Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/OB12rBVux-JblkR_ePnNlokp25o.roa
File: OB12rBVux-JblkR_ePnNlokp25o.roa (raw, json)
Hash identifier: MYfwQd4E53Ou6GMP6M4MXTgLs3RttOnnStobywU45wY=
Subject key identifier: 38:1D:76:AC:15:6E:C7:E2:5B:96:44:7F:78:F9:CD:96:89:29:DB:9A
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 018CC8025CCBB68B557F3FED7CD2D9E29BFC
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/OB12rBVux-JblkR_ePnNlokp25o.roa
Signing time: Tue 02 Jan 2024 02:30:47 +0000
ROA not before: Tue 02 Jan 2024 02:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206980
IP address blocks: 185.169.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:5c:cb:b6:8b:55:7f:3f:ed:7c:d2:d9:e2:9b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Jan 2 02:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=381d76ac156ec7e25b96447f78f9cd968929db9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:82:26:84:ca:d3:ae:72:3a:45:5c:45:23:
31:6d:df:fe:7b:5c:23:31:1b:dd:7c:65:1f:88:f8:
43:51:69:49:61:17:03:7e:e0:ae:42:9a:b1:99:b7:
85:f7:da:71:59:f9:0b:c6:ed:13:b7:c6:2d:b7:6d:
c1:10:fe:e4:9e:cb:c1:c3:d5:cd:72:f8:23:9d:4f:
33:ec:1d:34:d5:67:4a:21:38:aa:3a:5c:45:2e:6f:
1d:2e:f0:fd:93:89:16:5a:d7:61:89:c7:07:5f:36:
a2:ae:2a:9a:1a:7e:89:e3:52:0d:f3:ae:df:95:c1:
04:b2:d9:0c:78:96:f8:7f:9b:7a:2e:b4:c5:68:d1:
5c:7d:4f:7c:74:25:29:0a:9b:77:50:b0:49:db:5f:
4a:88:90:60:87:4a:a0:d6:d3:93:3f:85:5a:f6:2d:
9f:a0:f6:e3:d3:a3:e3:c1:e3:83:94:8f:10:a3:67:
26:d2:79:e2:4f:01:fe:12:98:54:24:1c:8f:03:54:
e4:2a:fd:1c:37:c0:a3:17:51:c5:d5:06:0c:30:82:
2e:2e:6e:e7:82:90:3c:d1:1f:26:a1:7d:22:4f:40:
51:b0:61:d2:4b:b4:9f:9f:aa:8c:98:c6:78:96:e9:
6f:3b:3b:8e:41:b0:57:22:51:53:16:82:e9:89:43:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:76:AC:15:6E:C7:E2:5B:96:44:7F:78:F9:CD:96:89:29:DB:9A
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/OB12rBVux-JblkR_ePnNlokp25o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.133.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9d:08:54:fe:82:57:79:7a:2e:21:56:29:28:1c:99:9e:5f:
a5:89:f8:ff:d6:d7:05:fa:30:da:1d:b3:05:8e:c0:5d:c2:c6:
67:f8:96:72:a5:85:ef:65:1c:58:24:2d:c3:5f:12:fe:f8:42:
f4:f6:dc:38:05:44:79:ca:3c:ad:d3:72:b5:08:ec:7e:0e:95:
81:da:c3:6d:b7:34:fe:db:2d:e8:3e:ce:3d:1d:21:b6:07:c7:
3c:bb:d1:67:a3:3a:f5:ae:94:b7:f4:fa:02:95:21:34:e5:e8:
a8:f3:17:c7:6b:53:c8:5f:b1:2f:07:bc:45:5a:ef:74:0c:62:
05:e3:97:26:80:01:ea:74:ed:44:3d:6c:a1:4f:c0:31:4b:1f:
9b:2f:d5:96:ad:51:c9:7d:68:98:2c:3c:07:11:77:02:ab:27:
c7:f3:0e:f5:fd:d7:85:8a:20:57:ed:39:e0:2d:ab:94:22:bd:
d6:07:5b:5a:04:ab:05:1f:54:24:08:3b:68:6d:ab:b4:63:c3:
58:36:08:ed:cd:16:7d:2a:f6:cc:b5:c5:ba:44:a4:f0:92:d9:
f8:61:da:d7:76:c9:24:df:3e:e6:63:df:ba:62:35:2f:1a:62:
75:1b:99:f0:2a:b3:4c:49:fd:ad:2c:dc:42:92:0b:6a:67:ab:
72:81:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:26:29 2024 by rpki-client on console-fra.rpki-client.org