Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/oME-7Q1PFn9vweIPOi1Hge4km3s.roa
File: oME-7Q1PFn9vweIPOi1Hge4km3s.roa (raw, json)
Hash identifier: dBMVeUJgZFViHGvMoWzHodgM22DohSXf8uRbcpvaWBY=
Subject key identifier: A0:C1:3E:ED:0D:4F:16:7F:6F:C1:E2:0F:3A:2D:47:81:EE:24:9B:7B
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018CC64B281F6AB827C40D2F615949CDE4E4
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/oME-7Q1PFn9vweIPOi1Hge4km3s.roa
Signing time: Mon 01 Jan 2024 18:31:03 +0000
ROA not before: Mon 01 Jan 2024 18:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 5.39.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:28:1f:6a:b8:27:c4:0d:2f:61:59:49:cd:e4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 1 18:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0c13eed0d4f167f6fc1e20f3a2d4781ee249b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:fa:e8:0e:20:4f:c5:84:7d:cb:22:c6:f0:
2c:db:26:06:18:58:52:9b:5f:b9:82:43:bd:60:44:
0f:24:21:89:5b:06:02:75:b2:ee:2a:00:c6:e3:5b:
5a:95:de:33:55:47:15:4d:d7:16:7c:9b:3b:de:a7:
49:fe:92:08:3e:97:df:09:d0:58:c0:d1:f3:ae:3f:
f5:f4:0f:36:8c:50:f2:1c:e4:cf:90:de:4e:c7:7b:
15:06:f5:d8:45:95:6b:1b:86:a1:19:01:4f:10:b9:
fb:b4:f5:ae:06:57:0f:6f:e1:99:0b:9d:66:a8:e3:
dc:a2:13:33:6e:4e:a5:26:71:60:1c:67:ba:87:71:
a0:cb:73:65:04:34:ed:99:3f:10:95:18:16:22:f9:
bc:9f:bc:b1:39:db:c9:57:5f:e7:a9:ed:25:89:f0:
48:45:03:ac:da:22:f8:ec:23:ca:55:c6:19:81:3f:
b2:da:a7:d1:4b:da:8a:65:52:f3:59:4b:49:ad:e8:
3e:50:06:d5:b2:12:ad:6e:0e:b3:3a:41:1b:dd:83:
67:6d:58:27:7c:a5:da:73:a0:2f:f7:1b:84:86:ef:
bd:99:88:17:cd:68:58:db:f3:6b:68:6d:07:03:13:
d8:83:5b:32:e4:0b:6d:71:ab:a1:29:31:74:80:fb:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:3E:ED:0D:4F:16:7F:6F:C1:E2:0F:3A:2D:47:81:EE:24:9B:7B
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/oME-7Q1PFn9vweIPOi1Hge4km3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.249.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d3:b5:82:ce:bb:dd:69:15:d7:32:d7:12:18:0d:46:fa:8b:
37:90:8f:08:54:4d:00:77:0f:45:a0:89:c6:24:22:b5:3b:b0:
63:ff:b1:6e:6d:ba:68:94:45:76:0c:02:de:a2:af:0c:97:bd:
4f:ad:6d:a2:cf:fc:a5:1b:ed:26:11:9a:4d:27:1d:d9:74:e0:
95:c5:74:aa:0f:28:83:f6:e6:28:c8:ec:c2:7d:86:66:57:c3:
2b:41:4d:29:7e:d6:62:ac:b4:ef:ac:b1:59:4b:a2:d6:77:27:
f0:3d:4b:98:dd:71:2c:1c:87:9b:72:27:4d:ac:74:8a:5c:eb:
d5:1f:b1:2d:0c:78:19:2b:65:db:f8:43:c6:cc:c1:ee:ae:05:
00:db:ee:5b:b3:7a:3a:5d:70:b2:72:27:cb:02:2c:f0:f8:96:
d2:49:8d:6a:d9:8c:f8:58:99:5c:67:31:9c:7a:86:91:6b:62:
f4:d2:fc:b1:c3:fe:06:9e:7d:11:0b:27:2a:46:5d:73:56:2c:
20:9c:e0:45:05:ef:63:f0:c8:fd:98:b1:6b:45:52:35:80:4b:
7b:9b:ce:82:25:b6:71:b9:de:56:39:13:93:ed:a0:7b:85:61:
f4:02:2b:eb:06:06:e5:16:07:89:fc:e9:da:fc:74:ff:89:da:
18:35:84:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 01:00:28 2024 by rpki-client on console-fra.rpki-client.org