Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/oLfOosc_Iv6jYWQIuXpk48MV2xM.roa
File: oLfOosc_Iv6jYWQIuXpk48MV2xM.roa (raw, json)
Hash identifier: 2GzI2vaH1PEsWJGLVZWLiedk/1usMwZwzCplor480SA=
Subject key identifier: A0:B7:CE:A2:C7:3F:22:FE:A3:61:64:08:B9:7A:64:E3:C3:15:DB:13
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 018CC79524211F946B9E2516891D9F6796A9
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/oLfOosc_Iv6jYWQIuXpk48MV2xM.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31129
IP address blocks: 212.106.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:24:21:1f:94:6b:9e:25:16:89:1d:9f:67:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0b7cea2c73f22fea3616408b97a64e3c315db13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:48:0e:96:49:e3:6a:e9:28:74:54:32:eb:
21:62:2c:7b:c7:cb:61:85:16:3b:d6:06:2a:cf:16:
7c:38:fe:13:f1:be:a5:50:fe:39:d6:b0:5a:ae:5b:
3c:f1:8c:a5:92:75:0c:f4:5a:44:b9:04:4f:e6:08:
b9:ef:ec:c4:9b:2b:4f:c0:52:ab:eb:ab:dc:81:4f:
70:c2:5f:c4:f6:8a:47:db:2c:17:10:f2:16:55:06:
13:e4:6b:0a:8b:86:0e:38:12:8c:45:08:f4:db:cb:
af:9c:b6:f2:1f:35:a0:c6:72:d1:04:87:b5:9d:d7:
b4:53:e9:0c:68:07:f1:9e:95:ee:9f:e0:52:3e:dd:
7c:63:80:61:27:96:75:74:db:78:fe:19:7e:da:31:
d6:e5:1f:04:31:7e:2b:d0:f8:80:22:e4:85:3b:64:
2c:da:d9:1e:3c:b6:2b:9e:57:06:51:57:65:6d:bf:
43:7b:47:d8:57:8d:78:80:e3:07:4c:c3:68:93:52:
81:e1:40:63:13:15:3f:36:be:a5:f8:0c:4e:a5:54:
df:e7:32:c7:72:ee:16:a8:6b:87:69:c0:bd:45:38:
c9:7b:ff:d5:5f:2b:a4:49:31:a2:90:6d:1c:50:18:
af:d5:f2:9a:f5:27:00:de:1d:11:63:61:45:b2:e2:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B7:CE:A2:C7:3F:22:FE:A3:61:64:08:B9:7A:64:E3:C3:15:DB:13
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/oLfOosc_Iv6jYWQIuXpk48MV2xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.106.143.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:67:44:39:c5:1b:32:38:ee:79:16:c2:5a:d8:c9:d1:f2:e1:
7b:8a:8a:f8:37:ba:67:cf:49:9a:34:ce:cd:a1:12:9e:41:e8:
cc:34:6a:8e:b9:d1:af:89:3d:72:a1:7e:a1:6d:6d:94:79:36:
d3:cc:b2:da:ba:34:83:87:71:86:05:3d:63:f2:16:c4:63:42:
15:c1:9e:d8:ac:eb:2d:4a:9d:a9:85:7a:f6:ec:6d:7c:c6:09:
d1:a1:e2:72:86:91:18:55:5c:5c:7e:c3:09:c9:ad:cf:b1:3e:
cb:c5:75:09:58:4a:46:c8:e0:1a:04:b4:65:36:c3:14:47:8d:
ec:8d:4f:59:35:9d:de:30:09:72:8b:ee:e2:90:d1:ef:eb:48:
06:d7:50:bd:eb:2a:83:7c:41:ae:5c:6b:97:57:e3:be:a1:eb:
b3:47:02:f3:08:87:59:12:d4:3c:52:9d:91:c1:e5:ac:bc:fc:
b6:f6:3e:2e:c9:75:5b:47:07:d8:2f:1d:cb:b1:54:09:94:0a:
98:f9:6f:91:28:81:e2:f3:b5:4a:0a:1b:c1:05:2b:52:48:51:
2a:d8:3a:53:4a:25:61:e9:48:8f:d2:e4:8a:b1:f8:96:5d:fc:
03:5c:36:35:b8:2c:74:28:79:39:85:4e:29:f9:15:43:79:04:
90:30:0d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:03 2024 by rpki-client on console-fra.rpki-client.org