Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/OL-LX6eEizHoTi-JTmNsVUPxTXw.roa
File: OL-LX6eEizHoTi-JTmNsVUPxTXw.roa (raw, json)
Hash identifier: N3ENGKz54fP5dtJWRgscPU00sF2xzdr8X3m7ZrFw0ZQ=
Subject key identifier: 38:BF:8B:5F:A7:84:8B:31:E8:4E:2F:89:4E:63:6C:55:43:F1:4D:7C
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01904FF3C9F3DECC6587A29CC8285946755C
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/OL-LX6eEizHoTi-JTmNsVUPxTXw.roa
Signing time: Tue 25 Jun 2024 15:11:35 +0000
ROA not before: Tue 25 Jun 2024 15:11:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47681
IP address blocks: 185.191.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:f3:c9:f3:de:cc:65:87:a2:9c:c8:28:59:46:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jun 25 15:11:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38bf8b5fa7848b31e84e2f894e636c5543f14d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:31:a7:22:f1:94:48:c0:f6:85:30:a0:92:
52:80:90:bd:ce:7f:83:25:d8:0c:82:59:40:8c:e8:
17:0e:d0:be:f0:99:e6:2a:cd:07:d2:13:1a:6e:99:
d9:10:08:21:c1:24:9b:0e:ae:10:02:aa:8a:7e:57:
7f:76:cd:55:08:07:64:d9:cd:d3:64:57:c3:74:36:
2f:f1:26:11:ad:0b:47:8f:5a:d1:16:9f:77:8e:63:
58:2b:9f:27:9b:88:a1:91:45:9e:24:8d:3c:97:3b:
29:53:01:6a:e3:3b:90:77:4b:7d:82:c4:b9:5b:fa:
83:e7:fa:e0:a2:69:32:b7:06:e1:74:aa:a3:ed:6e:
c7:87:b5:3b:67:43:e6:83:8a:0b:a9:46:0b:d2:83:
41:35:86:ae:ce:95:15:57:b4:ff:7a:fd:78:37:c1:
8e:74:fe:fe:45:dd:81:61:c8:96:90:d5:6b:ce:fd:
c6:83:88:1f:bd:89:94:d8:60:38:8b:ef:9e:ee:59:
27:5e:3d:cc:b1:35:95:35:2b:01:e1:8a:a2:f8:d4:
bb:79:fb:ad:18:73:24:58:c9:47:fb:ae:22:5d:59:
ef:fa:f1:0a:25:0b:a4:84:3f:62:d7:24:87:68:3e:
86:7d:4a:4e:cd:6b:6e:d9:92:fa:22:0f:e2:02:de:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:8B:5F:A7:84:8B:31:E8:4E:2F:89:4E:63:6C:55:43:F1:4D:7C
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/OL-LX6eEizHoTi-JTmNsVUPxTXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:2f:77:96:61:86:f4:6b:e2:af:fe:81:eb:00:c5:a4:ec:8a:
50:c5:e0:a4:3d:45:35:00:f6:b8:ee:a5:cc:da:fe:bb:05:57:
72:fc:7c:24:6e:d2:15:8d:9a:75:9b:7e:bf:c9:18:ba:bd:ed:
5a:e7:ae:c1:54:40:57:f0:d9:e4:a9:f3:49:4c:25:4a:a6:47:
b9:93:25:4e:ea:72:06:f2:5a:f9:79:06:12:c7:cc:50:c5:5a:
77:17:f6:7d:e1:c6:4e:9d:2a:6b:3d:23:46:5b:c7:b8:25:12:
fc:ec:36:d6:bf:76:6a:5e:e2:ca:c4:05:5c:f7:1e:3e:fb:29:
a4:2d:59:6f:06:22:60:76:9e:ac:f7:ad:4f:b4:52:bc:a9:b2:
3d:72:65:ab:04:88:66:16:a3:cf:78:07:92:db:1e:a9:06:a9:
91:8a:98:d7:60:a8:38:2c:26:bb:1b:b5:d3:88:c9:23:46:ad:
91:4b:09:83:df:b9:81:9b:e0:66:83:78:3d:04:1d:4a:95:25:
65:c9:f1:d6:38:16:fd:8f:ce:f1:66:e0:ff:b1:b8:80:24:fe:
89:e3:fe:2b:81:50:fa:66:ea:4f:ab:e2:4c:18:24:8b:78:a2:
ae:fb:7f:b5:1e:87:34:43:40:bf:4e:b6:30:83:f2:3b:7c:a0:
a5:44:96:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:09 2024 by rpki-client on console-fra.rpki-client.org