Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/oTU4e1MB0lhiA_2evavizdMMD3I.roa
File: oTU4e1MB0lhiA_2evavizdMMD3I.roa (raw, json)
Hash identifier: LKJKW78k0yVtWjl6XMTDA6FTfRRwYmSYuJ4cq/IgRCo=
Subject key identifier: A1:35:38:7B:53:01:D2:58:62:03:FD:9E:BD:AB:E2:CD:D3:0C:0F:72
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018CC26CF5B5EDA0B8059660D3BB32B2DCAC
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/oTU4e1MB0lhiA_2evavizdMMD3I.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35153
IP address blocks: 185.212.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f5:b5:ed:a0:b8:05:96:60:d3:bb:32:b2:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a135387b5301d2586203fd9ebdabe2cdd30c0f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:87:b0:9f:d9:c1:f0:dc:ce:fd:36:7f:6c:
0d:28:94:d6:27:7a:aa:ff:a0:46:64:f2:7e:fa:68:
2e:ca:a8:33:59:12:ed:3d:e2:e5:c7:31:f8:ee:ee:
fd:31:0d:75:c1:28:91:cb:37:8b:d7:66:76:a4:d0:
48:9e:d7:6f:70:a9:11:94:01:e9:5d:2f:fb:31:3c:
f9:55:f8:46:2a:bb:f2:43:34:7c:76:bc:75:44:f2:
94:05:55:8a:d0:09:a1:d8:a3:62:14:80:f9:a5:45:
81:7b:af:fa:ee:b9:b6:e1:85:b5:7d:76:ed:d2:32:
f4:b3:2d:1d:75:d8:e8:fd:55:4b:17:85:f5:fd:8e:
6a:e8:63:bb:b6:61:07:0a:2f:36:ef:c3:d4:f3:8e:
d7:ee:63:91:87:99:1d:25:79:2f:de:19:68:72:f8:
ef:8f:fe:e0:65:d3:a5:6d:50:22:b2:21:73:ab:cc:
40:d7:08:57:6b:94:74:1b:c0:d7:ad:e0:89:fa:5e:
b3:39:c0:48:5d:6f:fc:c7:2d:a6:b7:b2:6a:28:b4:
d0:c6:bc:5d:02:88:18:8a:de:3a:97:f8:b3:83:2c:
e2:8b:62:4e:b0:80:b6:80:a4:dc:0f:32:ce:fa:ce:
4b:8b:5b:8d:9d:55:94:2c:a7:6d:36:8a:d4:d9:79:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:38:7B:53:01:D2:58:62:03:FD:9E:BD:AB:E2:CD:D3:0C:0F:72
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/oTU4e1MB0lhiA_2evavizdMMD3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.136.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:cb:21:b0:45:db:ee:52:62:0d:71:72:b9:c5:fb:34:ca:b1:
24:be:9c:28:13:90:94:72:bb:d9:89:00:2c:72:91:e1:f8:b5:
1b:7a:e7:bb:e7:db:da:9d:ac:8b:8f:14:3f:d9:ab:07:d9:83:
84:af:4a:71:85:1a:26:52:43:d5:16:db:2a:0f:0d:95:c6:b6:
ac:eb:c5:4a:4b:bd:e2:06:3c:14:f0:c5:ad:ff:ce:a3:73:42:
55:11:c1:d8:00:d3:8f:88:a8:2a:f4:00:70:f0:c4:d3:f1:d6:
6b:71:8d:5a:57:1c:ef:04:f2:98:96:1c:2f:0a:2a:97:10:ff:
90:d8:e2:1c:81:1f:5e:91:7f:09:95:6f:ca:3d:94:10:da:06:
9f:47:96:38:46:7a:b4:a5:93:81:93:d0:29:93:01:42:6b:24:
db:d0:37:f7:5d:fc:b7:ad:2b:51:b2:b0:8d:0a:f0:d2:37:0b:
66:30:cb:15:cd:03:58:f0:3a:e2:51:cb:ae:f5:26:06:72:7c:
8e:75:bb:3a:00:73:4f:b3:3d:5d:a2:42:51:42:fc:54:98:1b:
36:8c:0f:67:65:f3:d3:13:80:05:d5:ba:6f:cd:25:ee:d0:1c:
b2:3b:ab:d2:c4:53:92:28:2c:5b:f7:3c:a5:f3:ea:98:61:9c:
48:ce:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:24:31 2024 by rpki-client on console-ams.rpki-client.org