Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/onnIfxZ8YzyOyj1zqXPcigellOQ.roa
File: onnIfxZ8YzyOyj1zqXPcigellOQ.roa (raw, json)
Hash identifier: 3ZEK1LSsflRt0DA2YeuXG0gcjvtnnHt+YYQ41ilx1p0=
Subject key identifier: A2:79:C8:7F:16:7C:63:3C:8E:CA:3D:73:A9:73:DC:8A:07:A5:94:E4
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCE7462A65D68CBEEC7AB3C458A5EA
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/onnIfxZ8YzyOyj1zqXPcigellOQ.roa
Signing time: Mon 01 Jan 2024 16:30:37 +0000
ROA not before: Mon 01 Jan 2024 16:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 149.126.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e7:46:2a:65:d6:8c:be:ec:7a:b3:c4:58:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a279c87f167c633c8eca3d73a973dc8a07a594e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:25:0c:41:e1:35:76:63:41:fd:4a:1d:57:ab:
d5:7c:9a:7a:b7:11:c7:38:c8:52:31:07:d8:f0:79:
d6:67:5b:ae:7e:20:90:20:e0:c7:ef:90:8c:39:bb:
ae:25:f8:25:ed:00:dc:cd:b8:b3:2f:eb:70:7a:3d:
a0:6f:d4:73:95:3c:f5:b7:25:6e:b3:46:11:c4:f9:
8c:5c:28:3e:af:c9:a9:74:45:00:e5:82:be:e2:ad:
3e:04:a0:f9:7d:f1:25:7a:f4:6e:96:33:1a:83:3f:
c6:69:07:97:5a:7f:f2:71:25:32:7a:5b:ce:81:9a:
15:4d:6f:3f:2a:c0:9d:08:d0:63:94:35:21:6d:2d:
fc:4f:20:63:10:22:0e:78:c1:ef:03:93:62:b9:85:
39:b8:07:77:d7:4a:2e:46:ea:bc:3b:4a:c6:38:c9:
87:19:9e:ad:35:d7:9a:a4:63:5c:d7:7d:80:e5:26:
71:60:26:b1:65:0d:fa:e2:b9:d0:b0:86:d6:15:1b:
7b:40:86:b0:cb:d5:7a:42:5e:0d:3a:bd:2c:f2:0c:
43:37:29:e0:52:f3:86:de:88:5b:6c:64:44:d4:6e:
ad:f0:45:bc:b5:fc:03:28:01:8d:59:0b:c7:69:5c:
0a:cf:69:77:5c:4f:7e:90:3b:51:5c:67:2a:fa:0a:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:C8:7F:16:7C:63:3C:8E:CA:3D:73:A9:73:DC:8A:07:A5:94:E4
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/onnIfxZ8YzyOyj1zqXPcigellOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ec:08:2e:7a:f2:c3:15:0a:48:f5:89:6d:ae:5b:d5:7e:3d:
db:7d:34:32:8d:8f:ca:85:2a:a5:4c:57:2b:36:34:cc:12:2f:
38:55:ad:6c:cd:e2:7a:bd:6c:c4:2b:44:ca:4f:ea:39:65:6a:
40:e1:80:bf:45:d8:58:83:48:c9:15:a9:aa:8a:c2:c2:d4:0c:
b8:da:00:37:3c:f2:14:6b:d2:24:11:2c:70:d0:f4:d6:ff:65:
4f:26:9c:17:1b:7d:d2:60:51:b7:62:c3:e8:43:64:f2:ed:db:
f4:18:dc:76:9f:b3:de:71:10:6b:7e:9b:b3:06:f8:49:08:5c:
63:84:3f:ec:35:05:35:b3:89:75:3e:05:95:34:40:e4:4b:5f:
1a:d3:a0:f4:67:e7:3a:f7:8a:34:56:45:2b:ab:64:f4:10:a1:
c7:a7:4f:6b:86:fd:20:52:ff:c8:71:cf:c7:4e:83:70:95:9d:
5d:33:fa:fa:0e:38:7d:ff:cb:66:8a:c4:a9:03:7e:a5:e6:ea:
04:f7:6c:1c:d6:d2:ad:e4:09:cf:84:40:1b:4d:9f:38:76:56:
95:ba:a2:b2:b0:4a:54:1f:4b:98:4a:ea:90:48:fc:e9:9f:92:
48:6a:2e:5c:57:0a:f8:35:2d:b6:fa:a0:6e:e0:b8:eb:8a:b1:
f6:78:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:19:57 2024 by rpki-client on console-ams.rpki-client.org