Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/oyhi4gvydhfiL1HgiLWQXbXAJVI.roa
File: oyhi4gvydhfiL1HgiLWQXbXAJVI.roa (raw, json)
Hash identifier: mtGK0JVJooJBuGTVDhyfH4TYRLaYoMnllFce+4qpbzU=
Subject key identifier: A3:28:62:E2:0B:F2:76:17:E2:2F:51:E0:88:B5:90:5D:B5:C0:25:52
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 018CC2DACD7DB14135324C7C6D6265586374
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/oyhi4gvydhfiL1HgiLWQXbXAJVI.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206028
IP address blocks: 185.108.76.0/22 maxlen: 22
2a0d:2940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cd:7d:b1:41:35:32:4c:7c:6d:62:65:58:63:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a32862e20bf27617e22f51e088b5905db5c02552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:52:b9:b0:5a:4e:dc:77:26:fc:11:1d:5b:
9a:79:57:cf:5e:aa:8b:2e:f5:0e:4e:89:e3:5b:ea:
c2:e7:29:62:0d:7e:4d:ab:9b:58:32:22:62:b7:cf:
5f:dc:e4:44:e2:e6:c7:56:54:fc:ef:29:59:d4:3c:
4a:1c:20:04:ad:98:4c:fe:23:2a:d9:e3:9b:c7:aa:
a5:0f:5a:b6:66:8c:d9:31:fb:6a:cd:20:82:88:b0:
8b:63:54:db:d1:97:a4:64:75:da:81:b4:81:ec:50:
c9:be:47:d2:81:f2:59:39:ff:d6:a3:73:65:b5:76:
76:ff:45:07:c0:3b:1d:4e:6f:7b:21:4e:35:19:83:
b9:19:e7:8e:15:b4:c2:9e:a6:27:c0:22:b8:07:8c:
83:70:c4:cd:54:8f:00:bd:f2:a6:c4:8f:dd:4c:28:
15:7b:e3:30:fc:49:b8:f7:af:1b:87:f6:c3:15:b5:
2a:e1:b2:ca:8b:9a:ee:60:ab:f8:67:79:65:bc:e3:
b5:91:5d:f5:64:63:21:93:23:72:61:41:b1:45:33:
2e:e9:50:60:f0:13:eb:84:d2:24:c8:fc:98:4b:8b:
8c:01:b5:89:f3:d7:ff:48:ee:4f:08:24:79:06:08:
3a:b9:e1:5b:54:48:81:6f:91:e7:fb:36:26:c5:df:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:28:62:E2:0B:F2:76:17:E2:2F:51:E0:88:B5:90:5D:B5:C0:25:52
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/oyhi4gvydhfiL1HgiLWQXbXAJVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.76.0/22
IPv6:
2a0d:2940::/29
Signature Algorithm: sha256WithRSAEncryption
23:fc:b8:19:ab:6b:c8:f0:40:26:26:64:a9:64:3f:db:0c:cb:
84:9d:ce:44:7d:7a:85:15:9f:63:b0:30:7c:64:ed:a9:d5:92:
b8:b8:91:e8:e8:dd:fb:d9:70:8a:af:8d:7c:cd:04:15:2e:24:
47:03:ab:3c:b2:22:68:61:43:03:57:f6:b2:0e:c6:fc:76:11:
5b:22:e6:b5:4e:a5:51:e0:05:15:07:f3:d7:05:ae:72:55:66:
a0:ad:cb:8e:16:c8:7a:8e:88:00:d7:c4:82:11:eb:11:09:36:
33:3f:33:1b:87:e3:43:67:49:cb:0d:fa:83:c6:a3:54:78:99:
84:88:2b:93:19:ae:8e:33:6b:9e:6a:e1:36:1a:4c:ea:7d:36:
7e:82:5a:c3:93:33:17:d1:2b:fb:c7:35:2e:3d:fe:fe:e1:c4:
fc:87:f7:9e:90:92:0b:90:72:06:63:4b:99:48:b2:74:28:ed:
41:a4:6a:c5:4a:98:f5:54:25:25:5f:c8:7d:88:ee:e6:8f:cf:
55:b4:ed:22:d4:49:8e:c0:53:b0:b3:ad:20:aa:56:9c:2d:30:
11:56:f1:09:ee:28:d2:47:0d:5a:8f:66:eb:61:96:28:a3:af:
b6:a2:54:22:24:ed:d5:db:ce:70:60:20:91:5d:2c:75:42:74:
6d:25:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:31:12 2024 by rpki-client on console-ams.rpki-client.org