Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/oDEO_vGh4J7aFZNuSrGRBb3xepw.roa
File: oDEO_vGh4J7aFZNuSrGRBb3xepw.roa (raw, json)
Hash identifier: M37jG1O4f95vwL1KUsr/rpAaO5NAle5qn+yRKhby93Y=
Subject key identifier: A0:31:0E:FE:F1:A1:E0:9E:DA:15:93:6E:4A:B1:91:05:BD:F1:7A:9C
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018CC94CA7E941E50A14AF0548745845C44A
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/oDEO_vGh4J7aFZNuSrGRBb3xepw.roa
Signing time: Tue 02 Jan 2024 08:31:33 +0000
ROA not before: Tue 02 Jan 2024 08:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400529
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a7:e9:41:e5:0a:14:af:05:48:74:58:45:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jan 2 08:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0310efef1a1e09eda15936e4ab19105bdf17a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ca:6f:c1:64:28:87:ba:a3:f1:25:0e:d3:95:
e7:55:79:41:16:2a:36:fd:67:48:bd:26:f7:da:a6:
63:27:e5:9b:64:98:d0:fa:a7:1c:c9:bb:96:c1:29:
9a:39:b5:58:67:f1:26:2d:44:ad:a9:a6:4f:e5:79:
a0:32:83:d6:d2:c0:1d:0b:20:68:33:15:18:48:41:
3b:c4:dc:7a:93:3e:31:75:98:c3:b8:f6:2d:38:a9:
8b:6d:09:2c:4c:e5:c2:ff:00:c4:39:1d:31:69:f4:
83:24:77:77:16:20:a3:3f:ba:b3:cb:2b:6c:d8:a8:
f5:aa:d7:8d:27:61:63:f7:aa:d4:fa:dc:07:3e:2b:
e0:26:dc:41:b9:66:af:b1:bb:87:b1:ad:de:2d:1f:
75:f4:cd:e8:2f:07:95:8e:ef:70:0d:eb:61:4c:9d:
04:85:37:77:33:79:95:8e:df:8d:b8:1c:db:af:0f:
62:d6:d5:4f:47:9b:d5:50:6e:3e:0e:1c:e8:c6:93:
c7:55:b8:ac:58:6d:1e:ae:40:05:7c:cc:1e:7b:94:
05:43:6d:93:6a:88:ca:22:a1:c4:4e:8a:db:80:44:
1b:49:b1:ad:ee:02:a8:2c:56:b7:1c:18:84:9e:bf:
ac:76:fe:57:e2:86:da:5b:5a:82:cc:50:9a:ce:92:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:0E:FE:F1:A1:E0:9E:DA:15:93:6E:4A:B1:91:05:BD:F1:7A:9C
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/oDEO_vGh4J7aFZNuSrGRBb3xepw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7e:11:77:8a:28:71:2e:09:06:f0:7e:4e:2f:cb:87:bd:f8:
20:df:bd:80:d0:2f:cc:2e:2e:89:c6:1e:a7:0c:67:7e:7f:4d:
68:d7:05:d3:aa:a7:14:68:5c:a8:16:70:26:82:4b:ad:a5:dc:
46:ac:97:aa:6d:d0:1e:f7:13:62:a1:77:7b:9e:46:7a:5f:d2:
04:96:1e:a6:1a:0c:21:23:5a:95:16:5f:2e:66:71:e2:aa:c3:
37:24:13:de:05:c1:77:f4:d6:a1:4c:e1:a8:67:c5:55:31:18:
9b:1e:86:e6:30:dc:04:5a:e9:c2:95:e9:a3:25:fd:91:ea:5c:
8c:ee:fd:c9:b4:4e:85:f8:b7:43:f9:22:87:68:4c:32:dc:b1:
44:78:12:6d:d0:64:a2:39:ee:48:65:eb:53:65:fb:93:4a:78:
97:4d:fd:33:58:96:0a:f6:7c:8b:ca:1d:c4:a5:69:93:61:db:
dd:2c:be:42:94:65:16:93:ec:b0:6e:2b:65:31:07:c2:be:50:
b5:d8:19:9b:87:fe:d7:47:e0:2a:0e:71:8d:e5:4e:ae:43:ed:
58:5c:6f:bb:47:80:f5:6a:81:fd:e0:ee:66:e7:e0:ea:47:2a:
b7:d3:b8:7c:1f:c3:49:c2:14:5c:2a:70:ed:a1:84:9b:b0:3e:
8f:5a:20:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:14:10 2024 by rpki-client on console-ams.rpki-client.org