Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/OKxTBazuyTvtvzUkdkB0ywGh0DY.roa
File: OKxTBazuyTvtvzUkdkB0ywGh0DY.roa (raw, json)
Hash identifier: 4FDxnUb2um/JGHqhk50AhMHAdetqJGO3anZnm43s3yk=
Subject key identifier: 38:AC:53:05:AC:EE:C9:3B:ED:BF:35:24:76:40:74:CB:01:A1:D0:36
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 018CC2DB24506FEFA71E1376D3ED8F8A3C99
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/OKxTBazuyTvtvzUkdkB0ywGh0DY.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59796
IP address blocks: 188.0.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:24:50:6f:ef:a7:1e:13:76:d3:ed:8f:8a:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38ac5305aceec93bedbf3524764074cb01a1d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:bf:87:ec:b0:dd:c0:87:12:9c:ef:4c:35:
b4:38:62:9d:29:3e:be:91:1b:63:99:26:52:0b:ab:
9f:12:89:33:42:4b:d6:79:17:ad:03:b3:ac:29:cb:
b8:9e:c6:d4:60:8f:6a:84:0e:58:d0:05:ca:b7:af:
98:12:bd:23:62:38:b2:c9:56:85:ae:30:ac:41:20:
be:a0:d1:54:05:7b:6a:25:35:45:1f:b4:f5:2b:f8:
41:03:b6:ee:43:2d:f3:af:e8:f1:63:d7:28:86:79:
bb:a6:25:62:83:3d:8b:a7:e2:68:36:50:f0:71:18:
0d:ff:d9:ce:37:ae:0a:db:58:0f:bc:ea:be:7f:64:
32:ea:8a:56:3e:ff:3f:e4:bb:9f:8c:a3:d8:3a:3f:
b7:fb:dd:f0:5b:bd:ec:b7:e8:f2:81:c9:18:fc:dc:
9b:a2:2c:05:16:e3:b9:fe:7f:fd:9b:18:9e:24:20:
9a:d6:3e:6a:26:f3:c0:c7:cd:59:57:a4:a6:d5:b2:
fc:c0:fb:89:99:fb:e6:65:1a:da:76:75:98:d1:51:
4b:42:09:55:c2:b6:8f:2b:ae:2b:69:cf:79:d2:0a:
47:f2:43:7a:f0:b9:c1:1b:3d:b3:67:ce:91:bb:3d:
f2:91:6e:0e:ef:6f:1e:b7:8b:75:6f:6f:af:a8:45:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AC:53:05:AC:EE:C9:3B:ED:BF:35:24:76:40:74:CB:01:A1:D0:36
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/OKxTBazuyTvtvzUkdkB0ywGh0DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.150.0/24
Signature Algorithm: sha256WithRSAEncryption
10:4e:ab:03:54:98:2e:f0:c3:2a:84:a8:b1:b4:03:ef:38:c5:
ea:b0:78:50:32:65:a2:9f:2a:0d:f8:52:a0:c8:70:75:fc:e2:
3e:9d:5c:07:43:9c:9b:4f:f8:c0:4c:5d:dd:06:0e:b4:38:82:
11:ce:64:8e:a7:b6:d0:a1:b4:70:db:eb:d9:f5:07:d2:c9:3c:
82:f7:48:09:9b:9b:b0:7e:ed:48:d8:23:de:63:e5:d3:f2:68:
b4:f7:b9:9f:b5:3c:ec:82:6d:ee:e9:61:e1:79:89:2d:30:51:
7f:af:11:ac:68:e4:93:11:29:35:cd:2b:8c:25:13:12:67:4b:
3d:e8:11:e6:c7:d9:52:a1:f0:30:1c:6c:6d:30:5d:95:9c:9e:
dd:08:18:20:b3:0c:75:f7:63:4e:4f:59:dc:09:d7:e4:7c:39:
64:dc:72:d6:47:d4:95:c9:61:05:d2:28:f7:dd:b9:03:dc:5e:
88:0a:0e:14:89:7e:12:a9:65:58:8f:81:70:d0:e3:d5:7f:08:
e3:9d:f4:71:fb:cb:0a:16:7f:0a:6b:a8:65:ce:3a:ad:36:2e:
de:fa:77:72:26:a4:fe:bf:14:0b:34:7f:5b:be:c0:ea:bd:2b:
3e:b7:8e:dd:3e:6d:b3:cc:f8:31:a1:34:28:44:9a:49:fb:3c:
0a:9c:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:05:40 2024 by rpki-client on console-fra.rpki-client.org