Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/MT0AvraN6ys47FYxDyP0vJe7tSQ.roa
File: MT0AvraN6ys47FYxDyP0vJe7tSQ.roa (raw, json)
Hash identifier: Hw98HKuY02FoTUqUh2Wihiyda6dMdbSBBo/yxh69VUA=
Subject key identifier: 31:3D:00:BE:B6:8D:EB:2B:38:EC:56:31:0F:23:F4:BC:97:BB:B5:24
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 018CC3B74584D281BCD2ABA60722F0EC396E
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/MT0AvraN6ys47FYxDyP0vJe7tSQ.roa
Signing time: Mon 01 Jan 2024 06:30:17 +0000
ROA not before: Mon 01 Jan 2024 06:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47650
IP address blocks: 195.34.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:45:84:d2:81:bc:d2:ab:a6:07:22:f0:ec:39:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Jan 1 06:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=313d00beb68deb2b38ec56310f23f4bc97bbb524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:79:65:d2:ef:89:ed:a1:21:d5:f1:87:9e:
a6:e9:1b:45:73:96:7a:45:2e:d0:5e:b5:28:46:1f:
e4:4c:11:44:d3:bc:21:fc:1a:ab:80:4a:70:04:2f:
c5:fe:a2:81:6f:96:4e:e4:8e:0d:6a:8f:a7:8a:8e:
95:50:03:c8:ea:fe:4f:27:1e:ac:b1:77:8e:3c:d2:
5a:dd:e2:58:97:5c:43:09:32:e1:20:bf:b2:1d:73:
0f:ce:b1:3c:ff:8e:6b:d4:a1:57:09:4a:72:10:5c:
f5:e1:7f:fa:8a:fd:e9:d4:13:18:b0:6b:4b:7c:6a:
e0:13:a7:b9:18:d7:c3:a6:d0:78:12:c0:ce:de:9a:
8b:38:53:db:22:a5:20:a5:5c:ab:66:4d:ca:ee:db:
d6:0e:fb:0c:9d:bb:2e:35:1c:93:08:a3:10:f6:12:
1e:d6:e6:b5:eb:5b:48:58:d1:01:f6:8f:dc:78:e5:
2c:2c:95:cc:ed:0e:96:38:b3:d9:0f:e5:a5:d0:9d:
47:74:6f:8e:6c:4c:16:a9:65:09:af:2d:7a:a1:ac:
d8:f9:6e:ec:96:bc:26:e8:ad:44:89:f5:c9:98:ab:
28:c7:18:09:0e:c3:22:54:ab:aa:f8:5e:54:19:af:
2b:26:8c:59:8d:bd:73:4e:42:e9:71:a9:8d:13:6c:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:00:BE:B6:8D:EB:2B:38:EC:56:31:0F:23:F4:BC:97:BB:B5:24
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/MT0AvraN6ys47FYxDyP0vJe7tSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.220.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:95:62:6c:85:66:e0:5c:d0:70:33:14:31:e7:b1:18:af:ee:
40:8e:29:18:ae:07:91:c7:77:17:51:5e:8d:b0:61:cf:3f:13:
d1:4f:b3:57:12:a7:17:d3:73:63:d1:f3:44:3b:2a:78:38:d6:
ab:3e:b9:dc:30:d6:72:be:84:5d:6c:3a:5a:5d:f1:b3:f8:2d:
74:18:dd:f7:32:0b:35:44:42:ab:e3:ea:6c:31:40:10:39:94:
29:f6:1d:ad:58:63:fe:73:db:03:fe:1a:c8:ec:8c:f5:5b:84:
11:28:1a:fe:e0:0a:c6:cf:d0:91:61:08:96:5a:cd:5a:70:e3:
07:b9:fb:17:59:b4:e3:57:35:bb:26:cb:b8:e3:9d:fa:c3:c9:
b4:15:0e:07:a9:47:b7:1d:eb:8b:f5:84:d8:63:d2:75:a3:13:
7d:82:ba:3c:b3:93:db:2d:7e:0f:9e:a3:cc:cf:ce:26:ed:7c:
81:d0:56:16:26:e5:a3:91:9b:9d:a1:54:86:6c:65:21:12:8d:
1e:95:6e:e2:42:8e:c2:48:f1:b3:51:59:ea:fe:3e:ab:4b:21:
71:b2:3e:6f:01:ea:49:74:ea:96:aa:0f:3d:18:c5:c8:72:9f:
b0:3d:0f:4f:5c:cf:8d:30:90:90:e4:9c:36:69:0f:76:56:95:
bf:56:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:56 2024 by rpki-client on console-fra.rpki-client.org