Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/OE4H0eAt7GsPZXpJIrrL6fGj3Jk.roa
File: OE4H0eAt7GsPZXpJIrrL6fGj3Jk.roa (raw, json)
Hash identifier: 0vXYuJOqlxw5t+ZYIuNMCR5hHdWg2Nvn96yUwS34ohw=
Subject key identifier: 38:4E:07:D1:E0:2D:EC:6B:0F:65:7A:49:22:BA:CB:E9:F1:A3:DC:99
Certificate issuer: /CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
Certificate serial: 018CC9BCFCFD2E2EC51C7B8865694F47C310
Authority key identifier: 2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/OE4H0eAt7GsPZXpJIrrL6fGj3Jk.roa
Signing time: Tue 02 Jan 2024 10:34:15 +0000
ROA not before: Tue 02 Jan 2024 10:34:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51295
IP address blocks: 193.29.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fc:fd:2e:2e:c5:1c:7b:88:65:69:4f:47:c3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
Validity
Not Before: Jan 2 10:34:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=384e07d1e02dec6b0f657a4922bacbe9f1a3dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ee:7e:2b:22:9d:f5:b1:60:dd:a1:dd:88:c0:
63:cd:8f:d7:c2:e9:f2:7a:74:f6:5c:78:8f:b6:9c:
5a:4a:cc:07:9d:3e:ee:df:c0:8f:df:b2:25:b9:5c:
28:d7:5c:f8:41:7d:97:bd:2c:cf:06:6f:d1:ed:48:
5d:dc:04:4f:55:36:f6:b9:6a:cd:db:e0:d3:8a:aa:
5a:ca:5d:17:2a:31:c3:81:07:8e:e7:a2:11:bc:76:
4d:24:6a:a7:55:96:42:8b:66:c2:a8:37:78:63:f9:
cb:fc:67:34:a7:42:3f:e3:3e:8f:d6:88:53:38:d7:
e4:92:12:a7:e8:ac:8e:80:3b:4b:0b:1b:f2:38:39:
3a:4f:99:fa:c9:0a:f6:0e:35:66:c3:fb:76:fd:34:
64:8d:f1:80:1b:e4:32:0a:40:c5:1d:4e:5f:0f:6d:
3b:7d:08:d6:61:95:0a:8e:4e:89:b4:a1:f2:a2:5d:
0b:d0:c3:fb:08:b7:2f:9b:01:0b:28:20:d2:fb:98:
e4:54:7e:19:e3:54:1e:41:0c:ce:07:0e:d7:49:9f:
25:32:89:38:66:54:ca:fa:b0:ba:e9:e9:e2:ea:84:
aa:34:84:30:d5:d8:05:68:47:89:09:93:ee:41:d5:
d6:3d:fb:e7:a3:89:2f:72:8c:19:40:3b:bc:7d:ea:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:07:D1:E0:2D:EC:6B:0F:65:7A:49:22:BA:CB:E9:F1:A3:DC:99
X509v3 Authority Key Identifier:
keyid:2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/OE4H0eAt7GsPZXpJIrrL6fGj3Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.227.0/24
Signature Algorithm: sha256WithRSAEncryption
43:50:37:b8:83:07:25:46:60:8b:c7:35:5e:31:52:e4:b6:dd:
32:bf:3b:bb:3f:ef:f8:c0:14:2b:5c:0a:2e:ee:30:24:93:44:
88:fb:17:5a:da:05:26:f2:62:d5:ba:63:d0:d9:99:5b:20:05:
a9:a7:46:b8:40:42:47:5a:6b:e3:e9:70:d7:d8:de:3a:4c:75:
cd:bf:b1:51:17:20:15:7e:7a:cc:50:32:b8:14:fb:ed:13:4b:
4c:4e:95:91:e9:3b:14:7e:ca:56:bb:46:b5:11:62:22:3b:3c:
63:12:47:65:fa:1a:92:13:25:c3:82:1e:e3:3e:57:34:66:d1:
09:cd:50:8d:b2:2f:03:26:f5:c0:55:8b:62:43:c4:51:51:c7:
e1:ec:5f:c5:c6:d4:8d:7b:f9:63:ec:6d:c4:06:ff:37:c7:fd:
d0:08:bd:a9:dc:1c:01:46:ac:42:4b:a7:71:8c:6a:68:12:2c:
68:b1:b4:eb:88:78:8f:f8:18:b3:f1:3f:3f:4f:6a:fb:19:0e:
59:56:e0:be:48:64:ca:78:71:23:9d:2e:04:9d:b8:2c:cd:e0:
72:d6:6d:ea:7f:c3:01:43:65:a6:8f:4c:6f:df:2d:c8:2c:18:
7b:1b:56:93:43:0f:7d:e9:f0:3c:f2:66:d5:3d:22:32:7e:b5:
e1:d6:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:52 2024 by rpki-client on console-fra.rpki-client.org