Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/omh1U3zLbKyMkt_dCxaF0vo_19c.roa
File: omh1U3zLbKyMkt_dCxaF0vo_19c.roa (raw, json)
Hash identifier: lpidoufXuaztuUDY1BZIY91HDN9n1if5n329gypK40g=
Subject key identifier: A2:68:75:53:7C:CB:6C:AC:8C:92:DF:DD:0B:16:85:D2:FA:3F:D7:D7
Certificate issuer: /CN=4101e106a9ca7b14a67ab40277836a18c2f710be
Certificate serial: 018CF5D4ECAD0B1EA0582AC5B636AEFACCB5
Authority key identifier: 41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/omh1U3zLbKyMkt_dCxaF0vo_19c.roa
Signing time: Thu 11 Jan 2024 00:03:41 +0000
ROA not before: Thu 11 Jan 2024 00:03:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54252
IP address blocks: 176.118.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:d4:ec:ad:0b:1e:a0:58:2a:c5:b6:36:ae:fa:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4101e106a9ca7b14a67ab40277836a18c2f710be
Validity
Not Before: Jan 11 00:03:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a26875537ccb6cac8c92dfdd0b1685d2fa3fd7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:ec:ec:8d:a8:42:10:6b:65:4f:99:91:86:
16:30:c2:32:22:e7:97:b2:6f:3a:fb:99:bb:77:75:
c6:03:b1:d0:41:a1:4b:c0:1c:93:73:21:40:58:98:
31:cd:e1:45:5c:ed:a1:07:41:8c:2f:2a:9d:20:df:
f5:d9:6c:f6:fc:7b:f8:56:b9:50:48:fd:a9:0f:5a:
34:f4:d5:c8:7e:1b:1b:c4:c3:33:1e:5d:d4:64:08:
9a:03:9d:3b:56:d8:12:d9:fa:34:a8:dd:85:59:57:
c0:ff:c0:76:b1:53:d1:03:42:ae:96:b5:6d:7f:7b:
84:d6:bc:66:34:b5:c3:07:0d:f7:52:7f:fb:7f:5c:
56:4a:eb:d4:ea:c3:55:80:d6:ca:cd:e9:8b:29:4e:
09:0a:9e:31:9f:d0:fd:a6:e4:bb:a5:a8:b7:4a:1a:
51:a9:5a:7f:77:29:82:36:1f:30:5c:31:96:bf:37:
74:ca:4d:20:69:2d:b5:7b:a5:07:4c:87:d0:61:9c:
ca:37:48:52:b4:30:ea:5f:1b:49:3c:04:a8:da:11:
71:de:fa:89:65:c2:ad:a9:34:9c:52:18:70:0b:c8:
ab:91:56:33:71:bb:60:88:02:30:e4:15:88:2d:8c:
17:66:27:26:0d:af:b0:3b:dc:0b:92:41:0a:0e:b5:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:75:53:7C:CB:6C:AC:8C:92:DF:DD:0B:16:85:D2:FA:3F:D7:D7
X509v3 Authority Key Identifier:
keyid:41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/omh1U3zLbKyMkt_dCxaF0vo_19c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4f:3d:5c:b9:68:18:cd:0e:6c:10:55:c3:35:a7:c5:81:f5:
bd:a8:fe:0d:eb:b1:5c:a4:1f:cb:2b:34:27:90:3c:16:c1:2f:
8b:fc:a4:b6:be:6c:cf:2e:94:9a:51:7c:d5:75:61:7f:13:ed:
78:e0:90:93:ad:1f:c4:cf:80:e2:98:10:9c:c9:51:aa:36:b3:
12:a6:e9:5b:1e:ad:0e:29:26:2b:f1:3e:9b:3f:72:a6:da:cd:
1c:47:ad:7e:4a:67:1b:94:63:ef:ad:49:5b:4a:6f:6b:d7:60:
b1:c7:38:ff:1d:c5:b1:f1:42:23:19:fa:72:ba:dc:b4:ae:be:
4d:b1:41:25:15:7a:f8:83:7a:c4:0b:80:3e:87:ac:5f:65:08:
eb:4d:7c:ce:00:ab:c8:3f:f2:21:f8:f2:ec:ac:a8:8d:5b:a8:
56:12:06:de:1a:d4:9f:10:1c:41:5a:e1:8b:c2:db:d4:66:22:
ea:59:85:0f:31:af:67:91:5e:19:d7:f3:2f:f8:ed:fb:37:63:
22:87:da:68:ca:0a:44:12:92:45:11:17:ff:1c:d7:eb:35:34:
35:93:02:7a:db:8b:2a:a3:0a:22:fa:ab:6a:cb:c9:db:79:e1:
68:a1:a2:1f:30:ca:59:6b:ba:a6:5c:05:f7:d4:ab:15:aa:86:
5a:1a:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 13:20:05 2024 by rpki-client on console-fra.rpki-client.org