Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Oh03zzoh7tKCMDV6Qwsc0LRWOn0.roa
File: Oh03zzoh7tKCMDV6Qwsc0LRWOn0.roa (raw, json)
Hash identifier: v9IGKJqPGKg3RRDAeGgfqgetanLx8AEXETIe45kq0O8=
Subject key identifier: 3A:1D:37:CF:3A:21:EE:D2:82:30:35:7A:43:0B:1C:D0:B4:56:3A:7D
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E8EB4C7B9C2E8DAE80E9F910B04B7
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Oh03zzoh7tKCMDV6Qwsc0LRWOn0.roa
Signing time: Mon 01 Jan 2024 14:30:06 +0000
ROA not before: Mon 01 Jan 2024 14:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 82.222.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8e:b4:c7:b9:c2:e8:da:e8:0e:9f:91:0b:04:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a1d37cf3a21eed28230357a430b1cd0b4563a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:42:05:f6:a6:94:71:bc:73:b3:80:90:19:
a4:6e:fa:37:54:b0:36:95:a7:b8:c9:cd:bc:50:4a:
d1:36:c1:76:e0:4b:ee:df:2b:19:c8:0c:e6:d3:57:
34:ef:91:5e:fc:74:85:1f:dc:69:56:3c:b1:a7:5a:
16:e3:99:69:c2:9e:6c:10:0e:89:df:03:bb:a0:af:
a7:95:b7:94:a7:d5:0a:32:5c:3a:84:74:82:bf:16:
d8:76:2e:d6:c5:dd:5f:4e:95:f3:9b:41:ae:b6:05:
4d:3e:82:d4:e3:57:74:cf:b1:14:1e:e0:90:c1:58:
61:c5:91:4c:22:54:2f:c0:32:c6:7e:fa:84:05:b4:
0b:de:b9:e3:a6:eb:74:d8:a5:f4:f5:30:a4:d7:50:
7f:32:f0:db:52:8b:c3:f8:29:c9:58:46:13:21:30:
23:d6:91:fa:f0:bf:0a:19:81:53:1d:9b:79:2f:5e:
38:0a:61:77:f2:88:f8:1f:1a:b5:38:c3:51:77:23:
d1:75:59:df:12:cb:b1:6f:6c:68:2d:79:cb:dd:f5:
e2:9e:59:e2:96:ac:b2:80:5f:ff:eb:3b:ca:c7:23:
0f:b9:32:88:04:8b:03:10:5a:06:b1:31:7c:36:66:
9e:02:af:90:61:df:64:98:cf:16:c6:0b:62:61:e7:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:37:CF:3A:21:EE:D2:82:30:35:7A:43:0B:1C:D0:B4:56:3A:7D
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Oh03zzoh7tKCMDV6Qwsc0LRWOn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.169.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1f:57:78:9c:08:f5:06:a8:53:e0:60:23:08:5e:e6:79:bf:
36:0e:08:69:b4:89:1e:42:8c:2d:cc:0c:85:9e:84:b3:9e:f8:
74:fe:ec:eb:d1:57:cc:35:cb:c3:b8:fa:91:1c:24:bc:b7:f4:
0b:c1:fb:c0:60:73:6f:68:44:03:5e:32:68:a0:15:2c:9e:2f:
8e:10:6e:b4:a1:f0:8c:cf:14:09:10:4f:88:a9:37:73:47:94:
42:1e:fb:8a:55:9c:14:d7:0c:72:56:3a:a8:d4:be:56:6f:e2:
9a:37:5f:4e:9a:6f:d5:9e:51:1f:1f:9c:92:30:de:b8:63:4e:
61:e9:23:9a:62:dd:ab:8d:04:01:75:97:ff:5d:e8:ce:cd:de:
5d:b6:15:4e:95:5c:73:75:be:ad:44:8d:71:b2:dd:b2:d5:9f:
07:61:e3:39:10:ab:fe:98:67:84:bf:04:7c:18:bb:ae:5b:70:
81:0d:ff:ae:57:44:29:97:59:a9:a4:59:91:7b:0e:4f:4d:89:
65:69:7e:51:58:62:a7:db:3b:78:e3:30:f2:50:62:17:2b:6b:
a0:0c:1a:77:ff:9a:b9:3c:90:da:01:09:e1:82:5e:4f:d9:ec:
e6:82:2a:a3:ad:95:58:f1:df:46:f5:19:a0:85:60:e3:55:fc:
4f:f7:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:34:57 2024 by rpki-client on console-fra.rpki-client.org