Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/OqTHF20Ad9u0jMzjLBY9rId96Lc.roa
File: OqTHF20Ad9u0jMzjLBY9rId96Lc.roa (raw, json)
Hash identifier: 6effAF04otr4LdPLXLbuWR+hSIlJiBDxw04OnNvEWrg=
Subject key identifier: 3A:A4:C7:17:6D:00:77:DB:B4:8C:CC:E3:2C:16:3D:AC:87:7D:E8:B7
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 018CC4245E26BF02EDD9A2D96F52ECED35F5
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/OqTHF20Ad9u0jMzjLBY9rId96Lc.roa
Signing time: Mon 01 Jan 2024 08:29:26 +0000
ROA not before: Mon 01 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 82.146.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 04:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5e:26:bf:02:ed:d9:a2:d9:6f:52:ec:ed:35:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Jan 1 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aa4c7176d0077dbb48ccce32c163dac877de8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:7f:7a:b6:35:58:47:32:0e:6e:37:57:52:
f3:07:15:7c:50:bd:4d:34:52:53:1f:d7:15:1f:17:
fe:b2:b4:c4:ce:4a:97:56:f5:bb:0b:a5:f3:7a:ee:
1c:44:c0:0c:87:97:c9:61:4f:65:4b:f9:b7:d8:e9:
ec:76:9f:34:db:39:25:28:04:81:4c:5e:9f:7d:d6:
1b:f4:ab:a7:87:63:98:91:90:13:35:f9:52:0f:7b:
76:95:7a:6c:84:6b:8c:5d:39:1a:f9:8a:4f:60:f8:
29:6d:07:fb:0e:bc:21:b6:1f:02:44:a8:f1:1c:c2:
42:af:c9:54:ed:cf:e7:92:2c:fc:3e:c9:81:34:7a:
05:97:d2:a2:56:8f:02:52:75:7a:c1:51:ba:f9:52:
55:3a:73:84:73:6f:e9:b9:84:cd:1c:d8:e3:71:4c:
a8:c0:7a:c5:e7:2c:b3:b4:ff:ba:83:97:e2:8e:ba:
6e:99:a6:4d:ab:7a:87:3e:cf:70:ac:af:45:97:c3:
f6:7c:3f:ff:6d:dc:fb:44:11:17:d6:e9:b5:da:f7:
18:56:24:60:72:85:54:91:8d:9f:76:9e:4e:3b:be:
76:dd:54:df:e1:be:4b:dd:ab:03:16:0b:63:7a:15:
dc:fb:3d:f7:f5:89:18:f3:6a:bc:21:90:43:db:84:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:C7:17:6D:00:77:DB:B4:8C:CC:E3:2C:16:3D:AC:87:7D:E8:B7
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/OqTHF20Ad9u0jMzjLBY9rId96Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.16.0/22
Signature Algorithm: sha256WithRSAEncryption
70:8f:8c:51:24:9a:da:b8:1d:25:25:fb:aa:09:f6:68:19:fb:
59:6b:d1:63:2c:58:b6:4d:06:6c:40:60:4e:5f:d5:06:17:90:
8d:bc:e7:f2:68:d0:e1:48:1e:93:63:30:d5:ef:2f:1f:99:23:
00:10:46:d5:a4:b6:88:2b:27:b0:e3:33:e2:73:8c:64:55:31:
23:e2:e5:92:2b:26:5f:7e:76:ed:57:fc:60:12:1f:43:78:30:
65:b0:7b:c5:61:2b:a4:48:53:a4:96:de:2d:83:47:8f:1f:f1:
d5:60:59:c7:de:71:77:e5:a9:c4:70:a1:5f:c0:59:cf:56:e5:
65:ff:ec:25:1b:db:16:f0:d8:8f:7c:eb:ad:1e:c6:25:ca:e5:
1e:77:9b:34:45:37:51:52:e5:81:8c:e0:c9:ee:cf:c0:72:6a:
85:ad:c3:59:c9:74:4c:23:b7:e6:07:95:60:38:7f:f6:cc:f8:
2f:ab:96:7f:23:13:24:35:b1:b0:d5:d2:44:2a:8b:08:8b:c2:
b8:bb:86:d3:2a:8a:5c:81:55:24:7a:5b:aa:1d:1e:ab:ac:42:
9a:28:cb:60:17:5a:e9:61:e0:d2:9c:0a:e8:eb:8f:57:0e:ac:
8d:bf:21:fb:42:9e:15:6f:a7:43:14:89:a1:08:aa:f1:57:af:
a1:ee:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:00:45 2024 by rpki-client on console-ams.rpki-client.org