Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/oO7WJJOlrV3l6q2aFq3XQhC3570.roa
File: oO7WJJOlrV3l6q2aFq3XQhC3570.roa (raw, json)
Hash identifier: EUNQHaX9RZRB7WC7znSU1wjkVsak3dgFhbct86NqpBw=
Subject key identifier: A0:EE:D6:24:93:A5:AD:5D:E5:EA:AD:9A:16:AD:D7:42:10:B7:E7:BD
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BB845A94729026ADD3FCA56C31F6C
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/oO7WJJOlrV3l6q2aFq3XQhC3570.roa
Signing time: Tue 02 Jan 2024 12:35:11 +0000
ROA not before: Tue 02 Jan 2024 12:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39330
IP address blocks: 212.91.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b8:45:a9:47:29:02:6a:dd:3f:ca:56:c3:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0eed62493a5ad5de5eaad9a16add74210b7e7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:3a:2c:24:41:b7:f9:79:8a:9a:86:17:9b:
c4:0c:d8:21:8b:b9:f5:b2:aa:27:7f:cc:1a:d6:71:
a6:7b:8a:c3:cc:bc:34:5c:39:96:dd:83:ed:51:96:
62:2e:4f:90:ae:22:ad:0b:df:2e:10:b2:ec:e0:45:
99:5b:b1:20:dd:d9:44:98:00:ae:57:ab:7e:86:d7:
9c:5e:0b:ed:04:35:1b:1f:c1:3e:0a:9b:93:16:55:
6c:91:c8:a2:82:40:44:bc:85:8e:eb:1e:51:3b:e3:
49:83:97:b9:d3:24:be:84:ff:77:07:6b:10:2f:02:
62:e7:c0:76:09:fc:f7:f0:18:66:1a:46:41:62:f5:
5f:dd:13:b7:66:54:e7:6f:21:a9:b1:15:13:fa:48:
a3:b0:d3:68:94:3d:0c:72:77:b9:84:51:e9:8b:ee:
43:01:6c:29:23:f3:4b:73:f1:4a:3e:14:6b:6b:93:
6b:49:c2:3c:0b:f2:02:ec:e1:32:2c:84:4d:03:40:
31:71:96:f4:22:bb:46:a6:55:5f:99:51:91:d4:64:
76:6f:19:47:3a:c9:b4:06:a8:14:35:f3:8b:8f:12:
5c:c9:88:4a:89:5b:ae:26:b2:1d:fe:6c:5c:25:ea:
b8:11:2b:b3:3d:41:f0:ab:01:75:23:16:64:49:1e:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EE:D6:24:93:A5:AD:5D:E5:EA:AD:9A:16:AD:D7:42:10:B7:E7:BD
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/oO7WJJOlrV3l6q2aFq3XQhC3570.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.22.0/23
Signature Algorithm: sha256WithRSAEncryption
91:00:b6:53:af:48:d1:03:b8:34:53:69:7a:88:d9:fe:48:f0:
6a:03:01:3a:fd:a6:36:e2:87:0f:d7:4a:98:df:e2:f5:9e:d8:
88:9d:ae:9c:aa:b3:74:7f:8a:93:ef:e4:0a:35:55:25:58:b3:
97:f8:1f:9c:85:93:49:18:d2:ab:64:dc:05:39:49:47:11:dd:
ef:d4:65:5d:d1:3d:e8:15:96:58:c8:07:18:fc:83:1d:c3:8d:
cc:be:fc:86:9a:1f:5e:55:49:9f:1b:fd:6a:95:30:26:25:ef:
38:6e:d3:68:cd:53:1f:b5:69:14:be:f1:ba:9c:b8:92:2f:f9:
f3:8d:09:1e:fd:2d:01:a3:8d:86:58:b3:33:89:0a:dd:0c:80:
d1:78:86:d3:b9:25:da:cd:49:b4:84:cc:c3:25:f8:3f:3f:64:
16:96:40:e4:67:6e:d1:11:2b:33:ef:0b:be:67:92:94:e8:75:
d2:14:ce:a1:38:bb:90:c6:be:df:81:71:e7:23:63:84:a0:ef:
bf:39:f8:16:08:bc:91:1c:07:97:f8:c7:ce:ab:24:65:1d:a8:
7d:5a:63:20:a8:07:1d:82:d9:2e:70:36:5f:65:e9:09:10:4e:
a8:65:58:0a:7f:4e:57:f8:7f:b6:78:6f:57:da:8f:4f:00:47:
5e:e5:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:26:19 2024 by rpki-client on console-ams.rpki-client.org