Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/jOInmPr3xpOK7P2BqZGkyht_j2k.roa
File: jOInmPr3xpOK7P2BqZGkyht_j2k.roa (raw, json)
Hash identifier: 8avW4t10lzEhUDGS668heW/dwMwL8twYGHA/aDP44sk=
Subject key identifier: 8C:E2:27:98:FA:F7:C6:93:8A:EC:FD:81:A9:91:A4:CA:1B:7F:8F:69
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018CC500137136FBF1B47928644EBE8EFC99
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/jOInmPr3xpOK7P2BqZGkyht_j2k.roa
Signing time: Mon 01 Jan 2024 12:29:25 +0000
ROA not before: Mon 01 Jan 2024 12:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54252
IP address blocks: 193.160.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:13:71:36:fb:f1:b4:79:28:64:4e:be:8e:fc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 12:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ce22798faf7c6938aecfd81a991a4ca1b7f8f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:82:94:a5:bb:57:6c:a7:4d:58:1b:c1:68:
05:41:20:0e:77:4d:59:02:74:35:40:39:20:be:40:
0b:5e:45:29:d7:a8:eb:8f:80:b8:ee:f1:55:35:a0:
25:fd:9f:3c:8d:df:46:fa:74:61:87:6a:91:e0:cc:
f9:8c:f4:1a:f3:46:49:a6:0e:a5:cc:97:d8:95:03:
64:24:5f:89:84:0c:7c:ee:1a:dc:56:ea:98:e6:0f:
be:2e:27:9b:58:96:6d:58:8c:f0:e7:c8:5f:3f:b1:
6c:91:b5:e6:d7:50:c5:ea:64:06:a3:3f:9f:04:af:
08:24:15:6f:4d:2b:e7:ef:63:32:08:39:d8:74:dd:
32:fb:a3:50:68:ef:4f:fd:46:be:58:99:d8:41:55:
12:8c:e7:8f:1e:9c:9c:ee:c3:7a:25:f1:87:26:23:
a1:1b:70:07:c3:ea:0e:b3:61:92:94:b3:3a:f1:69:
7a:b5:ed:29:b2:68:91:5f:53:43:92:df:b0:cc:1a:
84:c3:71:fc:a9:61:41:4e:8b:00:c1:e0:67:bb:41:
10:7a:75:04:c7:f7:86:a9:9f:ef:0d:65:6f:2f:ea:
88:9d:c3:1d:26:95:a3:68:2d:f5:b0:bf:ab:07:9d:
46:95:74:d5:b4:b3:f5:2e:95:05:c4:57:de:bc:2b:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E2:27:98:FA:F7:C6:93:8A:EC:FD:81:A9:91:A4:CA:1B:7F:8F:69
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/jOInmPr3xpOK7P2BqZGkyht_j2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.136.0/24
Signature Algorithm: sha256WithRSAEncryption
81:29:73:e2:6a:12:2c:39:0e:64:48:d7:a3:82:7a:70:16:b4:
a7:43:26:15:95:f7:f2:cc:7c:28:30:dd:7d:54:bb:23:42:12:
52:84:6a:79:12:98:a8:1e:97:f4:eb:c7:42:ac:aa:e7:0e:4a:
71:1d:35:b1:e3:9d:f8:0d:d8:20:75:fa:86:7e:fe:de:51:53:
df:03:3a:e5:91:eb:43:9d:c7:95:85:31:ff:5c:01:9b:33:fe:
dc:d7:8d:78:2b:70:db:d8:4a:ca:37:4c:c3:ca:e4:f2:3c:73:
7c:3c:28:b2:9d:41:03:03:f9:f5:52:de:26:48:cc:79:d2:42:
da:bc:30:87:5d:d5:b2:33:c1:6a:da:4f:f0:fa:92:cd:77:9d:
88:78:56:c7:8c:29:60:40:1a:3e:09:b1:7f:a8:b5:91:c3:c9:
1a:c3:a9:ed:5b:29:db:92:71:bf:6a:6f:ac:92:97:73:cc:68:
b7:92:fb:f1:e5:8a:46:fe:69:2b:1c:0a:dc:71:00:ce:c7:b7:
bd:fc:87:74:be:74:d1:3a:cd:e7:3c:f9:7f:d5:1f:11:5d:b1:
42:04:99:19:19:e4:85:2a:98:64:25:83:d2:ae:6f:1c:06:a1:
0d:9a:75:e4:2c:57:f9:16:9a:dc:98:76:46:b7:f4:57:9c:13:
81:07:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 08:04:20 2024 by rpki-client on console-ams.rpki-client.org