Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oePKa1nQMGf7ro2WDxPiEuk4RC8.roa
File: oePKa1nQMGf7ro2WDxPiEuk4RC8.roa (raw, json)
Hash identifier: h3tQncIGs0XnpUp8TjBje5a/WlaSF6RKO4j/x3Mi/F8=
Subject key identifier: A1:E3:CA:6B:59:D0:30:67:FB:AE:8D:96:0F:13:E2:12:E9:38:44:2F
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FEDBDED10B413B8211A9485981856
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oePKa1nQMGf7ro2WDxPiEuk4RC8.roa
Signing time: Tue 02 Jan 2024 04:30:27 +0000
ROA not before: Tue 02 Jan 2024 04:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42193
IP address blocks: 213.14.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ed:bd:ed:10:b4:13:b8:21:1a:94:85:98:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1e3ca6b59d03067fbae8d960f13e212e938442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5a:b3:fe:77:bd:d7:26:b9:ad:42:47:ed:39:
af:2e:57:da:ee:50:17:3c:42:5c:d1:20:cd:64:f8:
88:e1:85:a7:b8:c7:9a:d3:0b:36:be:e4:36:9d:6b:
3e:b0:d8:4c:8e:0f:58:0c:f7:2e:78:5f:bf:99:2d:
95:1b:3c:41:f6:11:ca:94:a6:a3:ac:c4:25:31:df:
37:dd:ff:da:e5:78:6d:eb:51:85:b5:3c:90:80:bd:
22:ab:49:ad:bc:49:9a:17:43:94:e5:fc:bb:ba:28:
20:48:2c:0e:40:b3:ac:ea:98:a3:cf:1f:a0:82:57:
42:bb:bf:bf:d5:65:ad:0f:d4:74:63:41:5b:86:7c:
16:78:9d:97:11:3a:25:aa:6a:41:4d:28:19:02:6c:
bc:cd:87:31:62:dc:ea:e6:26:2f:af:d0:f1:7f:f6:
d3:26:3c:2e:ad:8d:09:2e:3f:64:9b:d3:71:e5:35:
31:ff:aa:6f:17:3f:c5:73:69:48:02:92:65:41:a3:
a6:87:5a:da:d2:e4:b4:25:70:74:5c:42:f1:ae:de:
ba:87:43:8d:9b:3f:e8:d1:e2:cf:f1:ff:67:89:6e:
1b:51:81:ca:25:1c:3b:a2:8e:18:0e:53:33:c7:68:
9d:62:43:36:d4:95:7b:c5:3d:e9:50:b8:7a:46:68:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E3:CA:6B:59:D0:30:67:FB:AE:8D:96:0F:13:E2:12:E9:38:44:2F
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/oePKa1nQMGf7ro2WDxPiEuk4RC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4d:8a:6e:8a:a0:c8:79:27:f9:c0:b1:05:e9:75:97:83:12:
22:a1:b8:da:de:93:67:9d:4b:1e:1f:fe:81:eb:46:81:44:4a:
17:8e:c9:e3:71:c2:e9:47:ab:ea:86:d0:8b:ed:dc:5d:44:6c:
68:95:59:1d:4c:55:b2:15:82:d1:a9:92:55:30:4f:2c:e4:68:
fe:f6:0d:2b:ca:a3:bd:c4:ee:7b:0f:5a:20:74:86:90:c8:2e:
43:bf:73:d1:82:93:97:9a:29:db:64:72:8b:24:39:f7:d6:06:
b6:60:a1:a8:4c:4a:c6:22:e9:ff:35:44:ba:c9:d6:b4:2d:64:
7b:ff:5c:75:3f:9d:0c:d5:c5:1f:af:ad:d0:aa:64:e8:ad:f4:
07:30:fe:bd:54:96:55:c4:76:73:17:a3:95:ec:6c:f1:d5:2a:
0e:2f:8c:62:71:6b:ea:9a:ac:81:38:04:ff:bb:e0:ed:1b:0e:
a1:8f:b1:c3:7d:58:d5:b2:9a:e9:4b:02:c3:a0:0e:7a:2d:f2:
a1:7f:b3:e1:f5:dc:55:78:8e:0c:ed:9e:6a:eb:25:e5:6f:7c:
01:63:a4:f3:ce:12:f9:7b:fc:85:ea:ae:8b:14:65:2f:37:a6:
91:73:c1:5a:71:c4:f0:c7:c3:45:81:dc:13:5a:8c:f7:ff:61:
98:a9:a9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 22:32:01 2024 by rpki-client on console-fra.rpki-client.org