Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/OE_NMvVIMONS8Guk6c3jEKc60Zc.roa
File: OE_NMvVIMONS8Guk6c3jEKc60Zc.roa (raw, json)
Hash identifier: Mw5eJGnhN4qgzhAEwmHp0lAeh8/sXcqK57A2S0qFlIQ=
Subject key identifier: 38:4F:CD:32:F5:48:30:E3:52:F0:6B:A4:E9:CD:E3:10:A7:3A:D1:97
Certificate issuer: /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial: 018CC56E61327BE494198F9C7F6684AC0665
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/OE_NMvVIMONS8Guk6c3jEKc60Zc.roa
Signing time: Mon 01 Jan 2024 14:29:54 +0000
ROA not before: Mon 01 Jan 2024 14:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12552
IP address blocks: 80.242.20.0/24 maxlen: 24
80.242.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:61:32:7b:e4:94:19:8f:9c:7f:66:84:ac:06:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
Validity
Not Before: Jan 1 14:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=384fcd32f54830e352f06ba4e9cde310a73ad197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:a0:c3:4d:39:0b:54:cd:10:82:92:ac:d6:
7f:7d:84:61:48:b0:42:fd:12:58:f7:59:a8:24:28:
18:a6:2f:56:d0:5b:29:06:4a:9b:eb:f1:42:3a:9a:
8b:ad:2a:ee:eb:f4:1a:bd:c4:6d:eb:c2:5d:37:e5:
8f:fb:43:48:ae:85:eb:e7:d0:0b:9c:0b:c5:92:5b:
c1:1a:98:40:d7:33:72:73:cd:d6:69:0b:52:c0:fe:
47:78:39:40:f2:7a:d0:7f:bc:b7:4f:ff:b2:46:b0:
02:80:20:3e:8f:91:d2:07:c3:11:a2:c8:e8:58:28:
9f:31:cd:e8:fe:61:24:8e:f0:06:6d:6b:9a:ec:8f:
74:32:7c:70:7f:54:2a:3b:fc:6e:6a:1b:59:03:2e:
cb:15:73:e5:1b:c4:f5:c7:75:d2:a7:90:41:fb:b3:
63:dd:be:97:16:5a:9c:0a:b2:02:b2:b9:67:0b:69:
38:f5:37:5b:af:a5:5c:83:64:db:bf:fe:46:29:5c:
29:80:3b:cb:e0:d9:5f:9a:00:0a:2a:4e:ba:7b:74:
0f:42:6d:ef:43:01:13:2f:59:78:e2:a5:fa:a2:6d:
0a:f3:fc:64:45:a1:2b:bd:02:69:7a:86:6f:71:7b:
23:7a:0d:e3:68:72:c2:e9:17:cb:34:01:9c:30:0e:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:CD:32:F5:48:30:E3:52:F0:6B:A4:E9:CD:E3:10:A7:3A:D1:97
X509v3 Authority Key Identifier:
keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/OE_NMvVIMONS8Guk6c3jEKc60Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.20.0/24
80.242.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:6f:d8:76:19:57:c7:ab:39:75:3d:cc:cb:76:12:8c:4c:18:
28:01:e7:3e:c9:c3:f1:59:72:be:d4:30:33:20:fb:11:c0:a4:
f1:82:51:e2:86:26:11:df:36:b9:f3:00:5e:cd:f3:da:14:0f:
a3:53:dc:3c:e1:69:93:8f:ab:b4:5a:40:85:32:1f:fb:27:ce:
07:03:12:44:8b:77:c7:ed:8c:ab:a1:4c:b2:f2:26:cf:b7:21:
36:21:0b:7e:6b:32:67:ed:2f:50:78:12:9b:4f:26:cc:ce:33:
bf:3c:7d:c4:18:b6:ac:6d:0f:f4:ee:9b:6f:1a:8f:cd:98:37:
db:eb:f8:7d:14:87:1b:35:01:81:62:75:8b:54:4a:13:05:2e:
49:b5:b7:7c:34:42:1b:c5:ff:50:d9:b0:ff:2e:45:9c:34:27:
a9:61:4d:52:00:bf:f8:2b:9e:ab:00:a8:1e:b1:f1:9e:45:53:
0a:a5:62:a8:a2:2f:a7:95:a2:35:a4:da:5f:59:39:9d:80:20:
c5:ad:f7:a0:e6:fb:d9:62:5f:83:7a:c5:59:9e:8c:62:0f:54:
86:5c:6b:1e:7d:59:86:05:a3:50:b4:f7:dc:0e:f2:c2:ff:67:
be:32:17:99:d1:b7:b2:8c:db:ae:81:af:d7:17:cb:54:ba:fe:
86:85:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:39:19 2024 by rpki-client on console-fra.rpki-client.org