Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/OviMZTjBhYKHJCzLVCH50LSB5VU.roa
File: OviMZTjBhYKHJCzLVCH50LSB5VU.roa (raw, json)
Hash identifier: fiTlmLRpj4ANtkjiMAy8pWvxHIi+A4ot9PL9uqzdiNI=
Subject key identifier: 3A:F8:8C:65:38:C1:85:82:87:24:2C:CB:54:21:F9:D0:B4:81:E5:55
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 018CC86F35E4D9FC340D305A40B26E50A352
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/OviMZTjBhYKHJCzLVCH50LSB5VU.roa
Signing time: Tue 02 Jan 2024 04:29:40 +0000
ROA not before: Tue 02 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42012
IP address blocks: 194.36.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:35:e4:d9:fc:34:0d:30:5a:40:b2:6e:50:a3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Jan 2 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3af88c6538c1858287242ccb5421f9d0b481e555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:36:8e:d0:0d:24:5e:1e:fe:88:c8:2f:dc:
51:7c:79:b5:ef:79:4c:a3:47:a3:c8:b6:23:f6:55:
68:7d:36:e2:80:9e:9a:8f:13:24:f7:48:7a:73:d4:
0b:92:6e:2e:af:65:c3:4f:81:f9:40:8e:2e:9f:33:
9b:73:ef:90:1b:fe:6b:a5:e5:b1:52:a5:6c:d3:84:
26:f4:d2:80:4c:66:9f:0b:aa:81:c3:af:a1:71:88:
35:50:9b:7e:c3:40:9f:5f:fd:d4:82:82:67:3f:10:
71:b2:29:10:47:42:86:5b:11:25:84:01:ed:1c:a9:
bd:ac:49:93:60:aa:2b:b6:3f:66:c3:e8:9c:5c:9c:
b8:e8:bb:91:c6:f5:0c:61:9b:5f:66:b9:a3:a8:ae:
97:0a:c5:30:e6:a9:3c:33:e3:4d:3e:38:31:a6:9f:
eb:cc:16:5d:3e:81:b6:90:95:c4:3d:b9:81:d7:96:
62:a8:96:9f:70:e5:38:7f:8d:79:6e:e9:53:66:b0:
72:0e:ae:65:24:99:e8:a3:50:b6:6e:ea:a8:e2:ca:
dc:5e:1b:87:4f:f0:1b:86:4e:9a:a6:3e:07:d5:dc:
d3:65:60:20:bd:4a:2d:b3:c2:d4:a5:13:9e:73:5d:
2e:ea:d8:b7:56:12:39:19:46:ed:c2:2c:1a:b6:bc:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:8C:65:38:C1:85:82:87:24:2C:CB:54:21:F9:D0:B4:81:E5:55
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/OviMZTjBhYKHJCzLVCH50LSB5VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9c:95:2b:8f:2c:e4:f1:7a:b0:0b:94:0d:8c:b1:95:64:5b:
0d:0a:4b:1c:99:13:5f:bd:29:69:8d:11:f9:ce:a8:2d:70:24:
b2:6e:49:d8:fd:04:2e:2d:e6:6a:7b:29:b1:bc:e6:0d:b3:bc:
f1:00:0d:63:84:ea:ce:33:c6:57:c0:9f:84:0b:ca:cf:db:ab:
90:6d:b3:3b:90:f1:1a:a1:00:96:e5:c1:33:bd:41:05:19:d4:
f6:7e:11:82:be:92:8d:a5:03:7e:81:c2:21:b5:7c:f3:e1:0f:
61:9a:da:80:ab:c8:7a:68:90:dd:df:48:b6:90:bd:cc:05:a2:
04:91:55:36:41:4d:d1:58:89:37:c7:8e:01:f2:cc:c9:ce:d4:
c0:ef:27:c6:69:5a:e0:d2:57:0c:36:a5:da:9f:72:7b:ad:cb:
6a:ff:76:e6:47:71:6f:3a:ca:17:7c:6a:18:a9:d7:0e:77:2b:
59:b6:c5:93:9c:25:ad:02:54:af:0c:f6:c8:9c:91:4b:e9:41:
62:52:a8:37:ac:42:99:e6:db:34:b9:a6:71:bd:e8:28:ef:24:
51:e8:27:b0:98:f5:61:06:49:d2:ee:86:5f:33:da:95:39:f6:
d5:8f:d5:29:a0:cc:c5:42:2d:b3:02:cc:73:5a:76:21:c5:9f:
d0:2e:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:52:53 2024 by rpki-client on console-fra.rpki-client.org