Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/1-ODO-j2eMJrAvChyVWLYuz0OBeM.roa
File: 1-ODO-j2eMJrAvChyVWLYuz0OBeM.roa (raw, json)
Hash identifier: x5d4UHbgp3y2HmWMp7UXcbYOOswnUwtFAATeesIJjl4=
Subject key identifier: F8:E0:CE:FA:3D:9E:30:9A:C0:BC:28:72:55:62:D8:BB:3D:0E:05:E3
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 018D55AB33CD9F0DE64FC80A81AF16F8B61E
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/1-ODO-j2eMJrAvChyVWLYuz0OBeM.roa
Signing time: Mon 29 Jan 2024 14:41:39 +0000
ROA not before: Mon 29 Jan 2024 14:41:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50525
IP address blocks: 91.148.232.0/22 maxlen: 24
91.148.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:ab:33:cd:9f:0d:e6:4f:c8:0a:81:af:16:f8:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 29 14:41:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8e0cefa3d9e309ac0bc28725562d8bb3d0e05e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:29:e3:15:c8:8f:05:ca:29:b2:4d:d2:a7:
99:74:bd:b8:37:26:b0:53:1f:ea:bf:ed:4f:68:c7:
ea:a9:e3:38:38:86:7c:93:bc:76:70:a5:1f:7d:cb:
15:53:12:af:52:a4:50:1b:f1:14:ba:ab:20:83:1e:
d3:04:a5:9f:64:0d:2c:3c:3d:61:6d:c1:66:c7:17:
59:b5:24:dc:e8:a6:ad:b1:dd:73:93:53:ee:ef:6a:
2f:ce:a5:15:bf:b9:71:43:5a:07:2b:9f:94:f6:ed:
c2:88:cf:0f:d5:34:6b:9f:36:11:c5:78:26:19:8f:
39:56:45:a5:df:06:55:db:8d:25:2d:58:75:83:85:
5b:90:f8:23:8b:71:76:6b:d8:12:e1:b0:2c:e2:85:
09:45:75:f1:09:bd:f7:54:48:5a:0e:8d:cb:8c:6a:
44:c7:23:e7:b5:2f:43:63:95:3d:cd:ff:dd:76:d1:
4d:2b:ce:34:f7:a4:c9:60:8e:8f:e8:5f:f9:76:27:
5a:d0:b1:b2:5c:03:f4:2d:4b:c0:38:18:f1:94:af:
8e:f5:38:f7:4f:48:3d:90:77:ff:7b:b2:b9:09:56:
61:6a:b4:0a:8b:b6:17:c9:ed:e6:c8:a8:6d:f9:f3:
ae:96:2b:68:be:a3:4c:a8:73:0c:ef:9e:e7:84:cf:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E0:CE:FA:3D:9E:30:9A:C0:BC:28:72:55:62:D8:BB:3D:0E:05:E3
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/1-ODO-j2eMJrAvChyVWLYuz0OBeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:7e:0c:60:b6:99:54:d0:41:e7:f2:71:97:5b:6c:e9:28:13:
ac:d3:e1:d4:e4:53:ef:12:41:7c:fa:c1:f7:30:04:8f:2a:90:
0a:a8:94:fd:5e:f7:9f:5c:41:93:2b:6f:89:b8:c6:6f:84:b8:
59:68:3c:48:4b:17:b6:e5:43:49:71:b0:d0:f2:70:00:a5:1c:
87:6f:07:ba:62:fd:79:7f:65:f9:de:24:45:2f:40:e1:0f:7e:
a3:c5:e5:47:60:c8:9f:5a:de:37:86:09:2a:95:73:af:93:6a:
36:81:38:d2:e3:97:29:19:5a:d9:ca:5e:c1:6e:79:5f:11:35:
e5:92:32:9b:b4:64:fa:aa:d1:a8:79:67:04:9b:db:a6:f8:61:
f8:e2:66:f4:c8:76:ab:bd:c2:74:d8:29:05:df:a2:1c:e7:50:
89:46:b8:2d:49:91:c9:48:d6:f8:41:3b:6c:aa:2f:b0:1f:20:
ed:b5:26:cd:fd:ba:bb:91:ee:50:0a:ab:8a:7f:3c:97:00:f1:
44:00:f8:dd:92:00:0d:86:c1:7b:98:0f:9b:05:c9:54:4e:d3:
93:e5:c1:23:1e:af:c0:3d:7e:99:c7:2a:d2:75:7e:01:bc:fe:
56:b6:98:c3:26:6f:f5:15:95:e7:8b:46:eb:78:ae:b3:75:be:
b0:a0:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:13 2024 by rpki-client on console-fra.rpki-client.org