Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/OPiWzmUz5qpy0tmWxyysE2cEBaE.roa
File: OPiWzmUz5qpy0tmWxyysE2cEBaE.roa (raw, json)
Hash identifier: 5Qd8Jp5RPwlHleKDvoq8F0PZaCb8ysob0KM1f3ucIVk=
Subject key identifier: 38:F8:96:CE:65:33:E6:AA:72:D2:D9:96:C7:2C:AC:13:67:04:05:A1
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 018EED504B8F0AD649F96175632CA086F73F
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/OPiWzmUz5qpy0tmWxyysE2cEBaE.roa
Signing time: Wed 17 Apr 2024 18:27:26 +0000
ROA not before: Wed 17 Apr 2024 18:27:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215730
IP address blocks: 109.120.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ed:50:4b:8f:0a:d6:49:f9:61:75:63:2c:a0:86:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Apr 17 18:27:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38f896ce6533e6aa72d2d996c72cac13670405a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0c:55:5d:04:ea:d2:35:3c:63:78:58:30:47:
30:b3:2e:69:84:02:0f:04:db:ca:47:fe:81:ee:69:
ee:dd:a8:43:08:2e:d9:94:65:5b:7d:f9:9b:94:11:
54:0f:59:a1:32:c0:c2:78:e4:54:cf:8b:77:b7:63:
d9:95:79:4a:98:1e:d1:6e:0f:51:61:03:14:87:b7:
05:71:5f:70:d0:21:f4:eb:d1:b9:4d:9c:5f:10:60:
af:e7:74:97:b2:ad:e7:54:6a:ad:e4:7f:7b:8a:b8:
3f:13:a8:ae:4a:dd:50:97:a2:fd:26:d8:a0:09:28:
5b:00:51:b5:a8:ab:2c:d6:cd:70:5c:42:53:73:ac:
40:5f:e2:a3:3a:a0:07:f3:e8:4c:fc:c9:2b:a9:dd:
a9:f1:8c:7e:d9:a9:50:69:20:cb:11:e5:ee:7b:52:
bd:be:4e:d4:ce:38:b4:fb:f7:bf:40:90:8f:7d:0f:
c2:1c:4a:69:0a:c0:2e:ee:ee:b2:1a:74:52:93:3e:
40:87:46:79:14:d8:72:7e:c3:2c:6b:49:43:5d:29:
14:7a:4c:b6:05:d6:e3:62:fd:c4:af:6f:b5:61:ec:
06:16:c0:c9:ce:ed:91:b0:ad:20:c1:75:10:b9:06:
c4:7b:05:9d:b3:9e:7e:51:ce:40:0a:87:6f:e3:07:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F8:96:CE:65:33:E6:AA:72:D2:D9:96:C7:2C:AC:13:67:04:05:A1
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/OPiWzmUz5qpy0tmWxyysE2cEBaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.137.0/24
Signature Algorithm: sha256WithRSAEncryption
01:27:de:56:52:df:6c:69:30:d0:60:a0:f5:ce:6f:51:64:c7:
ce:c3:ba:ee:18:e2:a7:97:00:3c:7f:5d:b9:99:60:a7:17:49:
f7:81:18:fe:5f:1e:4a:67:7d:31:8f:e7:b4:82:a5:33:06:d9:
fc:f7:45:01:59:fe:db:12:65:22:72:df:99:5f:a7:8d:01:61:
e5:00:d1:d2:b6:91:f9:3f:ef:d0:b9:1f:7f:2c:c6:a6:8a:07:
4d:ae:b6:ba:58:ce:de:12:57:28:09:53:01:fa:7c:47:0a:0e:
c3:ec:71:bd:a7:85:3b:ea:f6:aa:f4:0e:52:d6:89:77:8a:a2:
12:0e:4a:a5:1f:86:0e:7b:a9:fc:bb:25:86:46:d8:e3:a1:61:
fa:7d:4b:85:55:34:8e:ad:02:62:c1:39:e6:b2:02:b7:71:a9:
9a:c6:96:f4:65:83:b9:19:98:59:dd:8b:d2:f0:f6:d7:83:cd:
51:b0:96:98:b9:0c:2d:e8:d4:78:30:f4:d3:b2:82:29:fe:8b:
e6:bf:bf:01:ed:ff:90:a1:65:0d:37:59:ff:2d:c4:bb:24:40:
6f:de:32:6d:5f:86:54:1e:2b:54:74:e1:92:15:b8:19:eb:eb:
d6:12:21:4b:d3:76:ad:4d:9e:77:9f:19:51:b8:c1:63:df:58:
0c:99:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:48:19 2024 by rpki-client on console-fra.rpki-client.org