Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/3oiItQGSOQToq1RcsYOZHQaqx9g.roa
File: 3oiItQGSOQToq1RcsYOZHQaqx9g.roa (raw, json)
Hash identifier: vhHlt8SQaYV2tRBOR3o9UNVV3kcTrRIvVpYqqtU+8eo=
Subject key identifier: DE:88:88:B5:01:92:39:04:E8:AB:54:5C:B1:83:99:1D:06:AA:C7:D8
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 018CC5DC77FAF416A4D16E42D70356BD8445
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/3oiItQGSOQToq1RcsYOZHQaqx9g.roa
Signing time: Mon 01 Jan 2024 16:30:09 +0000
ROA not before: Mon 01 Jan 2024 16:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 159.197.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:77:fa:f4:16:a4:d1:6e:42:d7:03:56:bd:84:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de8888b501923904e8ab545cb183991d06aac7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:bf:ef:42:25:e4:92:bf:33:07:24:a0:09:
6e:b8:94:aa:7a:28:8c:50:37:b8:29:8f:a5:c9:7e:
d7:80:24:49:bd:4d:4e:3e:aa:7c:4e:21:20:06:67:
23:eb:eb:f4:4b:96:91:a4:9f:03:c6:56:f8:0a:a1:
43:c6:4b:2e:4b:5d:b7:c9:19:9d:62:3f:8b:05:3c:
3e:f3:46:34:6f:91:b8:37:0a:77:ab:6a:30:fe:f2:
f1:76:1a:00:76:0b:87:80:b3:ca:de:f5:16:3d:42:
f2:4f:38:4a:29:63:35:5c:d6:eb:a1:cb:2c:5d:2c:
6b:6f:44:a8:c8:4e:a1:f7:be:cf:25:a2:20:85:43:
83:76:02:5e:fb:f2:09:13:7d:a0:15:da:37:7e:fb:
75:af:52:2f:a5:9f:02:e9:cf:d0:b8:ec:87:66:ee:
78:87:96:86:c2:9c:ed:3b:63:0d:68:70:d8:99:1b:
dd:32:53:6e:d2:0c:57:e3:7b:5b:95:6d:5f:fe:b6:
a0:3f:2d:f4:2b:cf:28:54:7f:0e:e9:6a:36:f7:b2:
90:b5:34:4d:36:80:35:8b:29:0c:da:f6:a5:f1:03:
e5:6c:a1:21:5d:7e:f9:c3:94:fb:19:0e:9d:0f:4a:
fb:a1:16:20:50:07:de:27:f3:b5:69:61:05:52:ec:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:88:88:B5:01:92:39:04:E8:AB:54:5C:B1:83:99:1D:06:AA:C7:D8
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/3oiItQGSOQToq1RcsYOZHQaqx9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.197.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:3c:24:d2:73:94:8d:ab:60:19:5f:f3:b1:1e:58:eb:7d:44:
76:df:2c:1a:bd:7e:5c:3d:a3:7c:24:7b:6d:17:b2:b1:2a:5c:
9c:4d:89:64:11:3a:bf:a1:9d:be:a2:df:a3:2c:42:37:53:4a:
fe:e4:4d:6f:6f:9b:3a:a3:0f:10:d6:3a:6f:8c:92:a1:17:e7:
19:0d:21:8f:15:12:92:8f:1a:5e:af:8f:29:07:6b:f5:98:aa:
ae:09:42:0b:22:de:61:f1:cc:fa:47:d2:da:41:87:a3:31:0d:
b1:b0:58:d3:e0:cc:db:27:cf:e8:47:88:7c:73:83:f6:8e:f0:
ac:f1:1c:53:ca:29:33:8d:9d:2a:cb:d6:52:9a:18:99:eb:6a:
ea:dc:70:00:34:e8:4e:87:5b:e7:72:7c:bd:aa:df:e2:be:60:
c6:9b:2f:16:c5:66:a7:f7:59:64:91:ce:a3:7a:8c:64:f4:ea:
bf:95:a2:7a:ee:be:a8:0b:06:90:18:39:26:0a:37:c3:6c:7b:
48:ac:33:06:b3:38:df:cf:ae:2b:65:de:00:2e:a7:cb:f6:f6:
08:c7:b2:3b:b1:4c:0f:10:5a:33:6e:a3:3e:5f:3e:05:4b:6e:
7d:7b:cd:39:df:2f:ec:d5:86:ca:9f:43:2b:4b:db:b0:bb:1c:
0b:a1:ca:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:46:00 2024 by rpki-client on console-ams.rpki-client.org