Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/OjwJk7b9fiF0IKeaIkgX-PTQ82g.roa
File: OjwJk7b9fiF0IKeaIkgX-PTQ82g.roa (raw, json)
Hash identifier: XkXLR/0C1pgFk9KnpttANUenl/WBdhiPV5INfwJ3uDI=
Subject key identifier: 3A:3C:09:93:B6:FD:7E:21:74:20:A7:9A:22:48:17:F8:F4:D0:F3:68
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 018CC493356341408D8F20F7168C124FF852
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/OjwJk7b9fiF0IKeaIkgX-PTQ82g.roa
Signing time: Mon 01 Jan 2024 10:30:30 +0000
ROA not before: Mon 01 Jan 2024 10:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50557
IP address blocks: 193.105.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:35:63:41:40:8d:8f:20:f7:16:8c:12:4f:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Jan 1 10:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a3c0993b6fd7e217420a79a224817f8f4d0f368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:46:4d:cc:12:d9:e9:ff:5c:23:61:c4:15:
33:0f:4a:72:a3:d9:1d:9f:a4:88:a6:84:4c:3e:ea:
97:4b:23:66:1a:75:73:45:3e:83:5d:2d:c0:89:5c:
83:77:40:f5:98:b0:06:c7:64:7f:f7:9c:fd:3a:88:
50:f6:8f:a3:39:54:5c:1b:cc:2d:2d:69:70:4e:89:
d4:c6:50:dc:9d:2c:37:0d:7b:70:35:af:70:2a:ba:
b4:4d:b1:a4:46:18:73:70:d1:d2:d3:df:ca:26:3e:
dd:00:0f:1f:70:49:2d:db:c4:cc:2e:31:11:b9:84:
0e:65:1f:a7:09:ea:a2:b8:42:47:97:88:a2:6e:d9:
3a:ca:80:03:d3:b2:fe:3a:39:83:4f:65:b1:a0:20:
31:6f:80:ec:7e:09:ca:48:01:f5:c1:5e:e7:8f:c2:
d2:af:d3:9f:30:52:96:fa:8f:8c:e1:b6:fe:28:e4:
36:51:94:73:f1:25:bd:f0:ab:c2:55:af:7b:a2:dc:
99:9c:0d:c2:2e:04:57:b9:b0:ab:7d:c0:73:a9:3a:
30:90:5b:5a:92:76:40:79:63:de:2e:b2:ea:80:12:
81:8b:59:80:59:f9:2b:6d:44:4a:69:4c:cf:0a:1f:
ed:20:8e:28:03:53:c9:76:54:55:be:31:87:6b:9e:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:09:93:B6:FD:7E:21:74:20:A7:9A:22:48:17:F8:F4:D0:F3:68
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/OjwJk7b9fiF0IKeaIkgX-PTQ82g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.110.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a9:1e:65:d9:e3:74:8f:f2:79:de:74:82:01:d9:7e:07:1b:
cd:2f:72:f1:14:3e:18:92:19:3e:14:e8:b6:ae:56:e0:43:e2:
37:df:8b:6d:8d:e9:ae:2d:0d:9a:f9:5f:8a:15:5f:5d:9a:ba:
d5:71:a0:2f:c5:d8:b7:f8:f9:61:c0:e0:9f:19:1b:40:bc:3f:
83:c2:4c:e1:78:d7:37:6b:94:bb:e9:9c:ab:6b:95:ad:f3:ce:
42:e8:fc:b6:44:84:a2:c4:41:3a:bf:5f:c4:45:65:fa:f3:87:
62:01:ba:01:af:cd:bd:9d:93:f0:4f:c7:1d:09:6c:a8:ba:97:
16:8e:18:dc:f4:68:9c:3e:07:11:e0:b2:20:d6:b6:8f:ef:47:
d3:d3:0a:78:8c:e4:2c:4a:90:bc:99:ad:0e:79:2c:ae:3a:00:
d6:78:ef:39:b2:48:a0:38:53:65:67:b8:06:1a:66:be:9d:8e:
9d:0a:72:6e:c1:cf:8e:02:9e:d5:6f:2d:ca:64:8d:ff:a1:b7:
32:36:76:d7:06:c6:9b:26:73:db:cf:c1:3a:6c:e7:34:d3:79:
d7:f2:a7:54:0f:2c:f5:88:bd:d0:27:b3:c7:50:c1:a1:ab:b0:
31:bd:2f:72:15:29:e0:18:fd:b7:ef:59:fd:59:12:6e:17:c5:
83:ea:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:59:41 2024 by rpki-client on console-fra.rpki-client.org