Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/OWbHDFbMCD6ZeXcNjXkluO7PU3U.roa
File: OWbHDFbMCD6ZeXcNjXkluO7PU3U.roa (raw, json)
Hash identifier: MHDlg2qZ6/oSsC7frksOfcnegX9JnOA9vpWmdA9dMGY=
Subject key identifier: 39:66:C7:0C:56:CC:08:3E:99:79:77:0D:8D:79:25:B8:EE:CF:53:75
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 018CC8DE520FF2F55411ECA9FFB8FE863713
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/OWbHDFbMCD6ZeXcNjXkluO7PU3U.roa
Signing time: Tue 02 Jan 2024 06:31:02 +0000
ROA not before: Tue 02 Jan 2024 06:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199160
IP address blocks: 185.81.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:52:0f:f2:f5:54:11:ec:a9:ff:b8:fe:86:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jan 2 06:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3966c70c56cc083e9979770d8d7925b8eecf5375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:5a:cb:7c:28:c6:ff:01:b3:b2:da:fa:85:
8b:ad:5f:d0:ff:81:fc:76:48:f1:57:15:d7:14:db:
fe:72:6a:1e:af:bc:18:36:ce:94:d2:a6:f2:98:3d:
d2:6f:b5:8e:c5:d8:93:9c:b6:14:cf:9b:5f:02:39:
6f:8d:eb:43:8a:3e:0d:21:c2:a3:13:cd:5a:80:de:
88:30:0e:e2:05:fa:7c:34:76:b1:f0:9d:4e:d7:ad:
40:1e:d3:55:8d:91:e1:62:4d:fa:5f:a2:20:c8:dd:
6d:e9:a2:7b:db:49:f5:4e:6d:dc:42:5f:d1:d2:5d:
da:18:98:27:c5:f0:7c:71:d8:fd:be:96:75:cb:80:
c2:10:b2:b6:b3:0b:2f:d2:28:84:d8:31:76:c4:7e:
4e:09:5a:a1:01:5d:d6:e3:be:22:8d:86:a1:73:8e:
9d:73:7a:10:d9:76:c1:96:86:4b:15:3a:33:c7:e6:
87:99:13:60:fa:af:c2:f2:44:fa:33:92:2e:f0:42:
dd:59:db:ab:59:35:bc:b4:6b:f9:67:0b:c0:8a:6e:
47:5e:fb:c7:26:e5:d0:f1:f2:18:b1:46:fd:59:76:
7b:c4:70:ec:58:01:b4:e2:c3:2e:75:08:e1:57:01:
21:b8:8d:68:b5:ec:7d:09:e2:1f:7f:c2:53:31:87:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:66:C7:0C:56:CC:08:3E:99:79:77:0D:8D:79:25:B8:EE:CF:53:75
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/OWbHDFbMCD6ZeXcNjXkluO7PU3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8e:1b:f4:ca:c8:a8:88:93:fb:54:02:02:1d:19:bf:f6:2d:
40:fc:07:25:6c:5a:11:ad:d8:ac:1b:01:bc:64:98:79:8a:e5:
e7:fb:21:9c:1a:44:0b:17:7f:54:ee:d7:de:ea:6c:5b:af:30:
6c:e9:d9:80:5a:90:63:9a:f0:e4:07:3d:0a:92:6d:89:7e:c9:
4e:af:a5:35:0f:16:70:ad:72:1c:14:a0:48:f5:df:2d:93:95:
48:be:e4:94:f2:36:25:06:e7:86:a7:b8:00:9e:28:60:01:d1:
90:2b:41:b3:b6:3b:82:32:0d:ac:6a:b1:ac:93:64:5a:34:bd:
69:ae:74:cc:83:94:3e:4b:51:c2:be:1d:e0:d6:b4:bf:8e:3b:
f6:2a:7a:f6:e8:ed:7a:e2:95:ad:1d:bd:ae:78:84:e4:bb:65:
c4:ad:62:4b:b1:0f:bd:64:02:8a:d4:63:74:50:c6:56:1f:ba:
79:c1:b4:3e:7b:98:18:6e:9f:b8:08:c4:db:a6:48:43:71:fc:
d4:36:81:93:82:5f:93:d8:c0:1e:9c:87:9c:48:7a:b2:30:6e:
57:53:96:4e:f6:fe:25:5e:a0:7f:b3:bb:cf:27:05:3a:f6:26:
76:c9:ce:9b:e9:9c:df:ec:6f:22:ee:2a:f8:86:ba:0e:9f:67:
17:2d:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:15 2024 by rpki-client on console-fra.rpki-client.org