Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/O72hZCw7ogAK4qSxeBuduomGKCE.roa
File: O72hZCw7ogAK4qSxeBuduomGKCE.roa (raw, json)
Hash identifier: VFoqrlQ+OjcQVfMvnT3en/fbOrKUvRwyHB+JIbf9utE=
Subject key identifier: 3B:BD:A1:64:2C:3B:A2:00:0A:E2:A4:B1:78:1B:9D:BA:89:86:28:21
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 018CCA99734FBA0990F9C1513F212A44AF5F
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/O72hZCw7ogAK4qSxeBuduomGKCE.roa
Signing time: Tue 02 Jan 2024 14:35:03 +0000
ROA not before: Tue 02 Jan 2024 14:35:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204174
IP address blocks: 185.99.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:73:4f:ba:09:90:f9:c1:51:3f:21:2a:44:af:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jan 2 14:35:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bbda1642c3ba2000ae2a4b1781b9dba89862821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:62:a3:71:65:6e:6b:65:3a:e2:ac:25:3e:
48:33:90:d1:fb:2b:b3:39:77:f8:66:a7:1e:0e:9b:
d8:35:cc:13:11:9c:af:0a:74:47:38:f4:e8:8c:07:
a8:ac:2c:ee:56:51:cc:d0:b4:22:3b:72:e6:f8:31:
83:f1:9a:f8:e5:ac:e2:36:34:5c:81:21:a6:63:9e:
0c:82:1e:b9:cc:0d:25:e3:62:da:f5:84:c0:07:bb:
96:5c:f9:50:1a:22:06:05:f3:bf:47:79:12:a6:d9:
5a:25:40:e9:99:73:49:f4:4e:fe:b0:8f:41:a6:71:
7f:47:1c:c7:f7:51:46:3b:37:38:42:9d:1c:e4:ba:
a8:81:cb:26:b0:bf:26:a1:32:29:71:c8:d9:8d:90:
0e:fe:37:72:50:b6:a3:0a:e4:e9:e7:44:37:42:31:
d2:3d:3b:f8:36:ad:2c:c5:02:07:b9:0f:ab:90:4f:
d0:9b:9c:c1:f6:e6:bd:3d:1f:71:ba:2a:2c:4c:a1:
63:bb:f9:bb:e7:3f:9b:fe:55:37:b7:4c:13:2e:60:
b2:ee:52:ba:d1:0d:be:6c:bb:30:a9:d0:1a:66:f1:
a8:c0:c7:97:88:8c:35:eb:9f:06:5f:4e:9f:a1:40:
90:64:0a:5a:e3:f9:b0:4f:cf:12:3e:a7:53:2f:73:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BD:A1:64:2C:3B:A2:00:0A:E2:A4:B1:78:1B:9D:BA:89:86:28:21
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/O72hZCw7ogAK4qSxeBuduomGKCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.20.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a9:33:da:8c:e1:52:14:46:63:f7:c5:54:8d:41:00:fb:07:
93:52:66:18:ad:9c:69:a4:11:08:47:6d:2d:73:3d:87:93:dd:
e2:5d:46:c2:fc:5c:b7:03:e9:3f:8d:11:51:52:22:28:5b:75:
74:8b:f1:c0:ba:65:52:60:df:7d:d7:68:47:e0:a4:c2:05:72:
47:11:95:c9:ed:fd:0f:95:b1:6d:2b:4f:21:78:3a:c8:15:1b:
58:f2:b4:11:b0:03:e5:a8:e2:98:54:5a:65:60:47:1d:f6:ec:
f6:ec:a2:72:a4:c8:99:0d:b3:69:e3:16:08:4a:87:6c:77:02:
f0:ca:d1:27:0d:57:fb:e0:92:55:f0:69:f9:bd:47:28:88:88:
de:fe:21:67:dd:57:db:55:f6:5d:6a:18:40:e3:17:ed:27:cb:
f1:2b:b3:84:31:6d:69:51:67:fc:86:44:b2:8a:5a:d8:22:d6:
17:62:9d:59:54:fd:b4:0f:5d:c3:ee:48:62:97:9d:f4:68:b9:
63:44:17:0b:50:21:1e:38:f8:7c:91:b4:53:63:8e:55:77:3e:
c3:f6:c7:fb:fa:2d:8c:0f:81:63:ac:a4:1c:60:da:7f:42:7e:
59:03:97:94:9d:c8:06:e2:b2:e9:29:7d:9a:f3:b7:59:a0:ae:
7a:49:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 14:33:48 2024 by rpki-client on console-fra.rpki-client.org