Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/OO-nDTKM6HYeFZfrRu6HKvTmXew.roa
File: OO-nDTKM6HYeFZfrRu6HKvTmXew.roa (raw, json)
Hash identifier: gQ5E2yPRJF7BYJ501TLgzJknQtaKqNFQB/am1tnHmME=
Subject key identifier: 38:EF:A7:0D:32:8C:E8:76:1E:15:97:EB:46:EE:87:2A:F4:E6:5D:EC
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DD1E8C79B4DCED326C165EC0FF40271BA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/OO-nDTKM6HYeFZfrRu6HKvTmXew.roa
Signing time: Thu 22 Feb 2024 17:41:50 +0000
ROA not before: Thu 22 Feb 2024 17:41:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395092
IP address blocks: 45.139.54.0/24 maxlen: 24
92.119.161.0/24 maxlen: 24
92.119.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:e8:c7:9b:4d:ce:d3:26:c1:65:ec:0f:f4:02:71:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 22 17:41:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38efa70d328ce8761e1597eb46ee872af4e65dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:cf:69:fd:08:5b:ed:80:b6:1d:c7:77:64:
ec:ce:8a:06:6c:52:48:f3:5c:15:53:91:75:45:bb:
7d:3b:25:f4:1d:a2:1e:64:08:29:ac:e5:25:c5:fc:
8e:de:ec:51:61:eb:4f:4a:04:cc:ba:08:b6:b5:e1:
3e:e1:53:53:47:1c:42:44:00:40:d1:dd:9f:9e:87:
ad:f2:66:97:86:f3:32:03:58:14:d3:82:10:9e:8d:
07:d7:d7:a8:aa:05:35:41:39:82:b8:87:35:19:d3:
74:0b:c2:d2:42:a7:ba:fa:b0:3d:ca:90:f0:93:e8:
23:2d:2d:3f:c4:f9:4a:30:81:6e:39:64:bf:fd:0c:
10:e7:34:d2:dd:30:63:12:0d:f3:a2:86:e0:ee:ed:
43:1b:f6:ec:c8:d6:a3:78:71:ed:91:a9:e8:50:8c:
5e:52:4a:6a:19:e9:7e:af:ca:63:c2:02:c0:59:2c:
2d:e4:ad:72:58:2f:71:d3:43:35:38:02:63:45:88:
6c:60:d3:1a:15:d3:0d:f0:76:de:53:65:a5:2e:8d:
c4:e9:e3:d2:db:1e:00:b2:00:87:ca:c6:d7:5e:b2:
0c:cf:b4:5a:cc:61:5b:f2:be:06:c3:b4:35:01:df:
5d:fb:6b:22:51:06:0b:12:34:6f:60:a7:74:db:78:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:A7:0D:32:8C:E8:76:1E:15:97:EB:46:EE:87:2A:F4:E6:5D:EC
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/OO-nDTKM6HYeFZfrRu6HKvTmXew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.54.0/24
92.119.161.0/24
92.119.163.0/24
Signature Algorithm: sha256WithRSAEncryption
42:be:8a:34:80:9e:ed:21:0b:40:d4:48:20:89:49:db:d6:c1:
44:30:83:49:42:0b:54:b0:41:16:76:1a:13:e9:fc:d9:03:e9:
f3:de:66:9e:ae:95:75:24:dc:af:62:07:c2:8e:af:4a:47:07:
7e:0f:f0:31:7f:b3:96:18:01:0e:77:d0:11:02:2e:ed:cc:19:
0e:87:5e:a0:25:9d:51:a3:ab:05:f3:08:d1:c1:67:d8:1e:98:
18:f4:d1:a3:93:17:26:0e:6b:14:7a:ed:ec:e6:17:4d:bf:f3:
e2:b2:0d:e5:f3:58:92:ca:4e:06:6c:2f:ff:59:c7:ff:5c:56:
96:b3:90:17:50:1c:28:fd:77:4e:67:ab:b9:bb:ed:cd:19:04:
1e:94:f4:5a:2f:94:dc:a7:c9:fa:45:cc:55:e0:74:ef:78:ec:
c0:19:1e:6a:66:7e:3e:17:3e:2b:8d:c9:c2:7a:ae:0b:e1:4e:
9f:4f:23:d4:1c:6a:2d:8f:04:83:34:ad:bd:42:03:aa:c6:8d:
9d:44:67:0e:68:40:fd:cb:7d:51:e1:61:f4:88:49:a8:1e:dd:
ac:95:66:ef:79:72:3d:f6:3e:c9:02:fb:a8:82:fe:07:31:0a:
0b:a3:d0:d7:23:05:43:5a:ea:dd:0b:ea:64:2a:c8:2a:70:35:
63:5c:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:27:20 2024 by rpki-client on console-fra.rpki-client.org