Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/og-Q1SnXGwF-bxzZ0LY7P85N-uI.roa
File: og-Q1SnXGwF-bxzZ0LY7P85N-uI.roa (raw, json)
Hash identifier: KYz1XlYj/FZJMwhZCobTXKsowxYAjyxvjfVrvpadsB0=
Subject key identifier: A2:0F:90:D5:29:D7:1B:01:7E:6F:1C:D9:D0:B6:3B:3F:CE:4D:FA:E2
Certificate issuer: /CN=a5920dec6ff00949e82161721eb94cc645e34776
Certificate serial: 018CCA2BCAE9F90393E7B66A114B26FC6586
Authority key identifier: A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/og-Q1SnXGwF-bxzZ0LY7P85N-uI.roa
Signing time: Tue 02 Jan 2024 12:35:16 +0000
ROA not before: Tue 02 Jan 2024 12:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59889
IP address blocks: 185.186.148.0/22 maxlen: 22
2a0b:7d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:ca:e9:f9:03:93:e7:b6:6a:11:4b:26:fc:65:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5920dec6ff00949e82161721eb94cc645e34776
Validity
Not Before: Jan 2 12:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a20f90d529d71b017e6f1cd9d0b63b3fce4dfae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:fb:3f:2b:74:aa:28:4e:2e:d8:4a:f0:1f:
2d:2a:52:21:1d:dc:bb:00:72:3e:d3:2e:d9:5a:2f:
e0:c7:5a:b3:a6:97:53:44:dd:a6:bb:ef:b4:bc:a4:
bc:c3:93:dc:81:b5:d8:24:32:1f:da:cd:2c:8b:ac:
af:f0:e1:cf:5f:38:91:de:9d:d0:69:fb:da:81:ab:
bc:a7:96:ad:47:0c:c5:c7:22:40:28:87:d2:e9:b4:
e6:c5:08:27:41:a4:72:7b:eb:31:1c:e3:4d:39:77:
8e:35:dc:8d:7c:af:64:27:f4:eb:18:16:df:2f:ae:
6c:e5:fd:54:bc:19:ac:11:00:34:09:56:26:5a:af:
4e:bf:96:f9:34:79:a8:61:c3:bb:ae:7d:49:79:89:
92:ca:07:2b:e4:e2:64:b2:21:ca:7f:b5:b1:54:29:
96:74:c7:12:0a:de:32:ac:11:03:3a:5e:a4:ac:d8:
c0:64:8e:6d:71:5c:ab:fb:b5:1a:b8:d1:a9:0c:eb:
19:70:48:f7:d9:1a:84:2e:ad:6a:75:5f:83:a1:3a:
28:eb:3f:eb:18:6f:ba:72:3a:c2:bc:00:66:0a:71:
9f:37:c0:23:c2:ed:48:fb:5a:16:d4:a9:d5:ac:b1:
5a:26:e7:4c:54:af:2b:f4:81:80:6a:30:3c:c0:69:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:90:D5:29:D7:1B:01:7E:6F:1C:D9:D0:B6:3B:3F:CE:4D:FA:E2
X509v3 Authority Key Identifier:
keyid:A5:92:0D:EC:6F:F0:09:49:E8:21:61:72:1E:B9:4C:C6:45:E3:47:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/og-Q1SnXGwF-bxzZ0LY7P85N-uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/99beb5-4fd9-469e-9d7f-a3fd8f33fa74/1/pZIN7G_wCUnoIWFyHrlMxkXjR3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.148.0/22
IPv6:
2a0b:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
36:ea:10:e2:20:78:05:96:d9:18:3e:e3:f4:b8:1b:f6:c6:bb:
da:a3:c4:18:f8:bd:a9:e7:c9:86:47:f1:23:3a:ba:20:f4:0e:
a5:6f:97:2d:91:0c:c3:72:8d:bc:f0:68:29:24:9a:e4:3f:84:
91:02:c7:df:e1:19:29:65:d1:e1:8d:54:27:83:fd:29:a2:75:
cb:f3:e0:6d:5b:ae:50:fa:9b:90:1f:bb:5a:97:4a:ff:d2:52:
20:30:07:f8:35:1e:af:9a:4c:16:b9:0b:48:84:43:42:5d:8a:
88:e4:1b:85:ae:bd:78:7b:cc:3f:0e:3f:7b:85:55:b9:93:90:
6c:ed:77:48:a8:77:a6:4b:74:7b:c9:ee:c2:e6:a0:c1:c6:86:
fb:0a:5c:cc:c3:91:ed:ab:b7:17:c6:45:b5:5c:b7:49:1a:17:
64:a2:80:9d:39:bc:ff:8e:b7:63:e3:c4:06:48:e2:ee:65:4c:
a0:ec:85:a2:64:f8:8b:dd:cb:29:cd:07:02:60:c1:ae:b1:e6:
96:e0:fa:9d:b8:98:f4:ca:fa:ea:ec:67:6e:d9:4c:23:52:d3:
27:93:6b:4e:6f:de:b8:54:12:2d:5d:0d:fb:1b:85:db:f4:04:
9f:6b:3f:8d:4b:16:ca:c9:06:47:70:8f:20:95:8f:d0:5a:a5:
14:9e:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:10:54 2024 by rpki-client on console-ams.rpki-client.org