Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O1y9aDZsbl1PgNepz71WGtksSyI.roa
File: O1y9aDZsbl1PgNepz71WGtksSyI.roa (raw, json)
Hash identifier: HPqlf66cQdFKSuUmJ+U6+YDOP6jjNpAjLsB8GoesdGo=
Subject key identifier: 3B:5C:BD:68:36:6C:6E:5D:4F:80:D7:A9:CF:BD:56:1A:D9:2C:4B:22
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018CC79352B116A6A91648FE92B8A9D668E0
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O1y9aDZsbl1PgNepz71WGtksSyI.roa
Signing time: Tue 02 Jan 2024 00:29:30 +0000
ROA not before: Tue 02 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5394
IP address blocks: 195.180.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:52:b1:16:a6:a9:16:48:fe:92:b8:a9:d6:68:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b5cbd68366c6e5d4f80d7a9cfbd561ad92c4b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:ff:6b:b9:92:66:25:72:9b:ad:00:32:ff:
40:42:67:07:cd:17:06:69:9d:92:5c:d5:a1:fc:07:
37:dd:70:71:13:5b:72:dc:ac:ea:06:d7:5c:1b:00:
06:3f:8c:7a:45:03:f8:03:b6:4d:85:9e:e5:54:42:
25:a3:74:89:d1:c6:7f:fd:4c:31:17:05:e9:9f:b1:
e7:b3:51:d9:4d:d2:eb:ff:fd:61:63:d9:78:21:11:
64:f3:ff:ae:4e:e6:9f:01:00:f3:46:46:3c:32:90:
67:5b:02:a0:6d:2c:c4:18:7d:40:86:ff:88:5b:cd:
51:fa:63:2f:79:e7:5e:c2:f9:0c:9d:ec:8d:de:d6:
80:3b:68:69:8a:a3:8c:04:1a:4d:b8:20:3d:d4:6b:
1b:9f:57:cd:6e:dc:aa:57:03:dc:04:47:4f:37:4a:
39:75:c2:84:92:c7:3c:47:01:ce:40:c5:b0:bf:15:
83:77:92:85:93:f1:13:7f:47:0a:fb:37:6e:b8:d8:
ef:2a:82:df:41:cf:2b:63:90:75:4b:c8:5d:e6:da:
a6:bc:81:1d:45:7e:e6:f5:6e:86:3d:74:3e:9d:60:
dc:c1:a5:38:f9:02:f1:8b:d9:22:af:4c:63:5f:73:
98:e0:b2:7a:9b:d9:32:8f:30:5a:c6:99:85:b9:5b:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:BD:68:36:6C:6E:5D:4F:80:D7:A9:CF:BD:56:1A:D9:2C:4B:22
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/O1y9aDZsbl1PgNepz71WGtksSyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9b:e4:86:41:d9:e9:6f:17:b9:7e:13:f5:0c:9b:41:36:ef:
7a:e6:99:60:c4:7e:52:54:fd:ac:ff:a4:62:be:dd:19:a0:1e:
7e:31:57:62:5d:78:e4:99:72:55:1d:1f:5c:76:ae:9c:25:a5:
4f:6d:13:70:83:ab:9d:64:e8:bf:35:95:d0:3b:d0:24:8d:c7:
dc:a1:d8:f9:d8:ce:75:a3:eb:9f:48:d9:4b:2d:01:ca:7c:3f:
d7:8a:fc:ca:c0:c0:c3:8f:c5:69:89:06:b2:81:6c:cc:c4:c2:
23:9f:66:69:68:41:f8:07:3b:76:1d:3c:2e:24:13:77:b2:d4:
2e:c7:02:29:18:8f:79:5d:dc:80:db:35:fa:20:46:02:12:66:
58:73:ba:c5:9e:5c:d1:3a:3c:21:44:3a:95:b7:e9:1e:f9:38:
3a:96:cd:4f:16:6e:82:14:a3:29:d1:06:04:a1:58:65:4c:6b:
a6:f0:11:6b:8d:a6:e3:ee:5f:e5:5d:6d:de:22:d2:9c:30:e4:
e6:d3:d5:a4:f5:66:5e:bf:ad:74:af:22:a0:76:30:fa:53:20:
a7:cb:80:f3:24:4d:3d:2b:f9:2e:9d:ac:9c:4a:a3:86:10:4e:
04:69:5d:4e:40:00:5e:b8:df:0e:d1:5f:c4:2b:06:8f:58:c2:
a2:fa:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 19:53:41 2024 by rpki-client on console-ams.rpki-client.org