Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/2Oo5bGkKXQAOR0rmQ1h3uu0d1g4.roa
File: 2Oo5bGkKXQAOR0rmQ1h3uu0d1g4.roa (raw, json)
Hash identifier: ZMUWq5R9Ps64+95LvG6IuYf/iS86guwaefrrEtqmN0M=
Subject key identifier: D8:EA:39:6C:69:0A:5D:00:0E:47:4A:E6:43:58:77:BA:ED:1D:D6:0E
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 018CC5DC616E0D3865A9A0683910B63A41F7
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/2Oo5bGkKXQAOR0rmQ1h3uu0d1g4.roa
Signing time: Mon 01 Jan 2024 16:30:03 +0000
ROA not before: Mon 01 Jan 2024 16:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60722
IP address blocks: 92.255.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:61:6e:0d:38:65:a9:a0:68:39:10:b6:3a:41:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8ea396c690a5d000e474ae6435877baed1dd60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:2a:44:a4:64:1d:9f:bd:9f:d8:0c:5d:23:
83:08:2b:9b:64:9b:f1:c0:59:d5:48:1b:8b:1c:e4:
6d:0b:f0:c8:88:13:92:45:81:bb:f9:4d:85:95:ab:
df:94:ba:03:d1:6d:15:3e:ff:9c:dd:51:db:93:68:
8e:52:49:fc:1c:51:d5:96:fc:73:fe:78:a8:4e:45:
b3:78:ea:90:07:1a:77:a9:2d:2d:5a:de:cd:b0:ad:
0d:84:f6:dd:95:9c:5f:4e:96:8c:72:df:69:29:d1:
af:43:e6:cf:21:d5:04:cc:bb:3c:8f:08:c8:7c:60:
89:ac:e0:9c:52:23:bf:a0:d3:82:31:5f:27:f1:05:
bc:b7:43:86:e9:cd:3c:1b:d4:5a:83:a5:ec:cf:5b:
8a:a5:aa:7e:b8:26:0c:c0:a7:54:bc:a9:ff:5a:c1:
1d:13:ed:66:4e:03:25:d9:62:5e:6a:d0:2e:17:9e:
06:6e:0b:fe:4e:f5:8f:a1:59:bb:bc:42:b5:f6:3f:
4c:c1:73:c9:8f:9a:38:cd:87:6c:b3:5e:ea:fc:65:
56:be:0b:8d:f7:f6:6a:41:b3:16:d7:be:d2:df:ab:
c5:a4:4c:95:92:65:4d:3a:32:a4:d8:53:e6:9e:63:
d2:0b:d8:a3:6c:44:6d:f4:ae:34:25:4a:2d:32:82:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EA:39:6C:69:0A:5D:00:0E:47:4A:E6:43:58:77:BA:ED:1D:D6:0E
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/2Oo5bGkKXQAOR0rmQ1h3uu0d1g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.65.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c4:4e:c7:ce:17:c0:cf:66:7a:c6:72:99:0f:12:7f:e2:47:
75:fe:d4:72:b5:9c:88:41:df:7b:d3:30:87:69:2a:b8:fb:e0:
6e:8c:79:a7:26:75:c4:96:56:9c:bb:05:e0:58:6a:23:5c:9f:
e3:2b:e0:78:8b:78:74:2e:a5:3c:98:a3:af:d5:c9:19:fa:c8:
8f:e9:a7:03:96:e1:f6:66:7f:db:21:f5:9c:8b:a3:ac:a4:a7:
6f:6b:a7:f3:82:b6:6b:76:88:32:58:ea:fe:c1:c7:62:36:93:
c4:d4:4d:a5:9c:46:b1:77:26:00:a9:55:c8:67:9d:2d:56:d9:
70:c8:d0:70:8a:6e:38:1d:72:af:1d:45:eb:2e:b7:32:07:05:
3b:70:37:21:07:80:94:ea:46:1d:8c:9e:76:98:4c:1a:33:92:
bc:8b:4e:cb:9c:8b:35:f0:80:09:4a:34:c6:63:4a:20:72:bb:
43:61:42:ca:df:df:d8:f9:47:90:01:04:7a:47:a4:06:8f:fc:
94:2f:f1:4e:6a:d4:25:55:cb:f9:88:7b:c9:b9:53:e8:9e:3b:
72:57:8a:4c:aa:4e:1c:49:ae:d4:eb:c2:6f:ad:c8:55:4a:aa:
46:ad:4b:05:f0:19:25:ca:1c:75:16:2e:ec:a9:d3:46:52:b0:
28:a6:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 09:03:53 2024 by rpki-client on console-ams.rpki-client.org