:1a:
f8:86:47:4f:d6:bf:5a:81:7d:7f:9d:72:eb:8c:92:bf:56:4b:
43:6e:4a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:37 2024 by rpki-client on console-fra.rpki-client.org