Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oSJM09QHV0GzXuoxOjk4Zqx8TSI.roa
File: oSJM09QHV0GzXuoxOjk4Zqx8TSI.roa (raw, json)
Hash identifier: VqjsiXELrHCDhTUA8+AffuqQnc/BGEx0RKLpA3KMzUQ=
Subject key identifier: A1:22:4C:D3:D4:07:57:41:B3:5E:EA:31:3A:39:38:66:AC:7C:4D:22
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF3FC94C794F637130AEC2E50E96B
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oSJM09QHV0GzXuoxOjk4Zqx8TSI.roa
Signing time: Tue 02 Jan 2024 04:30:29 +0000
ROA not before: Tue 02 Jan 2024 04:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197654
IP address blocks: 195.33.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f3:fc:94:c7:94:f6:37:13:0a:ec:2e:50:e9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1224cd3d4075741b35eea313a393866ac7c4d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:d4:39:73:e1:f3:f4:2c:ce:a3:4b:01:07:
1e:c5:e4:8f:07:ee:f4:21:8a:14:33:de:a3:5c:b3:
87:72:9a:78:78:09:7b:9b:01:40:7b:35:51:12:6a:
6a:78:1f:9e:b0:9f:4b:0e:3c:3f:13:cf:e3:1c:cd:
69:e7:71:c5:af:06:03:2b:95:2c:3e:ef:b3:35:43:
b7:37:58:aa:10:08:2d:4c:d0:b6:b2:60:63:e6:5f:
bb:99:0c:03:0b:f2:7c:04:65:9d:45:dc:18:9b:b5:
bc:1d:ba:a0:6c:74:c1:e7:19:e3:a9:89:50:af:8c:
58:4c:f5:28:a0:4f:f6:40:60:f2:45:77:f3:14:c9:
45:c3:a5:fc:ee:8f:e7:dc:0f:c4:2f:71:e8:db:c3:
6d:2f:49:53:fa:b2:22:2b:47:5a:55:bd:5f:0e:0f:
ff:28:94:37:85:ef:03:40:34:99:d9:f5:1e:d7:fc:
ef:67:fd:66:d3:b5:10:38:a6:61:4b:c4:c8:c2:24:
49:d2:25:70:97:1f:ee:47:f6:60:18:35:28:36:c8:
c1:87:ae:52:f2:85:f2:1a:fc:3a:c0:d9:6c:1c:fe:
0c:a7:76:78:73:15:da:22:f4:0a:1a:35:97:5b:4c:
fb:44:0e:55:22:a6:94:41:e1:4f:fe:2f:06:98:25:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:22:4C:D3:D4:07:57:41:B3:5E:EA:31:3A:39:38:66:AC:7C:4D:22
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oSJM09QHV0GzXuoxOjk4Zqx8TSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.33.198.0/24
Signature Algorithm: sha256WithRSAEncryption
25:36:88:2a:c1:58:fb:81:bc:80:71:cf:38:2f:52:ea:2a:c1:
40:37:ff:7d:4c:6c:44:59:27:7c:39:2a:92:5f:5f:89:d2:bb:
53:00:18:2d:a0:2f:b5:33:a7:88:cc:dd:b5:b2:9e:18:a3:f5:
8a:7d:d5:ca:2f:90:e6:f4:64:74:b5:a9:b5:df:25:d1:94:06:
8c:e4:93:d3:1c:9c:5d:62:a5:58:68:a2:3a:cd:cb:fe:78:f0:
cf:66:3e:4a:6b:9a:0d:18:ef:ee:93:44:47:da:65:bd:08:48:
c6:85:94:3a:5d:ce:f5:d3:88:c9:95:ed:9d:09:b4:bd:d3:6f:
4e:83:bb:f9:25:bc:5a:cc:6b:fc:16:b4:b3:2e:ba:54:b9:fc:
c6:30:28:56:0e:8d:da:ff:29:f7:3b:c6:ea:69:96:36:c9:25:
20:4d:8f:94:bf:8a:53:da:a3:d5:66:61:f3:30:93:1d:e3:22:
97:66:c3:ec:d2:16:46:62:97:27:86:12:b2:e4:94:b6:32:4c:
94:97:e6:f6:f4:c3:79:d4:ca:d6:5b:3b:aa:01:8d:b4:d5:b3:
d5:a9:26:b7:8c:e8:21:d4:bb:50:76:bb:c9:18:aa:e0:b6:0d:
c9:9e:bc:ea:27:dc:83:8d:4c:dd:13:5f:13:61:31:12:bb:fe:
f5:46:a3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:00:03 2024 by rpki-client on console-ams.rpki-client.org