Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/OHFQl7sWTmgI11p1c9iQqzE-Rtk.roa
File: OHFQl7sWTmgI11p1c9iQqzE-Rtk.roa (raw, json)
Hash identifier: ZSjlJkyQ5DnYxoHdU4FnO0kUykltLQkmUCddKN7+eac=
Subject key identifier: 38:71:50:97:BB:16:4E:68:08:D7:5A:75:73:D8:90:AB:31:3E:46:D9
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 018CC8DFA1328FA7630376DE96C7675ADCC2
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/OHFQl7sWTmgI11p1c9iQqzE-Rtk.roa
Signing time: Tue 02 Jan 2024 06:32:28 +0000
ROA not before: Tue 02 Jan 2024 06:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51942
IP address blocks: 195.72.120.0/23 maxlen: 23
2001:678:56c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a1:32:8f:a7:63:03:76:de:96:c7:67:5a:dc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38715097bb164e6808d75a7573d890ab313e46d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:9d:eb:1c:a6:89:a4:94:d4:be:36:1d:fb:
f9:d9:7b:7b:05:1e:46:1c:02:4e:eb:2a:ab:ff:29:
fe:5a:0c:26:42:31:7b:2b:c6:fe:1c:a0:c7:db:9c:
de:1c:89:47:d0:cc:22:d0:78:a4:55:5b:61:a6:18:
5c:02:35:b7:9c:56:0e:d5:16:87:c8:7b:31:a1:58:
03:f4:03:e4:e6:2a:93:34:4d:ac:d4:d9:a5:a5:7f:
76:4b:60:52:90:23:21:d2:05:ec:a0:ae:6f:9a:26:
20:9d:13:c7:1e:03:38:c4:e9:12:f2:f9:6b:88:59:
95:85:17:af:f2:1b:4b:bf:52:9c:9a:0f:4f:4d:be:
93:7d:37:9f:d7:82:57:d8:2a:01:55:15:ba:dd:6c:
65:ee:69:d8:7c:69:04:84:e9:26:a4:06:e8:65:af:
c0:69:8c:20:cf:58:73:4b:b8:02:66:0c:b3:9b:5e:
4f:a9:13:4d:58:19:9d:81:4b:cd:d7:47:7b:77:53:
f2:80:b4:49:37:2d:55:3f:7f:97:4e:c5:90:fb:6c:
4e:f1:ee:b8:ae:cb:74:f6:45:f1:dd:ce:08:d8:22:
6c:ad:24:27:01:4e:ea:a6:74:7e:b7:c0:dd:f6:90:
d9:b4:6e:88:ff:4f:60:c2:f3:1d:f3:27:ed:b7:27:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:50:97:BB:16:4E:68:08:D7:5A:75:73:D8:90:AB:31:3E:46:D9
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/OHFQl7sWTmgI11p1c9iQqzE-Rtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.120.0/23
IPv6:
2001:678:56c::/48
Signature Algorithm: sha256WithRSAEncryption
8e:06:32:55:54:56:4d:be:c7:a1:19:8a:4d:1e:7a:a3:22:cb:
1e:3f:ef:ef:df:83:0a:76:ca:85:7d:96:b7:be:93:d1:3a:01:
9e:2f:c8:d8:94:46:bd:58:89:3b:66:dd:3f:64:ea:66:4d:1f:
88:8b:03:f2:d1:11:c2:58:96:6c:0e:d5:da:77:31:59:9a:56:
c4:8c:68:03:47:bf:07:f4:19:dc:38:94:41:b2:b4:11:57:e6:
ce:b5:7c:3e:c7:f1:05:7a:a8:a8:13:c4:dd:d0:73:fe:53:02:
95:f0:39:e8:21:a9:25:d9:1e:cb:99:a9:90:70:72:59:20:46:
e9:90:7c:cd:bb:ab:2b:15:12:3f:72:c0:c2:3e:0f:78:a0:d4:
b1:f8:87:e7:6f:be:a2:55:7f:d1:d3:4e:87:6c:57:5f:af:4c:
0a:8b:b1:77:be:c7:b2:3f:44:53:13:c6:b7:5e:c3:60:e5:21:
a1:c4:ee:99:ed:6a:40:4a:1a:16:7d:6e:14:39:b9:a6:67:f0:
8a:fb:6f:8a:8b:42:ef:16:b5:19:6d:60:77:56:8c:44:c1:0a:
d0:da:ea:74:2e:a4:db:91:96:99:3e:04:e4:03:43:53:5a:0e:
4a:cd:23:cf:19:35:d1:ab:35:d6:7a:a4:93:85:64:c3:bf:7b:
f9:e5:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:15:06 2024 by rpki-client on console-ams.rpki-client.org