Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/OeC2mKxdppI7CNdBAWN8tYpFeQg.roa
File: OeC2mKxdppI7CNdBAWN8tYpFeQg.roa (raw, json)
Hash identifier: drKkoHdZXgSJkzVjrQIT5Fkk3JhI7immksZLt2fCsYc=
Subject key identifier: 39:E0:B6:98:AC:5D:A6:92:3B:08:D7:41:01:63:7C:B5:8A:45:79:08
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018CC87074BD08EBED4659D294EE26EC7D11
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/OeC2mKxdppI7CNdBAWN8tYpFeQg.roa
Signing time: Tue 02 Jan 2024 04:31:02 +0000
ROA not before: Tue 02 Jan 2024 04:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 185.244.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:74:bd:08:eb:ed:46:59:d2:94:ee:26:ec:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 2 04:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39e0b698ac5da6923b08d74101637cb58a457908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:36:ac:31:6c:5d:7e:81:99:99:e1:c8:38:
79:19:fc:77:fb:04:28:15:cd:39:fd:4f:27:7b:b7:
b8:e6:6c:a9:d0:fb:b0:11:2e:8c:76:a2:39:3b:62:
00:e4:8a:6b:22:95:2a:97:27:f4:6d:db:a4:21:f4:
82:66:b7:a8:ff:7d:f8:e5:d0:33:0e:9c:8f:a2:e7:
99:85:79:9a:97:f2:d9:25:31:53:fd:c3:b2:75:09:
8a:ea:ac:1f:be:f5:9b:57:85:71:88:8d:f9:ba:6e:
3b:08:f6:a2:22:f0:aa:1d:3c:0f:5b:7f:42:a0:c8:
0a:91:82:f2:29:2e:65:e4:e9:bc:60:d0:22:45:db:
b2:9a:af:77:2c:32:79:a9:b7:c1:bf:b6:26:aa:07:
95:43:c8:32:4a:67:e6:b5:5b:f9:b1:36:ad:a5:47:
c5:08:5d:17:3b:de:36:e0:a9:51:87:2b:60:46:30:
19:e9:9a:00:bf:d8:08:dd:c4:6c:02:e6:92:11:55:
1f:68:18:af:d8:aa:ea:9c:7f:b9:90:01:d8:f0:24:
40:ec:0d:36:57:98:7a:24:29:03:47:1c:38:82:80:
0f:d9:bc:ea:bd:ea:c3:9e:cf:30:66:50:2d:15:91:
6a:ae:05:a2:6c:e3:e1:76:f7:6a:42:06:33:3c:31:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E0:B6:98:AC:5D:A6:92:3B:08:D7:41:01:63:7C:B5:8A:45:79:08
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/OeC2mKxdppI7CNdBAWN8tYpFeQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.106.0/24
Signature Algorithm: sha256WithRSAEncryption
58:33:7c:c7:c0:c7:65:ab:33:65:d2:46:d4:62:24:6c:8d:89:
da:3b:9f:0c:41:c9:09:f2:2d:69:da:56:fc:2f:37:c0:ce:0f:
7e:7c:40:7c:1e:c2:9d:4b:06:bf:7a:0b:c5:80:6e:f2:55:97:
8e:32:2a:db:a6:5d:27:29:48:4d:bf:f2:8f:ca:64:23:09:23:
38:b4:7a:59:c7:20:a8:22:d9:f8:96:42:80:1b:32:82:84:c9:
68:1e:2d:f3:1a:b3:cc:b8:3a:bb:c1:3c:3d:f8:c4:96:cd:87:
61:4d:66:6e:da:8c:6a:54:da:ba:be:79:c2:c3:de:7c:4b:e9:
72:54:e7:72:0c:c4:f4:de:c1:da:3b:14:4e:2c:95:41:90:0c:
38:ca:9b:45:8d:17:8f:8c:1c:9c:9b:de:e5:4e:46:5f:ab:80:
a5:b6:f5:6b:d2:98:54:d8:42:24:96:d3:c4:54:1d:fa:22:56:
41:1a:a3:6f:27:c1:63:5d:70:68:4a:3d:8b:7a:ac:ab:b2:a2:
ff:6a:3d:4e:e3:be:68:cf:78:f7:c9:25:ff:d1:6e:c8:de:6e:
44:8d:3f:79:a1:65:a1:6f:63:19:4f:f3:7d:c6:03:46:fa:df:
18:5d:26:a9:76:c2:98:bc:36:10:23:dd:c8:14:a8:63:fb:74:
bd:da:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:28:04 2024 by rpki-client on console-ams.rpki-client.org