Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/OiG4mh06hGEv2F6jGGDmrwmk_yo.roa
File: OiG4mh06hGEv2F6jGGDmrwmk_yo.roa (raw, json)
Hash identifier: 6HSXgu26oHvQIsZ9RvByV4VLOp5QqErfKMTIn6k5Uyc=
Subject key identifier: 3A:21:B8:9A:1D:3A:84:61:2F:D8:5E:A3:18:60:E6:AF:09:A4:FF:2A
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 018D8D8EE61B93EA9971C269BEA8D9FFDAB3
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/OiG4mh06hGEv2F6jGGDmrwmk_yo.roa
Signing time: Fri 09 Feb 2024 11:09:28 +0000
ROA not before: Fri 09 Feb 2024 11:09:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 213.156.160.0/24 maxlen: 24
213.156.161.0/24 maxlen: 24
213.156.162.0/24 maxlen: 24
213.156.163.0/24 maxlen: 24
213.156.164.0/24 maxlen: 24
213.156.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:8e:e6:1b:93:ea:99:71:c2:69:be:a8:d9:ff:da:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Feb 9 11:09:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a21b89a1d3a84612fd85ea31860e6af09a4ff2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:47:e8:63:64:93:06:ff:a8:5f:cf:43:4a:
ab:56:9b:9e:24:5b:43:c1:b7:c0:06:79:19:fc:0c:
c3:06:f1:d1:ab:0c:fc:3b:72:fd:c8:77:d4:37:50:
a6:d4:5c:b5:81:c0:50:16:88:2a:a0:e2:6d:a7:6d:
59:f6:bd:20:41:b5:76:c2:7e:87:c5:d7:c9:49:c1:
2d:74:b3:b3:1a:21:96:5a:9b:e6:b5:2b:2e:33:de:
24:22:1b:00:ee:cf:bc:06:95:2c:34:59:b7:ae:97:
a9:ed:b0:3d:19:5e:2a:aa:e7:58:0d:2d:e8:43:33:
3a:7f:a0:5f:c9:8d:ed:27:64:8c:39:06:eb:9e:02:
29:57:c3:9f:0d:91:fc:5f:a2:91:ed:56:c1:7a:6d:
75:fc:a3:b2:f0:1e:a2:a1:57:70:5a:fb:fd:99:26:
d9:b5:b7:f3:5a:5d:7e:95:0b:cd:b0:03:e4:7d:1a:
0d:61:36:c1:a2:5d:8d:31:4a:6c:ac:c2:30:d1:b8:
71:3a:1a:0d:41:42:ea:33:ce:92:de:69:8f:0f:fc:
f0:17:cb:2a:ba:4a:c4:97:f1:1d:9b:39:84:19:78:
78:13:ba:30:61:6d:27:c8:73:e5:45:f3:e0:7e:5c:
2d:7f:6b:6f:85:d8:de:be:34:8e:ce:f0:f5:37:df:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:B8:9A:1D:3A:84:61:2F:D8:5E:A3:18:60:E6:AF:09:A4:FF:2A
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/OiG4mh06hGEv2F6jGGDmrwmk_yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.160.0-213.156.165.255
Signature Algorithm: sha256WithRSAEncryption
11:a6:13:70:aa:76:f7:7b:24:ea:8d:c5:ab:d2:07:89:c3:91:
43:20:02:bd:23:37:0c:01:0b:43:42:36:07:47:dd:51:0d:27:
eb:db:7c:25:3d:07:fb:45:eb:49:4d:d0:ef:ea:ef:9a:44:41:
46:1f:8b:50:b1:6f:e7:bb:da:82:ad:e7:ba:30:75:9f:63:fb:
77:0e:b7:7a:39:91:2b:3f:d0:6f:bb:96:76:bd:25:21:a7:ee:
ea:3c:53:6e:b8:2c:c9:25:79:43:d1:6c:87:a6:17:df:3b:b2:
60:82:aa:00:7d:51:ed:0a:a9:9d:b6:83:74:14:2a:e5:08:7a:
22:68:52:df:4f:4a:56:ab:6e:63:ca:1f:a5:0b:41:9a:36:46:
e3:1a:b8:7b:65:5b:72:60:3d:95:00:4e:eb:de:07:9b:15:aa:
89:de:5f:de:b7:02:db:65:f9:1c:fb:c6:f7:fa:50:38:cb:92:
a7:33:1c:b9:f8:53:b8:b2:eb:44:da:8e:2b:63:94:79:d4:d8:
17:fe:cd:f9:9b:25:46:3b:e2:f3:e6:e0:49:ff:3d:57:9c:5f:
8f:46:f1:58:c6:50:3b:bf:03:d9:19:ed:24:32:b6:10:c0:9c:
21:2c:fb:5e:2b:b7:37:f6:3f:8c:a2:a6:04:89:86:29:58:bc:
3b:d8:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:46:22 2024 by rpki-client on console-ams.rpki-client.org