Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/Otcd3VGeiVgymMuhPcnL3yIacRU.roa
File: Otcd3VGeiVgymMuhPcnL3yIacRU.roa (raw, json)
Hash identifier: uzRmC3Mh3vLn9KUAFqQvV5OM+VvTbbWyKIi3vRmtHp8=
Subject key identifier: 3A:D7:1D:DD:51:9E:89:58:32:98:CB:A1:3D:C9:CB:DF:22:1A:71:15
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 018CC34952F5DC303DACF629B121DBDE157C
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/Otcd3VGeiVgymMuhPcnL3yIacRU.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48854
IP address blocks: 193.8.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:52:f5:dc:30:3d:ac:f6:29:b1:21:db:de:15:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ad71ddd519e89583298cba13dc9cbdf221a7115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:e6:a8:2f:c6:c1:67:50:34:a0:56:51:9e:
84:39:40:f0:23:a6:8d:bb:f8:d8:19:76:82:ee:1f:
7f:0f:96:6c:87:05:ff:6d:ed:3f:68:f4:6e:28:c6:
07:b5:37:0d:1d:cc:d1:86:69:91:47:58:ef:99:64:
9f:ba:f7:ad:f5:a6:64:84:ba:0c:23:cb:3f:84:89:
1c:d6:da:ac:ac:f4:9e:87:dd:77:3d:b1:54:d5:71:
f5:06:4b:c4:09:8c:ba:6b:4a:3f:97:d7:61:a4:97:
09:72:de:c5:6a:3a:d3:d7:1b:e2:d5:be:32:28:6c:
39:bf:4b:3a:73:f3:fc:91:c3:af:f5:42:82:4f:66:
8f:01:42:53:3e:c4:ec:96:00:30:7f:0e:59:59:2f:
cc:fb:61:3b:47:a6:00:64:36:f6:f0:4e:12:ca:69:
b9:5e:cc:d3:74:0c:c9:d9:2e:14:d1:e8:ff:f4:f8:
be:0a:bc:19:9b:5e:94:94:e6:d5:7b:ef:95:7c:c1:
e5:70:21:de:c1:80:6d:fd:76:3a:d4:56:28:0c:06:
95:db:ff:f3:2b:fa:10:dc:e6:4e:56:9e:07:46:ff:
5d:77:8e:f2:10:41:f9:0c:ce:aa:55:9f:95:8a:a6:
aa:9c:50:0d:fe:51:b6:b3:b5:04:88:87:51:2a:46:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D7:1D:DD:51:9E:89:58:32:98:CB:A1:3D:C9:CB:DF:22:1A:71:15
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/Otcd3VGeiVgymMuhPcnL3yIacRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a6:1f:7f:06:22:ab:88:52:a5:cd:ba:fe:9b:96:cb:a6:07:
a3:36:05:7b:ae:07:83:aa:1d:61:50:19:5d:1c:74:90:56:cd:
a4:8b:30:c1:33:1a:aa:52:1f:3f:5a:13:89:91:13:12:9e:69:
e8:32:aa:a9:d6:15:fd:6f:c4:ad:b9:02:38:06:7a:56:97:3a:
4e:22:36:93:24:63:b0:ad:33:01:0e:fe:67:f2:d7:2d:5a:8e:
5b:dd:6e:8f:ad:ba:99:75:7b:5c:cd:58:1d:c6:86:09:93:3b:
17:86:76:9c:f0:9a:49:7e:f6:5b:3d:22:14:0d:48:7f:e3:21:
a0:47:7a:34:be:f4:e2:4e:0a:46:55:13:74:d9:1d:c3:92:3b:
08:b6:4f:da:de:14:09:c8:13:3c:87:06:6c:2d:86:c2:99:37:
f3:ab:b9:b9:06:4a:fa:e8:64:2c:7c:69:13:75:ea:9c:d8:6f:
87:9d:af:52:5f:f8:fc:eb:cd:35:ec:bc:dd:e1:dd:b1:e1:82:
0f:78:24:1d:d5:c8:79:19:dd:56:64:63:a6:e3:da:ce:4a:83:
3d:e2:0e:a4:45:b6:69:49:02:8a:04:7a:ea:10:c0:c9:a9:d3:
bf:40:0c:c8:8a:0d:b1:f0:e3:14:de:2d:63:08:dc:72:e6:96:
92:78:36:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:46:23 2024 by rpki-client on console-ams.rpki-client.org