Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ObMG8ctfqTlV2A84w8ntYNZvqkk.roa
File: ObMG8ctfqTlV2A84w8ntYNZvqkk.roa (raw, json)
Hash identifier: lAbwkF49yu9qct0Sn5MhnQ95ls5yX+oT368n11tqvGk=
Subject key identifier: 39:B3:06:F1:CB:5F:A9:39:55:D8:0F:38:C3:C9:ED:60:D6:6F:AA:49
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 018CC6B8AABFFC9897F369C2C7CD1C2A4397
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ObMG8ctfqTlV2A84w8ntYNZvqkk.roa
Signing time: Mon 01 Jan 2024 20:30:40 +0000
ROA not before: Mon 01 Jan 2024 20:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205240
IP address blocks: 193.218.204.0/24 maxlen: 24
193.218.222.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:aa:bf:fc:98:97:f3:69:c2:c7:cd:1c:2a:43:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jan 1 20:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39b306f1cb5fa93955d80f38c3c9ed60d66faa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:f0:de:6e:c4:56:09:42:4f:c6:31:14:f1:
fd:5a:a6:0a:66:8b:9c:41:bc:0b:ee:50:8f:65:85:
f1:44:5c:b5:d4:e6:ba:16:a4:29:49:4e:43:75:6c:
7b:da:52:76:9e:ae:f7:87:04:23:b3:41:aa:d1:65:
37:e1:57:e1:b0:97:c9:25:17:fc:99:8d:78:90:12:
66:5a:b1:50:e7:3f:c6:dd:65:0c:ce:38:54:97:af:
96:be:b8:e7:f0:e1:b3:2b:f7:37:29:ff:ed:b8:81:
8f:49:7e:3a:f6:f4:24:c9:62:29:78:ae:41:a8:91:
1b:56:eb:41:0e:6e:f5:84:c5:bb:96:ac:15:e9:53:
b2:43:f4:06:bf:82:f9:a9:64:9f:15:b6:30:bf:cb:
d3:e8:1b:02:01:b5:60:02:26:c1:b0:13:59:6d:b5:
6d:38:c5:74:30:43:d9:c5:c1:e2:e5:2b:e8:ee:2d:
e5:f8:e2:db:2e:43:15:90:95:93:12:bb:99:75:3d:
56:06:d6:33:c6:fb:a0:5b:06:27:3f:b7:da:61:cf:
fc:ed:0f:df:32:62:cc:1a:2c:ca:53:ae:b8:91:64:
2b:61:a4:71:e7:37:14:38:af:7b:ba:89:db:1a:c5:
e4:b6:59:22:d6:53:c2:06:0d:00:58:ed:7b:03:74:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B3:06:F1:CB:5F:A9:39:55:D8:0F:38:C3:C9:ED:60:D6:6F:AA:49
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ObMG8ctfqTlV2A84w8ntYNZvqkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
193.218.222.0/24
193.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c9:3d:9d:22:5f:be:c5:32:1a:6d:84:03:66:5c:ff:cf:39:
95:43:10:75:3e:90:a9:04:d9:ae:d9:9c:e8:e6:66:e5:8e:5e:
4e:04:93:2f:60:53:5e:ed:3d:cd:ec:bd:4b:dd:76:31:dc:65:
8c:21:d4:17:a2:b9:fd:72:6c:bd:42:a5:8f:b2:ca:42:2b:b3:
7c:e5:da:ef:c4:ba:c1:87:2a:72:5a:c6:cf:d4:51:74:1b:0e:
6d:b4:10:b4:38:22:5e:30:89:62:53:8a:90:a3:7e:aa:e8:41:
22:8d:f0:60:f7:46:66:0a:a0:d3:ea:c8:87:61:ae:de:95:c5:
88:7f:77:44:c3:2a:a1:c1:da:05:9c:52:c8:50:53:1e:4c:a9:
87:f0:15:3f:63:18:db:29:38:46:13:a5:4f:2e:3f:81:a2:89:
13:65:3c:5f:37:f3:d2:13:cc:c3:bf:ad:7a:cd:e8:6e:7b:37:
a7:30:fe:69:72:d6:c5:f0:44:d4:2a:35:ef:3c:c0:e2:fe:e6:
a3:cd:6e:c8:27:0f:30:f8:81:46:c8:d1:88:ee:bf:94:f4:70:
8c:c9:a2:58:35:9a:0a:d0:4c:b7:d2:a1:ff:2a:a5:1d:5e:c0:
b4:33:b9:cd:ba:16:1c:08:ad:86:76:34:a5:03:b0:be:2d:7b:
6f:5d:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:08:21 2024 by rpki-client on console-ams.rpki-client.org