Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/O4nrM5WX5GnRP7jkLucpKQQVnp0.roa
File: O4nrM5WX5GnRP7jkLucpKQQVnp0.roa (raw, json)
Hash identifier: ouvzE8EZpiPX27FOFr22RBvr375LGxV/4YgG1HiTVmk=
Subject key identifier: 3B:89:EB:33:95:97:E4:69:D1:3F:B8:E4:2E:E7:29:29:04:15:9E:9D
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 018CC5DC876F90D524D01EF6FFB4E6F398C6
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/O4nrM5WX5GnRP7jkLucpKQQVnp0.roa
Signing time: Mon 01 Jan 2024 16:30:13 +0000
ROA not before: Mon 01 Jan 2024 16:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200027
IP address blocks: 2a00:cee7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:87:6f:90:d5:24:d0:1e:f6:ff:b4:e6:f3:98:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Jan 1 16:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b89eb339597e469d13fb8e42ee7292904159e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:45:d8:fc:22:65:12:f0:e9:db:80:8d:dd:
29:7b:43:3e:3a:79:62:c3:9f:6c:e3:4e:1b:9a:00:
ea:20:c5:ed:5f:24:ed:21:8f:7c:a1:98:b0:da:9e:
21:cf:0c:5d:07:a5:ab:ef:5d:66:5d:c2:95:ca:70:
b3:13:7e:6f:aa:1d:db:77:39:7c:b7:5d:96:0a:41:
d9:ab:cb:fe:45:34:09:cb:18:f7:12:9a:ff:31:4b:
d2:f6:54:b4:3a:d9:95:7d:0a:6a:e1:eb:7f:22:40:
b0:c3:fe:33:86:79:26:64:3c:b8:df:53:95:b6:9a:
d4:17:e4:4b:4b:99:33:58:e3:92:49:13:6a:42:6c:
4d:90:2c:b4:cb:8e:a5:c0:db:ff:c3:fe:c2:c4:e9:
54:b9:39:ed:86:2d:a9:dc:c4:9e:2e:3b:83:dd:89:
3f:db:e3:bc:2e:a2:65:02:d0:c1:27:76:88:e3:f4:
28:a1:e6:27:ca:4f:4c:fe:7a:b3:ca:9d:65:f2:73:
e3:57:3b:be:10:32:aa:c1:5f:b1:90:66:3b:93:e4:
36:8f:ff:cc:b8:41:0d:93:ed:9a:dd:39:55:32:56:
7b:f2:90:2b:72:30:8b:28:d5:9f:2b:89:dd:d4:c9:
65:8b:cf:b5:87:e5:f4:59:1d:4d:7a:37:3d:d1:f0:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:89:EB:33:95:97:E4:69:D1:3F:B8:E4:2E:E7:29:29:04:15:9E:9D
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/O4nrM5WX5GnRP7jkLucpKQQVnp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:cee7::/32
Signature Algorithm: sha256WithRSAEncryption
59:5e:d2:92:e4:05:72:b6:1d:16:c7:95:a0:7e:b5:66:54:8b:
66:de:21:96:23:2d:c1:a9:cb:1b:0e:fc:84:1b:7b:11:1f:73:
78:ab:6c:8e:5a:c3:48:13:7c:70:f2:a9:f1:88:f4:78:85:4e:
72:f7:e6:08:41:87:c8:a4:95:c6:ea:e1:e4:b8:ac:26:88:51:
a4:1d:ff:e7:ec:74:8d:89:6c:d8:d8:5a:97:ea:2b:6c:1b:21:
42:d8:09:cf:19:0a:47:86:a1:17:5a:e5:9a:03:08:a1:3b:9e:
3a:42:91:12:9c:fe:a3:fe:79:5b:6d:30:08:f5:1d:df:06:5a:
48:de:1b:3b:9a:f4:37:5e:6a:a3:ca:07:cd:74:b6:30:f3:34:
37:51:bf:e1:25:a6:67:5e:a2:60:ec:99:79:c2:14:87:bd:b2:
dd:f6:8d:30:cc:7b:fc:5c:1d:90:4e:ad:00:51:54:6f:ae:20:
af:9b:1b:9f:b7:2a:b4:73:a6:4d:db:9e:f3:5b:f0:57:dd:32:
c8:1a:c1:dc:76:b1:76:ff:e6:75:48:70:49:fa:b0:16:b7:25:
61:6e:f1:b3:35:72:9a:15:9b:f1:7d:41:97:96:3a:e7:b7:a4:
b9:05:53:d9:67:df:c2:e7:15:67:01:0d:7e:9b:47:f9:95:95:
6b:2c:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:21:09 2024 by rpki-client on console-ams.rpki-client.org