Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/OKC2mIY2hrW2_uKz1E65ubgwxZE.roa
File: OKC2mIY2hrW2_uKz1E65ubgwxZE.roa (raw, json)
Hash identifier: C04/KE5Qqu4q3KeHuCYdAlsINhf5BorW0ke2hB8OTrE=
Subject key identifier: 38:A0:B6:98:86:36:86:B5:B6:FE:E2:B3:D4:4E:B9:B9:B8:30:C5:91
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 018F28F73C3C4873F95E13D25D6BE4744F76
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/OKC2mIY2hrW2_uKz1E65ubgwxZE.roa
Signing time: Mon 29 Apr 2024 08:27:22 +0000
ROA not before: Mon 29 Apr 2024 08:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44554
IP address blocks: 88.151.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:f7:3c:3c:48:73:f9:5e:13:d2:5d:6b:e4:74:4f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: Apr 29 08:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38a0b698863686b5b6fee2b3d44eb9b9b830c591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:46:40:8b:59:b1:e3:5f:cb:2a:2e:2f:98:
e6:21:33:24:6d:fd:80:86:92:32:fd:6d:f7:08:c8:
41:5f:ec:44:d0:02:d1:2b:88:e5:2a:d0:25:79:c7:
0c:94:a6:ab:80:39:31:8f:ab:27:42:b7:b8:ba:9a:
96:57:47:2d:84:dc:00:e5:f2:f3:0e:42:f8:7d:8f:
2a:9f:17:3b:c8:81:18:0c:1a:54:de:03:10:7e:46:
71:40:58:dd:17:9b:1d:11:1b:92:2f:6e:ef:57:65:
07:92:10:e2:5f:8d:21:a4:91:46:8e:5b:03:e5:dd:
82:4b:fa:8f:7c:63:70:c4:21:47:4a:0a:7b:26:1c:
25:87:74:69:8c:d8:6a:49:a3:56:be:ae:68:be:35:
5a:7f:9c:75:0c:7e:4f:42:67:51:3a:18:ce:72:f4:
8f:55:eb:9f:e3:6b:36:2c:42:97:a7:ad:6f:3a:8f:
44:6f:02:2f:d0:0a:fe:03:f0:df:02:85:92:f9:77:
7d:b3:f7:6c:fc:fe:bb:ae:cc:9b:cc:98:14:4e:b4:
65:47:d1:94:12:4d:fa:7a:15:53:7d:76:37:2d:78:
28:c0:fa:e8:8e:2d:45:a8:cd:fb:11:02:ae:dc:1a:
b9:49:b0:87:50:3b:0d:cd:e1:25:3f:d6:19:37:1b:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:B6:98:86:36:86:B5:B6:FE:E2:B3:D4:4E:B9:B9:B8:30:C5:91
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/OKC2mIY2hrW2_uKz1E65ubgwxZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.119.0/24
Signature Algorithm: sha256WithRSAEncryption
24:18:65:4f:a1:45:eb:87:fe:56:c1:d8:ec:c4:04:0b:86:15:
e6:8a:71:e6:96:70:89:4d:2d:c8:44:ff:77:9c:19:7a:59:3b:
50:2a:be:26:b1:53:84:a5:bd:35:ae:ec:e1:83:65:c8:a2:80:
3e:01:3c:02:ad:f5:e5:35:e2:74:6c:c4:47:f1:25:86:4c:41:
2e:7b:2d:b2:0e:49:bd:eb:39:d8:e6:53:64:00:5b:22:e8:2d:
ad:72:fc:27:c2:b2:c8:df:d4:2b:1b:7a:b1:fc:d0:76:d5:39:
e4:d3:c2:f0:a8:d1:cc:63:9b:8e:fe:da:d5:18:33:5f:ce:49:
f7:e2:86:07:ba:93:f9:31:2e:c5:eb:d0:7f:74:2c:4e:6e:8f:
60:65:94:44:ca:22:03:c1:39:22:02:06:81:9d:45:1a:fa:36:
ca:f5:a4:71:b3:6a:52:99:bc:44:6d:8b:1c:eb:89:ae:f8:82:
2a:9e:e1:35:8b:22:a6:a5:ba:29:b9:c8:53:25:01:0c:3e:71:
71:d4:2b:06:9e:1a:f5:73:41:ff:48:ac:5e:9b:9b:b4:c1:cc:
d0:f1:8e:21:04:24:be:a7:71:47:f1:34:79:fe:bd:9c:6a:4f:
ad:fd:20:13:87:00:ed:92:0c:31:e3:87:1c:bf:ac:f4:86:22:
8c:5d:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 05:01:32 2024 by rpki-client on console-ams.rpki-client.org