Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/oPe1G4UUtA0otvtUmlvCsgBHNWg.roa
File: oPe1G4UUtA0otvtUmlvCsgBHNWg.roa (raw, json)
Hash identifier: FBJMwYAJpotd+HvxEANIXd2E3GOmMzW5cAK7amB7X9A=
Subject key identifier: A0:F7:B5:1B:85:14:B4:0D:28:B6:FB:54:9A:5B:C2:B2:00:47:35:68
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018EC335E395E4B20C45B67C3AF11ACB9F4B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/oPe1G4UUtA0otvtUmlvCsgBHNWg.roa
Signing time: Tue 09 Apr 2024 14:14:32 +0000
ROA not before: Tue 09 Apr 2024 14:14:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 2a0c:ab00::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:35:e3:95:e4:b2:0c:45:b6:7c:3a:f1:1a:cb:9f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 9 14:14:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0f7b51b8514b40d28b6fb549a5bc2b200473568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:c6:41:0d:8d:55:4e:92:1a:fc:d8:74:70:
68:95:b0:de:ca:6f:cd:78:cb:ef:ae:cb:12:a3:b6:
c3:20:9e:67:ff:4b:4d:f4:47:9d:b8:5a:91:93:9a:
53:0d:30:d1:93:d6:a4:4f:ef:c9:9b:ed:8e:f9:1c:
f1:27:88:b4:5e:d4:7d:89:4f:41:5c:40:95:d7:8c:
16:96:50:08:53:a2:12:0e:6a:53:54:68:46:1a:5a:
f0:75:fa:a2:c0:03:12:4e:0d:5d:7b:87:eb:70:64:
5a:77:9a:2e:f8:fd:c0:e6:b6:73:a8:15:99:b6:60:
3a:a5:90:f8:36:a2:cc:3c:69:32:19:52:04:7f:f3:
0d:0e:75:01:5d:17:cf:c2:5d:52:ea:c1:9e:a3:8a:
01:97:3f:70:1a:a7:20:4f:83:12:5e:e1:a8:09:bb:
f8:54:eb:a5:16:79:02:70:5f:79:59:10:0e:df:56:
50:00:71:36:62:53:94:d6:82:11:9b:95:5d:60:e3:
61:8b:76:1a:a5:4d:41:5a:f0:3b:3a:57:47:ad:92:
c5:1f:a3:df:98:37:d1:31:14:41:9b:2a:0a:91:a2:
7e:5c:50:92:4c:67:1e:70:de:42:0b:95:ac:2a:74:
64:7c:91:72:74:91:83:cd:13:56:a4:b5:51:c6:b3:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:B5:1B:85:14:B4:0D:28:B6:FB:54:9A:5B:C2:B2:00:47:35:68
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/oPe1G4UUtA0otvtUmlvCsgBHNWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
db:4d:9d:dc:61:15:ba:e3:fe:9f:61:aa:3f:46:33:fe:35:5c:
fb:6d:56:76:a9:69:9a:25:5b:86:f1:04:c1:d3:6e:2d:b1:3e:
d1:d6:96:73:18:e3:4f:48:ec:25:a0:f7:5d:c8:62:77:ca:71:
bb:02:5e:ae:e1:02:6e:f9:bf:24:54:0a:49:76:0f:3a:f0:7c:
5e:e5:db:c4:a7:b5:85:6e:ce:9e:be:43:36:2d:57:7e:6a:0d:
f0:5d:b6:c5:d6:46:bd:f8:dd:21:1f:43:b4:8b:b1:d0:4c:0a:
8b:ad:fd:e1:2a:4a:22:7d:5c:7f:ef:0a:f2:6d:4c:1d:96:ba:
81:49:c6:f9:02:6a:97:ae:6e:9e:17:e1:31:d4:0f:68:12:86:
dc:c0:71:36:29:25:d9:1c:39:46:57:23:38:b1:71:7a:23:26:
04:f6:a4:a2:24:b9:2d:ed:df:5c:b5:12:ed:15:b2:75:40:93:
d6:a1:e3:55:fd:a4:80:71:b9:16:fe:c9:0b:8e:0b:2f:05:75:
f4:e0:2e:61:b0:08:9e:5b:f9:dd:d1:e3:a7:62:7e:86:fb:9c:
f2:aa:f6:c0:4e:9c:47:06:0b:14:9e:34:9f:93:5a:97:f6:45:
fd:22:f0:4f:a1:2b:13:58:2f:7f:a6:17:e4:e2:0b:b5:04:46:
5f:84:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:24:43 2024 by rpki-client on console-fra.rpki-client.org