Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OUhun8DiDH_kHYyWsGle-Ygb5SI.roa
File: OUhun8DiDH_kHYyWsGle-Ygb5SI.roa (raw, json)
Hash identifier: OJaB44N+x0Gb3BboaMT2KRFSj6Ay3ccoiTkH3o3guxk=
Subject key identifier: 39:48:6E:9F:C0:E2:0C:7F:E4:1D:8C:96:B0:69:5E:F9:88:1B:E5:22
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E4C33216E3DE3737AC1B46DAB03E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OUhun8DiDH_kHYyWsGle-Ygb5SI.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29256
IP address blocks: 31.148.152.0/21 maxlen: 24
92.253.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e4:c3:32:16:e3:de:37:37:ac:1b:46:da:b0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39486e9fc0e20c7fe41d8c96b0695ef9881be522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1f:8c:a8:9d:5e:39:85:e3:82:be:82:54:06:
46:55:5c:0a:ab:f3:f8:34:9f:20:b3:f9:47:d1:0b:
6d:fb:92:c9:71:7d:a2:d5:1c:4a:ee:9f:6e:2c:0e:
73:e6:9d:0b:42:92:8b:cc:b7:a4:2d:6a:29:71:76:
e0:01:74:b2:ef:a7:a9:df:5a:dd:09:91:87:c1:ba:
37:00:f6:9b:a3:0f:1d:59:fb:dd:98:16:44:8b:09:
e1:00:f1:90:ed:b1:f0:85:54:94:fa:67:0a:58:3f:
a6:ce:64:04:39:e4:d6:44:ae:48:5c:f8:c1:d4:cc:
cf:d6:8d:f1:10:20:9d:89:96:16:cf:5b:87:8e:d9:
b0:00:31:dd:ad:b5:58:7d:cd:3a:d9:e9:d1:5d:2b:
bb:c0:26:d8:cd:c3:af:51:88:da:c4:e4:c6:5d:48:
ea:10:03:3b:6a:e7:f8:0f:33:97:6f:5e:87:85:19:
4d:06:8f:4b:2b:6e:b8:75:d7:e4:d1:2a:7f:c5:fe:
d4:28:3f:cb:3d:51:b6:45:7f:36:dc:f3:42:ae:78:
71:3b:22:a0:50:e8:42:5c:8c:9d:c3:4c:1b:45:56:
34:9e:ae:42:de:84:6c:b1:98:6b:bb:37:55:22:7a:
32:87:81:33:d8:ad:77:fe:b8:21:78:bb:92:e5:dc:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:6E:9F:C0:E2:0C:7F:E4:1D:8C:96:B0:69:5E:F9:88:1B:E5:22
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OUhun8DiDH_kHYyWsGle-Ygb5SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.152.0/21
92.253.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:bc:9d:f8:c2:20:5b:e0:58:98:84:64:23:ad:34:02:b1:58:
9e:ff:c4:6a:f7:51:18:85:cc:d6:92:be:73:fe:c6:fb:cd:88:
ad:b6:17:11:bc:37:70:b1:05:45:44:f1:df:9a:bb:67:43:37:
d3:ab:74:fe:2a:d5:a5:60:db:3e:54:2e:66:34:75:e9:75:82:
d6:de:63:ac:75:31:2e:e8:fe:18:c3:2d:64:88:fa:03:01:3b:
64:0b:7d:4f:c6:bd:16:4a:7e:00:bc:55:7f:df:da:c7:ea:6f:
5a:fe:fa:c4:bc:87:7b:64:91:a2:9c:0c:e7:1f:99:ea:60:49:
54:e8:4f:d3:95:8f:9c:51:92:45:4d:5f:19:e2:a0:ec:c0:52:
3b:68:b3:b3:0f:4b:a7:be:75:6a:dd:85:15:84:98:65:3a:68:
ae:12:d6:b6:cf:95:22:bc:a5:c6:d7:07:f6:e2:6b:b4:87:6c:
11:d5:01:72:d8:1e:37:0d:01:a2:5b:24:48:15:5e:71:6b:b1:
22:69:ef:19:5b:f1:a9:ae:c4:05:c1:48:d4:36:e8:0d:9d:52:
4d:74:3d:58:94:e5:f0:23:15:3e:7e:32:b8:cf:16:03:28:b8:
a1:cb:78:3e:82:3c:a0:0d:6f:24:31:53:fb:63:8d:db:2c:81:
ec:63:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 19:46:47 2024 by rpki-client on console-ams.rpki-client.org