Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/ocUMd3KJFQvMeadkesrvD5x1X3I.roa
File: ocUMd3KJFQvMeadkesrvD5x1X3I.roa (raw, json)
Hash identifier: YdLvMRUfJVXGsJDP8+S1kyg+9xnX2u5V6l0hAHiX4Uo=
Subject key identifier: A1:C5:0C:77:72:89:15:0B:CC:79:A7:64:7A:CA:EF:0F:9C:75:5F:72
Certificate issuer: /CN=97668547a433343dde9bb36595bc903b4f149604
Certificate serial: 018CC493202A1437AA80BC394963805BF4A5
Authority key identifier: 97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/ocUMd3KJFQvMeadkesrvD5x1X3I.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 194.54.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:20:2a:14:37:aa:80:bc:39:49:63:80:5b:f4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97668547a433343dde9bb36595bc903b4f149604
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1c50c777289150bcc79a7647acaef0f9c755f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:ed:37:f8:0f:81:ca:6f:d7:fd:b1:49:3a:
28:54:fa:c4:51:84:e4:87:90:ed:3f:a0:9a:72:56:
6b:b1:2b:24:bc:6e:2f:8b:19:af:d8:4b:67:fc:9a:
23:69:ab:35:8e:ec:5a:82:44:83:b5:c3:40:21:8b:
db:37:44:4c:04:cd:2b:9a:e0:cc:62:08:ab:2b:d5:
c8:b2:43:8f:87:33:8e:c9:03:7a:f2:77:dc:ef:50:
f8:49:ba:7d:74:8d:6a:c1:83:7d:b7:15:f2:91:c3:
92:6d:1b:bf:44:b4:4d:f0:e5:2d:57:0c:f6:64:c8:
70:4f:54:3e:13:3f:a8:de:2d:bb:d6:cb:9b:3b:5f:
9f:56:58:fd:91:01:e1:ca:71:1c:13:2b:4d:ff:52:
e1:3e:33:e6:4d:6f:96:da:04:94:2e:1f:a6:e5:d3:
43:37:60:3b:1a:1c:fb:6f:0e:84:95:31:c5:96:8b:
01:2d:a0:75:0f:32:b8:3d:22:22:8c:00:f7:7f:75:
da:e7:c4:a3:99:01:60:1b:c1:30:5d:15:59:3f:fd:
d9:5f:ba:c3:54:1b:d3:24:75:ba:38:fb:26:b1:04:
9a:71:fd:e5:b1:3a:8d:27:de:a5:28:ba:40:54:e5:
29:32:30:84:e8:85:f3:aa:5b:37:cd:7d:45:52:e3:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:0C:77:72:89:15:0B:CC:79:A7:64:7A:CA:EF:0F:9C:75:5F:72
X509v3 Authority Key Identifier:
keyid:97:66:85:47:A4:33:34:3D:DE:9B:B3:65:95:BC:90:3B:4F:14:96:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2aFR6QzND3em7NllbyQO08UlgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/ocUMd3KJFQvMeadkesrvD5x1X3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/978c2e-1b76-48b0-a603-64c1c279ccc0/1/l2aFR6QzND3em7NllbyQO08UlgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.68.0/22
Signature Algorithm: sha256WithRSAEncryption
06:ba:ec:a7:fa:76:a3:5f:bf:db:0b:24:eb:59:2a:2d:54:fb:
2b:13:12:6c:ea:6d:62:5f:cc:d1:2a:db:f6:38:3b:04:95:10:
79:77:b5:69:08:18:ff:45:f9:72:0a:21:94:f7:a9:0f:8f:4a:
e4:57:f8:2b:a6:47:b9:67:30:d9:e5:b4:75:0f:cd:2f:2c:26:
95:2d:e2:78:7d:9b:e7:5d:3c:c8:f1:a0:7b:8c:86:3f:c6:7a:
93:49:3d:8f:ae:b7:b6:32:68:8c:f9:c3:22:7a:48:a5:eb:60:
0e:30:15:83:00:38:27:98:29:31:26:d1:e3:33:0d:fe:1b:e1:
c3:e2:3f:21:b9:a1:b3:b5:f0:cb:75:7e:74:a4:25:5a:22:80:
58:ec:e9:e8:a3:11:d6:67:b5:48:1f:1d:a9:7d:d3:6b:c6:c0:
91:10:5b:8f:2e:06:27:81:90:64:36:af:d9:ee:a0:a9:c7:6b:
82:e8:9c:ef:63:f8:9c:78:31:aa:64:18:83:2b:ac:e6:23:78:
a7:41:14:c1:71:af:b6:a9:ec:73:2f:84:95:16:8d:17:f9:f5:
d2:08:bf:67:ac:30:eb:01:76:62:8c:0d:93:2e:28:29:91:f9:
1e:cd:6a:63:5b:b7:84:21:64:28:e4:a4:12:a2:97:03:a1:c9:
6d:25:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:31:33 2024 by rpki-client on console-ams.rpki-client.org