Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/omqNGYu6GECC3x2FYn-ZjIg36AQ.roa
File: omqNGYu6GECC3x2FYn-ZjIg36AQ.roa (raw, json)
Hash identifier: z70DhF8gnlHu/376EzY2g5S/Wb1+WOgA67ezT/Y5DV8=
Subject key identifier: A2:6A:8D:19:8B:BA:18:40:82:DF:1D:85:62:7F:99:8C:88:37:E8:04
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 018CC348A12C5FCC282FA8498AB4EBD82FF7
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/omqNGYu6GECC3x2FYn-ZjIg36AQ.roa
Signing time: Mon 01 Jan 2024 04:29:26 +0000
ROA not before: Mon 01 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41127
IP address blocks: 212.74.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a1:2c:5f:cc:28:2f:a8:49:8a:b4:eb:d8:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Jan 1 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a26a8d198bba184082df1d85627f998c8837e804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:3f:ca:6e:ee:76:29:c6:bf:56:9c:1c:fc:
8e:f9:a9:ff:56:ca:45:74:73:7e:91:7a:ee:a2:28:
cf:ce:85:99:48:15:27:ff:f6:4f:98:07:1e:cf:4f:
e9:16:ff:23:99:03:c3:1f:88:f1:46:54:6e:3e:64:
da:15:17:02:8d:fe:6a:6e:a3:71:bb:83:03:89:40:
55:30:e7:46:a2:67:47:7d:f9:75:22:a1:f4:6c:b7:
c2:ae:27:0c:18:f8:54:4f:e5:8d:19:5e:97:db:dd:
8a:c9:b2:7f:97:95:21:62:ea:67:6d:e5:bb:12:e4:
7d:4d:c5:b6:3e:e8:ef:83:61:51:03:06:1f:b1:25:
50:8f:f3:92:18:ed:0a:86:6c:0f:fc:7e:fb:62:e0:
d3:42:b4:c4:bd:07:db:99:17:0b:b1:90:8a:b3:f3:
0e:a4:73:0e:39:84:8b:95:9a:56:be:05:b1:36:f0:
e3:05:dd:52:8a:69:8a:cc:3a:90:1d:80:fc:e7:a7:
91:1f:59:2d:35:95:a6:90:ba:4e:fa:cc:ee:cb:b6:
f7:1c:fc:d7:6f:11:be:cb:8a:f8:81:cc:15:7b:95:
7e:4f:60:e2:23:39:a1:85:a7:30:d1:00:90:16:de:
bb:3d:eb:d6:2d:5e:1e:22:52:05:9f:05:75:9a:c1:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6A:8D:19:8B:BA:18:40:82:DF:1D:85:62:7F:99:8C:88:37:E8:04
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/omqNGYu6GECC3x2FYn-ZjIg36AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.238.0/23
Signature Algorithm: sha256WithRSAEncryption
44:56:e0:7d:0b:8a:e7:00:3d:b8:aa:7d:bc:e1:93:ee:9b:5a:
10:56:c1:29:4f:b4:d8:05:51:4d:60:b4:93:8e:50:ac:33:32:
86:66:fa:6e:c2:ce:79:dd:17:2e:91:39:08:96:c2:3d:58:52:
87:49:85:bc:19:74:f9:33:c3:4c:0c:b0:e1:3a:35:83:64:52:
7a:f8:7a:69:8a:b4:27:b7:50:7d:73:f2:a0:ae:59:7e:8b:f1:
f1:f7:e0:d1:02:b5:4f:6e:53:e3:af:29:a8:00:bc:82:f9:27:
9f:e9:57:2a:46:a5:2f:80:2f:78:82:09:31:52:30:fe:7e:ba:
c6:61:4d:af:5a:04:62:89:74:a0:47:9b:f3:22:d8:50:be:7c:
56:76:ce:8f:d1:25:e2:c8:15:70:57:99:f5:fb:3b:3d:58:f4:
ed:00:56:f7:7f:5f:57:c6:dd:7c:00:ec:9d:f2:52:ea:bd:5f:
96:45:aa:43:a3:47:cd:5e:12:e8:fe:e7:f4:94:17:c7:b9:5d:
a1:85:32:bf:49:a6:fa:cc:a9:f7:85:a9:6e:16:8a:bb:8a:36:
ab:e2:16:bf:12:ae:93:3f:9b:3c:45:c0:43:d8:b7:ef:09:a2:
2b:a2:7a:f1:b0:7b:b1:4a:29:d0:7a:0d:52:0d:f4:48:df:58:
b6:db:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:05:49 2024 by rpki-client on console-ams.rpki-client.org