Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/OMwUdd8NFWACgY3Z5BMinuibCJs.roa
File: OMwUdd8NFWACgY3Z5BMinuibCJs.roa (raw, json)
Hash identifier: 1JFs3F/ZAfJCU0enUzYcjIt3Pm3WK2WXapsiBemqozw=
Subject key identifier: 38:CC:14:75:DF:0D:15:60:02:81:8D:D9:E4:13:22:9E:E8:9B:08:9B
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01919A40C932C8DB82845EAEBB02F1E3E1AA
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/OMwUdd8NFWACgY3Z5BMinuibCJs.roa
Signing time: Wed 28 Aug 2024 18:30:22 +0000
ROA not before: Wed 28 Aug 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 213.137.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9a:40:c9:32:c8:db:82:84:5e:ae:bb:02:f1:e3:e1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 28 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38cc1475df0d156002818dd9e413229ee89b089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:a8:9b:05:af:e7:63:6a:9b:06:7a:39:20:
31:84:fb:f0:c8:2a:48:60:97:82:92:a9:5d:2d:7b:
10:4f:8f:e3:fc:90:7e:a5:73:c0:b2:a2:35:dc:30:
79:c8:61:ed:54:a2:d1:55:14:f8:b1:e9:bd:8a:2e:
03:f1:59:8b:e3:10:d8:d0:8c:99:08:58:df:34:1f:
7a:69:cc:fe:c5:d7:e4:69:6f:f5:82:c2:08:aa:7e:
78:75:e2:cd:78:59:f9:b6:c4:e9:b6:92:97:b7:8b:
0a:9f:1e:dc:ae:9e:d3:56:1c:87:a1:bc:3b:6f:84:
57:3b:83:73:ef:21:57:09:c8:b0:30:16:a3:75:96:
d4:09:e5:83:19:d2:75:9a:56:a0:c9:ad:e9:ae:b2:
5e:03:59:61:f5:a5:46:db:64:12:51:29:ae:3e:68:
9b:6f:82:73:75:74:18:cf:9b:f9:69:57:81:32:d8:
20:b9:f5:dd:5a:85:24:7c:8b:f5:0e:e5:1b:cc:b2:
60:15:8e:e4:38:8c:cc:72:03:5f:49:4a:2f:44:84:
e6:91:25:75:03:6f:59:a0:a4:9b:94:99:5e:64:18:
f6:13:e3:2c:52:f7:60:df:83:0c:1c:7e:b6:85:f9:
da:39:14:a4:60:9e:a1:d8:93:43:c8:f2:20:4d:b7:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:14:75:DF:0D:15:60:02:81:8D:D9:E4:13:22:9E:E8:9B:08:9B
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/OMwUdd8NFWACgY3Z5BMinuibCJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:81:f7:64:63:9e:c1:ab:c6:96:4e:bc:ce:9b:d5:fb:aa:81:
29:e1:40:bc:f9:e5:a2:5e:fe:bb:8a:30:a5:17:f5:e0:61:22:
18:d7:67:a9:a8:fc:83:ca:4f:7f:d0:0b:ac:08:48:79:88:61:
5d:41:46:0c:d2:44:f4:b0:f9:12:40:c7:2c:91:a0:35:2f:5f:
1c:9b:22:34:81:54:b1:b9:4a:f2:13:f2:ae:c1:2d:11:b5:3c:
3a:cd:f3:8f:61:02:b1:0e:43:20:cb:28:af:58:48:1d:c0:47:
36:0f:28:b6:60:c0:f9:a6:55:c5:33:31:11:45:41:71:8f:d8:
fe:9a:1f:01:43:68:96:d7:d3:76:66:d0:6f:2d:26:c3:ce:ff:
94:f1:74:b7:83:fc:6b:88:35:51:9a:af:4b:bc:f1:b0:4c:f3:
74:7a:9c:70:6c:00:b9:1d:5d:99:d9:14:1f:d7:02:98:b4:c7:
a0:35:1e:6c:94:9f:66:7d:82:43:ef:41:60:84:75:17:af:fb:
06:a8:bf:07:71:a5:ec:bb:82:54:52:a6:59:8b:a0:96:71:03:
03:f7:27:44:40:81:b1:c2:94:86:6a:e5:50:fa:5e:c0:21:2e:
5e:5b:e9:e8:cf:2d:64:24:8f:ac:b9:04:d0:8e:20:1c:36:bf:
4b:92:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:36 2024 by rpki-client on console-fra.rpki-client.org