Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ojiivngeJwAxHR18Mo7V6zYBR1k.roa
File: ojiivngeJwAxHR18Mo7V6zYBR1k.roa (raw, json)
Hash identifier: 37bwYYeNmjwgTz1SOR9QnJVuy2jjczi4VQEEb2lIOJI=
Subject key identifier: A2:38:A2:BE:78:1E:27:00:31:1D:1D:7C:32:8E:D5:EB:36:01:47:59
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018CC94D3A530FB13B30333650E4A55C509C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ojiivngeJwAxHR18Mo7V6zYBR1k.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 212.111.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 17:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:3a:53:0f:b1:3b:30:33:36:50:e4:a5:5c:50:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a238a2be781e2700311d1d7c328ed5eb36014759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:4c:5f:77:7a:f8:ca:b9:46:bb:69:f9:5b:
01:ce:a2:f4:d0:c6:22:a0:74:16:cf:77:cc:de:0e:
e4:39:12:6a:80:ac:5e:77:92:b3:7c:a6:72:bb:10:
4b:78:ba:24:14:5b:0a:3b:4d:4e:eb:92:b8:91:14:
b0:4b:2f:64:e7:7b:17:7e:57:02:80:51:c5:62:0e:
3f:8b:0c:5a:21:59:c7:da:48:9b:07:21:11:0e:68:
90:bb:c7:06:22:8f:f0:1a:06:b5:f6:2e:96:2c:98:
35:85:09:92:af:60:90:d6:6d:1b:65:4a:64:58:4a:
5b:4e:f0:97:3a:62:eb:7f:dc:87:11:50:c0:09:72:
d4:c0:0f:7f:78:2f:44:96:4f:b3:e7:28:5b:ea:dc:
8c:40:5c:6f:a5:fb:6c:11:82:aa:cc:d2:ff:50:14:
98:62:a6:ba:92:17:f4:49:0b:6a:a2:7b:23:55:14:
b7:2a:d7:c3:a6:c3:55:23:20:58:1f:3f:9d:43:97:
82:66:21:54:e0:46:d1:be:75:0e:3d:14:ff:39:d5:
57:9e:58:04:c0:82:f6:d3:1a:88:e3:c0:df:14:c5:
a4:16:82:b6:91:ba:b7:ec:98:22:f7:f5:a7:b2:c8:
88:46:b2:d8:41:d2:f1:64:60:ef:20:eb:80:d1:19:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:A2:BE:78:1E:27:00:31:1D:1D:7C:32:8E:D5:EB:36:01:47:59
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ojiivngeJwAxHR18Mo7V6zYBR1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d4:a6:e9:cd:99:c5:ea:1a:51:a0:a2:f7:9f:83:c9:26:4c:
15:ce:b9:71:f8:54:48:00:9e:bb:81:0c:b3:3e:a2:5b:cd:d5:
71:53:b5:23:0e:c7:fd:55:a6:ae:9d:8f:b8:4a:67:00:e4:09:
52:e3:85:33:6a:e4:de:64:4d:4d:35:bf:de:75:77:9f:c8:68:
ff:62:59:da:bc:be:9e:22:cb:1f:57:e2:60:2d:d7:89:67:17:
32:96:3d:92:c3:2f:7d:dd:77:a5:77:2b:b5:d8:b9:68:e4:52:
61:01:b0:cc:21:9d:4d:de:65:4a:bc:bf:fa:26:5e:26:0a:a9:
a9:3b:1a:7d:35:83:7e:1c:ab:09:11:2e:10:d5:a6:90:3b:94:
73:cf:20:b6:6a:d7:20:75:4b:de:fb:d1:5b:0b:d8:6b:54:a9:
ca:ee:bf:8a:83:49:9b:ef:ec:0f:15:3f:24:c9:ef:7c:be:98:
38:a9:66:c6:4b:1c:cc:8d:42:29:d0:06:b7:c5:bd:e0:c7:ef:
80:52:d8:db:97:55:da:51:50:bc:e1:e8:1f:76:e5:c4:14:fe:
67:f9:68:6a:ba:c2:9c:72:cb:6d:85:d0:3c:91:6b:25:56:5b:
e7:fb:58:8f:3d:bf:e4:f5:f6:7c:87:d0:93:ec:71:97:e5:9e:
0c:06:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:45:32 2024 by rpki-client on console-fra.rpki-client.org