Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OzPGZEmauvAVBVQEi6ISmdBuxT0.roa
File: OzPGZEmauvAVBVQEi6ISmdBuxT0.roa (raw, json)
Hash identifier: lSnWXp7H57H0C8idM63IfNuMvU9ebZogQz7mKLEx6Os=
Subject key identifier: 3B:33:C6:64:49:9A:BA:F0:15:05:54:04:8B:A2:12:99:D0:6E:C5:3D
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 0190D4C1F3CD21C0B690066338B81D7CC1DA
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OzPGZEmauvAVBVQEi6ISmdBuxT0.roa
Signing time: Sun 21 Jul 2024 10:06:38 +0000
ROA not before: Sun 21 Jul 2024 10:06:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31742
IP address blocks: 91.241.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:c1:f3:cd:21:c0:b6:90:06:63:38:b8:1d:7c:c1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jul 21 10:06:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b33c664499abaf0150554048ba21299d06ec53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:e0:06:12:91:d5:83:0a:94:f6:ac:f8:d2:
c9:2f:8f:e9:76:48:fd:d6:f2:84:ac:86:03:41:f1:
c7:58:e5:01:7f:e1:59:d5:e5:b2:3d:f7:bd:f4:92:
ff:f6:9c:f1:0e:f4:7d:f5:7f:a4:a5:82:50:4c:2f:
79:22:2f:e4:1f:7e:1e:f7:24:bb:17:23:6e:a9:13:
bb:40:b5:65:41:bd:8f:dd:55:07:15:d5:91:ec:72:
d2:4c:7a:4c:10:e5:73:58:97:d2:ad:f8:8c:e1:b1:
31:11:9a:39:2d:0d:ad:68:70:e7:67:6e:76:ca:23:
36:14:2d:8a:5c:b2:0d:6d:82:e9:19:c2:fa:d1:9c:
10:12:0c:4c:04:80:a9:5c:f7:09:66:4f:17:a7:d1:
19:b5:e6:06:71:66:d7:b2:e7:b3:aa:54:31:c8:b0:
73:d0:8f:d3:b0:11:c6:5a:c3:a7:4b:55:26:8a:2e:
f8:c3:9b:94:a3:24:c3:72:ce:f6:74:30:c3:d1:4c:
44:48:45:9d:cf:2c:5f:bf:f2:e7:8e:a7:03:dd:c4:
92:23:9c:d6:16:b5:e6:1c:db:95:ec:4c:69:2b:cb:
ad:bb:15:60:20:f8:2f:21:ee:ac:d0:e7:fe:e4:d0:
23:1b:90:36:24:a3:18:24:14:16:9b:f5:40:ff:e3:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:C6:64:49:9A:BA:F0:15:05:54:04:8B:A2:12:99:D0:6E:C5:3D
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/OzPGZEmauvAVBVQEi6ISmdBuxT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:81:a7:d7:a9:a5:a0:9b:c3:51:06:44:67:43:86:53:4f:33:
ab:7f:2d:fe:75:ac:1b:15:2d:f4:b3:bf:ae:fe:7a:07:08:27:
aa:90:5c:38:ba:47:e7:6e:ad:10:fc:d4:6e:9a:14:63:a7:30:
55:6d:15:9d:6e:61:02:88:38:47:60:99:dd:23:1f:15:4c:04:
e7:b9:cf:24:1b:e8:64:93:60:90:56:98:a3:ff:cc:7c:2c:c6:
f3:d2:14:61:7a:b0:35:2f:6b:95:98:9a:bb:8e:81:22:80:4d:
25:8d:d5:d0:50:80:42:4e:d8:5c:fd:a1:b9:dc:96:b4:83:91:
97:ec:5c:a2:35:6a:d6:9c:7b:74:82:80:dc:ca:73:c6:86:cb:
61:fb:70:c0:44:b1:af:90:22:09:a1:18:0e:5f:e8:16:eb:ce:
2b:67:85:7e:bd:7b:04:0e:05:53:8e:1d:5b:ab:77:ce:4c:c2:
5c:a8:fe:f4:8c:39:86:99:c8:cf:27:0f:ff:27:4d:fa:cd:13:
e0:1e:7b:5c:ab:b5:16:f3:ce:a6:d1:d0:87:15:a2:0e:fe:4c:
06:24:7b:bb:ce:1d:69:7a:4a:ab:98:ef:a9:03:cc:2d:8d:dd:
e9:79:5a:58:68:74:8b:f0:a1:6a:e5:cc:5c:98:de:6c:0d:e9:
85:7c:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:24 2024 by rpki-client on console-fra.rpki-client.org