Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/o1FoZ620soYGUiX12saNA6NYBes.roa
File: o1FoZ620soYGUiX12saNA6NYBes.roa (raw, json)
Hash identifier: AMxzlMJTPumw/V6Q+hs24PZAS33fACjFuw1ViUO0s1Q=
Subject key identifier: A3:51:68:67:AD:B4:B2:86:06:52:25:F5:DA:C6:8D:03:A3:58:05:EB
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 018CC4930C8A7E8B46EDFC0DBBC351E52939
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/o1FoZ620soYGUiX12saNA6NYBes.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 185.161.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0c:8a:7e:8b:46:ed:fc:0d:bb:c3:51:e5:29:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3516867adb4b286065225f5dac68d03a35805eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:59:5f:f4:94:3f:f4:c1:ba:9f:81:8d:3c:
14:5b:94:a8:5e:82:75:91:76:b8:41:6f:c8:e3:29:
59:d2:41:76:9b:66:86:2a:9b:d8:5a:26:60:a3:ab:
f7:09:37:aa:07:a8:bc:13:42:db:0c:bc:42:10:c0:
38:b0:bc:af:a5:33:33:e1:2a:20:a8:d4:f3:4c:a8:
03:22:72:98:b9:c5:39:8a:7f:4c:0e:28:56:ea:7b:
98:fb:a6:08:63:55:fe:7f:e9:42:f5:84:85:b7:48:
07:73:0b:4b:1e:3b:a1:a7:32:89:e6:4e:bf:c1:70:
6d:99:2f:3d:85:c3:52:fd:6a:50:b9:15:9d:06:5d:
1c:98:7d:f0:93:6a:57:eb:eb:c9:1e:bb:cc:f2:3d:
12:1f:02:64:bf:a5:c2:77:53:0c:17:b5:9c:82:dc:
a5:e6:b0:56:76:ff:d5:84:bc:09:92:a1:33:3e:c5:
98:93:36:65:d3:fd:e2:81:a6:ce:3b:d5:6b:0e:e4:
5a:d7:41:ca:43:73:a5:3f:de:f9:61:55:c4:a1:71:
24:de:a8:32:28:44:23:94:5b:2a:01:3c:b9:2f:29:
39:02:b3:52:f1:22:df:b8:f6:db:42:ff:26:7e:d2:
8c:4e:cd:5e:d5:a4:22:0c:d2:bf:e6:d0:23:28:6f:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:51:68:67:AD:B4:B2:86:06:52:25:F5:DA:C6:8D:03:A3:58:05:EB
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/o1FoZ620soYGUiX12saNA6NYBes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.122.0/24
Signature Algorithm: sha256WithRSAEncryption
88:00:6a:c7:28:31:a7:89:67:8a:d9:ce:a7:0b:c2:46:8d:89:
a3:a6:32:78:6c:99:85:e3:65:79:aa:ce:46:b2:59:ff:06:67:
bd:03:87:20:ca:a1:1f:59:92:65:10:d6:40:e8:8e:09:54:a5:
f0:86:9b:15:13:92:a6:59:ba:d9:7a:52:70:cb:8c:0d:24:b3:
c6:ac:0d:34:29:26:06:a8:83:58:03:15:18:63:24:a7:61:8e:
cc:f7:df:38:b1:19:c5:88:f9:a4:27:0b:ed:e5:14:47:7b:16:
2d:1a:e7:07:4c:9e:f6:af:0f:0b:d1:ba:2e:b4:66:53:ce:91:
76:a9:84:61:ae:44:5d:b3:2d:8e:e3:21:3e:5c:00:5f:7d:c2:
19:6b:f9:fc:5e:62:35:11:88:c8:3c:cd:1b:31:fb:23:ef:90:
7b:bc:64:a8:3d:85:94:73:ea:32:81:ec:0b:c8:f3:4b:53:e1:
6d:92:87:3f:de:eb:a4:83:66:f6:48:32:33:c1:1c:bb:28:3a:
19:d6:39:8f:2a:59:53:38:0a:68:48:96:93:ac:69:0f:42:17:
d8:fe:0c:c1:ab:4b:d9:c9:e5:b1:33:9c:b3:d0:14:6b:da:b4:
7b:13:04:e5:05:8a:1b:e0:3f:2d:97:17:ac:de:43:94:83:1b:
d1:7c:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:35:29 2024 by rpki-client on console-fra.rpki-client.org