Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/oCGnfz5UaVYCtJBUc4rOxYL2IGU.roa
File: oCGnfz5UaVYCtJBUc4rOxYL2IGU.roa (raw, json)
Hash identifier: bwnhX367x1vCBVhv4w4XOJU45xmzKXDUwqVb1RnVn08=
Subject key identifier: A0:21:A7:7F:3E:54:69:56:02:B4:90:54:73:8A:CE:C5:82:F6:20:65
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 018CC801A2E74F42621828AF11827E1FAEA4
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/oCGnfz5UaVYCtJBUc4rOxYL2IGU.roa
Signing time: Tue 02 Jan 2024 02:29:59 +0000
ROA not before: Tue 02 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43354
IP address blocks: 194.45.94.0/24 maxlen: 24
91.197.28.0/24 maxlen: 24
91.197.29.0/24 maxlen: 24
91.197.30.0/24 maxlen: 24
91.197.28.0/22 maxlen: 22
91.197.31.0/24 maxlen: 24
2001:67c:4d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a2:e7:4f:42:62:18:28:af:11:82:7e:1f:ae:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Jan 2 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a021a77f3e54695602b49054738acec582f62065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d8:83:e0:d2:8f:06:f8:70:83:5e:59:ce:97:
3c:4c:34:dc:9f:aa:9f:80:01:cd:c7:56:4b:76:d8:
52:be:b7:60:ae:17:e7:35:cf:b6:8b:18:11:0e:a9:
63:24:c0:cc:db:0b:0e:18:3e:fd:2b:a9:3e:27:10:
97:06:72:0c:0f:46:60:98:92:5c:9e:17:e3:7a:d3:
02:19:b2:aa:21:d2:7d:32:b5:e1:e9:69:b5:60:79:
f5:e1:13:62:ee:a5:bd:ba:06:fe:f6:22:93:85:f1:
42:3e:cb:89:e1:1e:6d:ed:3a:bc:37:c8:12:da:c3:
42:f1:39:6e:ef:4d:80:2f:f0:e1:0a:85:a3:0e:40:
38:b9:7d:e0:b3:4a:d2:c7:c0:77:8c:43:2d:af:74:
e5:0d:4d:14:92:a4:4c:86:a5:0c:0e:55:d0:fc:fd:
e2:40:17:7b:81:0e:46:c0:17:95:4e:da:91:ce:a4:
80:9b:b5:4e:fd:75:d4:5c:76:9c:b1:dc:8d:d8:8d:
53:51:b8:83:3f:17:66:75:10:e1:36:1f:1e:78:34:
bb:6d:1e:f8:cf:97:b9:f9:d8:0b:7a:1f:6c:0c:60:
89:ec:e5:05:6c:63:06:3a:d4:88:ca:8d:52:ad:95:
1f:3a:72:45:53:60:3e:12:53:de:f5:01:10:74:9c:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:21:A7:7F:3E:54:69:56:02:B4:90:54:73:8A:CE:C5:82:F6:20:65
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/oCGnfz5UaVYCtJBUc4rOxYL2IGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.28.0/22
194.45.94.0/24
IPv6:
2001:67c:4d0::/48
Signature Algorithm: sha256WithRSAEncryption
16:1d:43:fe:57:05:d7:20:62:8f:80:b8:6f:c0:2c:a9:8e:99:
ce:db:5e:8e:16:f9:c8:a1:62:ec:62:64:23:95:c2:72:9a:f9:
96:46:c1:b9:71:89:f6:d4:27:a7:dd:55:1b:df:76:fc:4d:e2:
1c:ed:5c:5a:41:29:6f:98:2f:51:89:0b:0c:52:fc:86:a7:bd:
0b:fb:a5:aa:d9:37:88:6b:60:6f:8b:c4:38:2d:26:a4:cc:33:
39:c7:84:3c:9e:d3:1b:ac:37:c4:60:59:90:64:0b:ae:e9:30:
05:12:f7:10:8b:a5:59:61:ea:8b:30:3d:c7:a4:78:4c:64:a3:
00:d1:b3:ca:13:bf:62:d9:22:63:59:06:0d:14:be:07:79:99:
85:1a:c6:28:ea:67:d3:b5:af:e2:32:be:cd:08:ee:15:ac:1f:
3c:93:dd:e8:ec:fe:7c:96:2f:78:a6:8c:6e:8f:91:1c:6d:f0:
18:52:d1:ff:53:f3:fd:77:0f:54:82:72:54:8b:f6:7d:b2:eb:
11:08:70:30:8d:15:d6:a8:83:62:97:4b:eb:43:2f:2c:60:59:
e0:fe:f5:05:02:4d:a2:37:35:56:bc:c8:09:b2:a7:ca:4d:c9:
d2:8d:a9:07:8c:52:20:97:c2:f7:1c:50:19:61:4b:7b:ab:29:
e3:71:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:51:25 2024 by rpki-client on console-fra.rpki-client.org