Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/oniG6SiG2jkwV5534Z7nikrgGsE.roa
File: oniG6SiG2jkwV5534Z7nikrgGsE.roa (raw, json)
Hash identifier: mslWkT52Xyr6WTbPrK5tgTRrmRMqVW7WYbgpFj0XNSU=
Subject key identifier: A2:78:86:E9:28:86:DA:39:30:57:9E:77:E1:9E:E7:8A:4A:E0:1A:C1
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB15A3DFB0C103A07CB3D96B24F80
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/oniG6SiG2jkwV5534Z7nikrgGsE.roa
Signing time: Tue 02 Jan 2024 12:35:10 +0000
ROA not before: Tue 02 Jan 2024 12:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16142
IP address blocks: 213.215.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b1:5a:3d:fb:0c:10:3a:07:cb:3d:96:b2:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a27886e92886da3930579e77e19ee78a4ae01ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:60:f8:51:47:65:cd:08:3a:04:fa:23:3b:
95:f8:52:25:fb:4c:90:e5:c4:f1:4e:50:dc:8f:f5:
86:b7:c3:b6:a4:1f:7b:49:68:4b:91:70:fc:50:1b:
81:0d:87:8f:9c:93:a4:0d:31:6d:ed:04:e6:0d:0b:
55:da:78:4c:a7:9a:37:4d:8e:0d:a0:87:15:cd:8d:
b6:64:68:8f:f1:5a:b3:cc:33:c1:ae:c0:92:b1:41:
db:e6:f0:b2:75:0e:8d:74:56:d6:78:0e:24:fb:e0:
3d:4b:68:ee:11:1d:9e:92:84:7f:04:39:f0:02:f3:
c9:53:fd:8d:7e:09:62:86:82:1f:99:81:a1:c0:bc:
d9:d0:53:1a:cf:bb:e8:ba:cf:c3:23:80:66:f1:55:
2b:f8:a7:e9:5b:7e:41:e5:61:bc:56:1e:8f:09:d4:
e4:83:6d:ce:26:8c:d8:bb:d7:b2:0f:bb:27:e7:c8:
9a:0c:74:3d:33:c0:4d:b1:27:3e:f3:95:74:8c:d3:
38:f4:ed:06:65:34:6f:94:55:cd:d3:1c:1c:fe:80:
06:67:1d:e8:a0:96:ba:9a:95:fa:9a:39:52:5f:1f:
df:dd:d4:86:07:b1:4a:37:a3:6f:f7:67:b5:37:ec:
7d:33:8d:f9:f0:2f:cb:3c:14:e6:d4:e9:e4:63:4f:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:78:86:E9:28:86:DA:39:30:57:9E:77:E1:9E:E7:8A:4A:E0:1A:C1
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/oniG6SiG2jkwV5534Z7nikrgGsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.215.65.0/24
Signature Algorithm: sha256WithRSAEncryption
59:78:e4:be:df:c9:97:8b:68:55:d2:04:cc:19:06:85:68:3c:
62:c8:91:5c:19:69:44:b2:13:27:99:a1:45:25:da:68:e3:20:
d4:0f:60:2a:15:ea:99:0e:bc:1d:c8:96:16:c7:c1:a7:27:05:
2f:0c:df:9c:9a:98:60:e9:10:4a:6d:30:ec:bf:c2:9a:b9:dc:
8d:1f:a4:f4:ff:97:14:9d:6d:40:ce:56:9f:5d:c8:27:50:34:
b1:42:03:ce:4b:ec:04:ba:04:f6:f8:8d:be:b1:d2:58:cc:b6:
2f:88:6b:d9:50:a3:f1:e2:8e:c8:02:35:3b:38:5c:07:20:d0:
53:5b:f3:7c:c6:4e:78:92:09:09:08:7d:c2:ad:4a:56:51:fb:
6a:d4:39:b7:b3:be:ec:46:41:b0:a1:b0:39:92:f6:56:b2:d2:
4d:d3:2a:96:cc:db:16:bf:44:68:23:5a:98:3f:d0:8b:72:b8:
7f:75:01:44:ff:a9:32:09:2c:70:50:62:12:b0:c2:a8:1a:65:
c3:bc:a2:e0:a1:71:5c:b4:67:06:02:44:08:5b:44:31:7e:04:
98:f3:45:00:26:02:0a:07:77:95:27:66:23:c9:49:db:65:2b:
ce:32:22:c4:36:49:1d:d8:25:f3:26:54:56:85:6e:6b:fd:9e:
8c:54:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:34:21 2024 by rpki-client on console-fra.rpki-client.org