Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/ObkUnmrSN2khQmfM8jY7x8JaiFQ.roa
File: ObkUnmrSN2khQmfM8jY7x8JaiFQ.roa (raw, json)
Hash identifier: uzUQz65FHnhpwrX9x/lT7ZA3mjBk3kq8ljug3Ai6xk4=
Subject key identifier: 39:B9:14:9E:6A:D2:37:69:21:42:67:CC:F2:36:3B:C7:C2:5A:88:54
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 018CC49380095253952104B6AD5A027AA645
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/ObkUnmrSN2khQmfM8jY7x8JaiFQ.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208342
IP address blocks: 45.13.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:80:09:52:53:95:21:04:b6:ad:5a:02:7a:a6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39b9149e6ad23769214267ccf2363bc7c25a8854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:66:7b:cf:c7:0a:78:19:68:44:55:89:0c:86:
09:09:f2:29:78:60:58:7e:b6:c9:5a:cf:d9:8f:dc:
64:1a:40:41:92:1e:d8:79:71:02:9c:5d:07:54:6a:
da:5c:16:51:96:04:2a:29:26:cb:49:2c:45:b6:8d:
d3:53:37:c5:81:f4:12:56:3b:10:9a:71:a0:3f:af:
2c:25:0f:0e:20:4e:13:c0:b8:58:64:04:12:65:8c:
35:45:d8:6d:23:7a:a7:f0:4d:23:6a:5d:ae:89:f2:
dd:b8:e9:02:40:fb:ed:e8:2e:88:5d:ce:89:ac:95:
85:2c:02:d3:75:48:a4:41:1c:3b:fa:a8:44:75:0d:
9d:fd:0e:67:5d:e5:0a:ac:67:ea:37:3b:e7:4f:e9:
91:15:04:e1:73:02:7c:15:fd:38:34:b7:a6:4a:c0:
e2:bb:1b:2c:50:da:74:6b:ad:2c:54:06:30:b4:0a:
33:88:28:f6:25:d8:fc:c3:72:fd:e9:49:2a:0f:60:
17:4e:7e:a8:ea:7b:9f:fd:9c:f3:db:5a:e9:39:1d:
a9:02:6a:37:de:3c:35:46:92:73:03:1a:7e:64:44:
a6:a3:68:fa:bb:97:c4:af:e8:ba:4e:5e:ad:ab:af:
2f:ec:a0:86:1b:ae:a3:de:3e:5e:4e:69:f4:98:d0:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:14:9E:6A:D2:37:69:21:42:67:CC:F2:36:3B:C7:C2:5A:88:54
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/ObkUnmrSN2khQmfM8jY7x8JaiFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:55:b7:27:60:f3:a9:6c:f5:a3:80:9b:a7:38:00:f1:ea:77:
dd:4e:ed:bd:1f:9f:70:e4:a0:f7:dd:5a:96:65:cc:91:e2:ee:
37:29:ab:54:56:19:b7:96:6f:7e:0a:e0:04:20:c2:2a:72:1f:
72:31:4c:2a:2c:bd:58:bc:b6:06:dc:e6:20:5b:d8:0c:45:07:
ac:1a:56:4d:f4:02:59:b4:17:b0:0d:7b:8d:f1:b7:2f:26:8f:
8f:47:a8:d7:0b:ee:88:e8:c7:90:9d:77:28:a9:59:a9:1d:61:
69:50:72:58:88:a8:d0:a4:a8:87:a1:23:6a:f1:02:c9:27:57:
2a:8f:51:94:54:c7:48:7f:23:f9:bd:62:a5:38:58:b8:d7:15:
19:e8:90:5b:b6:86:66:f9:8e:ec:7d:ab:3a:ba:42:d9:a7:ed:
57:e6:8b:55:b7:f2:32:4a:e3:99:3d:25:ef:86:b3:85:ff:f1:
7d:12:84:ab:63:f2:cf:4d:cd:4b:bc:5e:c1:81:f9:d7:9e:a3:
13:9b:62:37:e8:bf:81:16:67:9b:97:ee:f7:aa:6b:59:23:8d:
ad:b7:bf:21:71:9d:b7:24:a9:06:41:1b:07:7f:8b:c5:76:40:
e6:ef:4b:fc:21:2b:7a:66:6f:91:d6:39:f6:11:ba:e4:05:7d:
b4:7c:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:39:32 2024 by rpki-client on console-fra.rpki-client.org