Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/uoj-95oZQ7OLwJ2PyQZShti7sB8.roa
File: uoj-95oZQ7OLwJ2PyQZShti7sB8.roa (raw, json)
Hash identifier: vUOLTMCZ9+97BIDu0bpQBHw8W72xj0dCdkeBJ4s8V1M=
Subject key identifier: BA:88:FE:F7:9A:19:43:B3:8B:C0:9D:8F:C9:06:52:86:D8:BB:B0:1F
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 0190A7CDB3855DAE24C26C52FC9E6849F5EB
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/uoj-95oZQ7OLwJ2PyQZShti7sB8.roa
Signing time: Fri 12 Jul 2024 16:36:34 +0000
ROA not before: Fri 12 Jul 2024 16:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 193.24.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:cd:b3:85:5d:ae:24:c2:6c:52:fc:9e:68:49:f5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Jul 12 16:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba88fef79a1943b38bc09d8fc9065286d8bbb01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:01:3d:cf:b3:bb:7a:43:bc:01:12:01:2e:
a8:df:1d:3d:f6:fe:a2:16:e2:2a:47:55:3e:86:12:
7a:f0:12:b9:0d:05:3a:d9:22:dc:be:98:8a:02:70:
7a:1b:b2:96:62:ae:0e:86:54:b9:d8:30:60:14:76:
d5:1e:8d:f9:f4:0e:4c:c8:3c:1d:6e:bf:df:76:75:
12:f0:b1:a1:e9:a7:cd:7d:a9:bd:ea:0a:ec:d4:95:
e3:2a:82:ca:f6:a5:50:1c:36:bc:76:9f:7c:65:a0:
45:59:56:17:42:ad:4c:3e:d7:87:d3:75:97:bd:a2:
2d:e8:6d:74:e3:25:fa:89:46:d4:6f:ea:c0:fd:37:
fb:76:43:8f:2c:5f:49:3d:5c:55:3d:cb:62:2b:c6:
54:07:d7:06:0d:73:3c:d0:cc:bb:4d:b1:9b:44:89:
24:98:55:dc:f4:31:eb:7f:8d:8e:04:60:0b:d5:4d:
49:25:d3:14:be:5a:aa:a9:83:d8:d5:30:bd:3c:63:
84:4b:a7:ff:57:7b:15:2f:39:7f:a0:91:3e:ee:d0:
70:43:9f:8b:82:55:4f:d9:ae:64:45:52:a5:28:a4:
2d:59:93:ec:e6:b7:1e:82:45:01:d4:97:b3:a0:51:
04:88:5f:a2:2e:a0:6d:4b:62:d7:be:7e:f9:9f:ac:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:88:FE:F7:9A:19:43:B3:8B:C0:9D:8F:C9:06:52:86:D8:BB:B0:1F
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/uoj-95oZQ7OLwJ2PyQZShti7sB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9b:b5:73:8d:97:f7:06:3e:68:ac:92:64:d1:84:87:14:88:
8d:b8:59:bb:9b:b8:0b:24:f8:3a:72:55:ef:8b:be:fe:91:e0:
be:a5:3a:42:5c:21:ac:4f:76:e0:81:b5:c9:2b:97:db:2f:aa:
3c:0e:f7:58:8f:ba:e1:b8:38:72:81:1d:2b:b6:7c:81:fb:da:
c3:84:65:5c:98:02:64:f5:69:20:a4:a8:f0:c7:80:11:81:5e:
05:84:25:7f:17:15:05:90:30:84:6f:e3:f5:6b:ee:c8:5f:a7:
52:1f:7e:67:05:b8:c9:59:18:92:9f:fc:f9:b5:e8:19:a1:dd:
a6:36:43:7a:1a:46:55:45:a8:4f:eb:6b:9d:8d:67:a7:3d:bf:
39:cf:2e:2b:24:56:2a:76:cc:ff:9f:c6:1c:4e:f3:7f:6d:4a:
87:66:3b:36:c3:37:0e:be:f0:e0:e8:f4:88:7d:10:76:86:6f:
c2:d0:0a:9d:71:da:38:c8:d6:5f:8c:0f:96:06:74:0f:a7:72:
56:a6:60:2c:6c:01:02:38:ef:e0:19:b9:d2:3c:10:ea:65:bd:
38:df:4e:19:06:5e:08:bf:ec:9b:bc:2c:4c:5e:db:46:b7:23:
8a:99:9d:12:a4:c5:e2:77:2e:08:81:12:c1:bd:91:cb:a3:2b:
e3:0c:79:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:18:47 2024 by rpki-client on console-fra.rpki-client.org