Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/OKJIvZUOee3enFqs0Kuo6c7qPu8.roa
File: OKJIvZUOee3enFqs0Kuo6c7qPu8.roa (raw, json)
Hash identifier: RH5xBRHNqT6IMbaTd7mYUCg8IfLu+sk3YBTFxFmgbgs=
Subject key identifier: 38:A2:48:BD:95:0E:79:ED:DE:9C:5A:AC:D0:AB:A8:E9:CE:EA:3E:EF
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 018CC26D47EF603EAF03D4562898F2A8CB28
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/OKJIvZUOee3enFqs0Kuo6c7qPu8.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208906
IP address blocks: 78.24.232.0/21 maxlen: 21
2a0d:8f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:ef:60:3e:af:03:d4:56:28:98:f2:a8:cb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38a248bd950e79edde9c5aacd0aba8e9ceea3eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:76:f5:58:d6:dd:a2:d6:bd:66:71:7f:df:
b4:4c:c4:43:0b:1b:ce:70:b8:46:51:6f:31:3b:f0:
6c:c0:5a:8e:99:13:a1:2c:7b:58:c0:58:fd:ef:be:
a5:f5:9b:a9:7b:cf:75:d5:48:b7:d4:58:49:c3:f9:
97:04:47:32:f8:04:b3:32:94:e8:6d:39:4f:c2:31:
3e:57:b8:bc:bd:2b:0f:1b:2d:cd:ad:a2:71:3e:e2:
de:8b:52:5e:c7:a3:ca:60:4f:13:1d:75:07:35:dc:
a3:ae:dc:4a:5c:c9:78:1f:54:e7:18:01:eb:2c:d4:
9d:31:23:e5:3d:5a:a2:d3:f0:5c:d4:e2:fe:c7:a2:
90:c2:89:41:6e:39:0c:50:3d:1c:40:d4:89:5a:db:
f9:8a:4a:83:5f:b6:b2:b7:62:f0:b6:e9:98:dc:54:
d4:5d:d5:b2:47:35:e1:6e:52:3a:21:32:b4:62:bb:
32:76:02:a9:80:7c:ff:73:ca:fc:cb:d4:41:f8:c7:
20:f5:05:24:6d:23:7b:b4:d5:ec:3c:6b:1e:1f:2e:
5b:05:40:d5:c1:e9:5c:c6:eb:fd:ba:80:6d:a6:6b:
fe:69:32:eb:f2:c7:26:4c:4d:d0:f4:f5:68:51:2d:
2c:05:99:36:f6:87:7c:11:d1:b8:5d:f3:73:8c:8c:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:48:BD:95:0E:79:ED:DE:9C:5A:AC:D0:AB:A8:E9:CE:EA:3E:EF
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/OKJIvZUOee3enFqs0Kuo6c7qPu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.232.0/21
IPv6:
2a0d:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
c8:6d:3d:ab:8a:55:98:b6:8a:03:ff:7e:a6:4e:4e:f8:f3:d2:
63:1c:29:cf:cc:21:a2:e5:78:9c:44:0e:04:26:2b:62:ed:94:
31:27:f2:f6:ce:33:bc:61:ff:00:f1:85:76:71:54:1d:09:ce:
ac:22:6d:4f:48:af:51:3e:6f:e1:be:85:ef:58:e3:37:c0:83:
51:31:eb:a7:a3:d3:9f:38:12:35:1a:cb:1f:7d:6b:c4:7a:e7:
38:5a:94:6e:0d:07:e3:5d:97:49:94:e2:a1:51:a5:48:7b:b4:
e7:49:2d:c4:04:7e:a4:5b:11:64:02:f5:42:32:8f:2d:e8:f8:
2c:a5:f4:7b:c3:35:db:ca:8a:bd:0a:1a:2d:29:8a:7b:17:cf:
4d:de:8d:8a:8b:ff:c0:5d:41:66:e5:b9:a3:8d:c7:e2:2f:6b:
8a:bd:a0:7e:a8:ba:ec:c5:e3:9c:21:76:af:2a:f2:24:02:c8:
44:34:d1:05:ee:f8:e7:f1:1c:c3:4b:a9:d0:a5:fc:0d:4d:25:
82:ad:ba:c9:0b:62:c1:c8:01:53:20:22:4d:f6:45:fe:5c:62:
f3:70:fd:78:33:8e:f5:19:21:3d:58:21:e0:72:83:a3:72:15:
92:b5:75:5c:1e:ad:a8:e8:ac:77:78:1c:89:22:99:d3:66:c5:
d4:50:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:36:38 2024 by rpki-client on console-ams.rpki-client.org