Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/otoVcUDqll5tnl92NXJKAp2DKWM.roa
File: otoVcUDqll5tnl92NXJKAp2DKWM.roa (raw, json)
Hash identifier: XnKJsPFucKxHtw9U4ykYaZcRp9VLHLJ87UoP2vYZPS4=
Subject key identifier: A2:DA:15:71:40:EA:96:5E:6D:9E:5F:76:35:72:4A:02:9D:83:29:63
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 018CC348E03ACDA4EA7F704C6FE204157E74
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/otoVcUDqll5tnl92NXJKAp2DKWM.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208705
IP address blocks: 193.33.121.0/24 maxlen: 24
2a12:6dc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e0:3a:cd:a4:ea:7f:70:4c:6f:e2:04:15:7e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2da157140ea965e6d9e5f7635724a029d832963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:e1:7a:79:cc:3d:be:7d:a9:bf:04:b0:51:
16:1d:7b:fa:9a:52:47:5d:c7:a3:00:3b:6c:4c:52:
08:ab:e6:b9:f6:6a:05:ca:bf:d7:11:3f:39:e9:ba:
d3:c9:b1:5d:c7:4e:04:21:4f:c2:21:1f:55:1b:9a:
60:d3:96:7f:e6:51:fa:57:fe:97:dd:42:66:16:07:
fd:2e:f1:9d:d8:69:0c:a5:4e:0e:d3:48:1c:84:4d:
6d:6f:b6:5a:86:af:ae:e0:c9:eb:a2:79:90:b3:ba:
cd:75:3d:10:74:36:e1:96:ee:d1:1d:98:e5:da:1c:
3e:d7:5a:36:98:a2:49:57:ed:db:10:4e:6c:fb:bb:
8f:aa:34:bb:a6:a8:70:5f:df:3e:41:76:fc:2c:fa:
c9:20:47:9b:b9:2d:cc:e8:ff:e0:2b:43:33:cd:d6:
da:60:b6:80:d9:df:39:21:c5:99:37:4f:e6:43:dd:
57:39:30:46:ed:4b:88:69:9d:d5:df:8e:ff:ae:4d:
5d:05:8b:46:5c:49:2d:48:2d:69:35:33:3b:f6:2e:
b3:5f:12:5a:d1:9c:db:e6:cc:21:a4:0c:9d:57:c7:
a7:25:7e:43:ce:78:94:51:55:6c:cf:61:81:4c:36:
6e:8e:fe:98:c2:3d:94:03:3e:67:5d:02:f7:a9:91:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DA:15:71:40:EA:96:5E:6D:9E:5F:76:35:72:4A:02:9D:83:29:63
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/otoVcUDqll5tnl92NXJKAp2DKWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.121.0/24
IPv6:
2a12:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
07:e5:f2:f7:23:1f:26:d6:c3:9a:00:c8:4d:69:0b:c2:8e:87:
23:15:b5:5a:24:a4:5c:21:b6:33:81:f9:7b:44:d8:7c:a7:29:
81:e6:f2:37:b6:65:1a:59:d5:c8:62:02:46:14:e9:8f:77:78:
4e:5f:51:2b:2d:a0:e2:7f:76:0b:5d:90:bb:5f:e7:76:0e:65:
3d:ec:76:66:d5:52:17:80:8d:f1:7a:56:bc:a8:2d:3d:32:cc:
0a:74:c3:21:af:eb:01:07:45:13:76:2a:8e:1b:2f:fb:6a:8d:
e6:d6:a0:03:b1:6f:e3:16:ff:f1:ec:1c:a4:07:b3:db:22:5c:
9a:8a:54:82:3b:99:7c:77:7c:83:21:a0:22:46:b9:1f:7a:5c:
5a:8c:cb:78:80:15:4c:31:c4:e4:ae:58:2f:24:c9:7e:b6:b7:
61:61:80:85:f4:e6:ae:d9:c1:db:49:fc:c8:34:e6:41:b9:f0:
1f:fc:50:27:06:e0:e8:98:f2:51:ec:2e:b0:c9:e9:99:a3:c6:
a1:f1:3e:28:60:59:f5:10:28:54:3c:39:cb:f3:37:b1:a7:54:
5a:aa:ec:57:be:2e:03:49:89:ea:84:08:23:cf:50:c8:60:04:
54:c4:70:b0:71:9d:44:5c:63:60:6d:62:a4:ba:b6:d1:08:ad:
13:57:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:24:43 2024 by rpki-client on console-ams.rpki-client.org