Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/3OPSHpbMC8FIm1sDcvvQx3fTprQ.roa
File: 3OPSHpbMC8FIm1sDcvvQx3fTprQ.roa (raw, json)
Hash identifier: iE0Wb0WUmihWjDWnjDOJ37EBwTPBXa87WMRFhBEZ9ns=
Subject key identifier: DC:E3:D2:1E:96:CC:0B:C1:48:9B:5B:03:72:FB:D0:C7:77:D3:A6:B4
Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial: 01927AF160059BEBE3D30F6430858F83340C
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/3OPSHpbMC8FIm1sDcvvQx3fTprQ.roa
Signing time: Fri 11 Oct 2024 09:38:11 +0000
ROA not before: Fri 11 Oct 2024 09:38:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 194.147.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:f1:60:05:9b:eb:e3:d3:0f:64:30:85:8f:83:34:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
Validity
Not Before: Oct 11 09:38:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dce3d21e96cc0bc1489b5b0372fbd0c777d3a6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:99:9d:52:5d:15:fb:73:8f:d4:f2:c8:48:
69:99:7b:24:e3:25:3e:44:53:df:28:60:aa:f5:6d:
80:d4:1f:ed:be:d5:c4:7d:6d:66:08:5d:73:dd:bc:
c0:15:0a:da:74:c1:08:e8:f1:a6:02:20:73:98:e1:
d0:d5:f0:33:e8:f5:ca:7e:0c:76:ad:ec:e2:8f:9d:
d1:79:b0:b9:e4:46:71:cf:d1:4f:65:c4:48:22:42:
b2:3f:e6:8e:50:9e:ea:3f:82:32:2d:1a:9f:b8:3a:
4c:44:d8:87:e5:62:eb:71:bd:23:03:e6:ec:5a:f6:
77:83:7b:50:36:df:2a:c0:f5:a0:56:3c:d3:30:5b:
c9:93:02:cf:7c:da:ec:9c:d7:81:03:0c:c7:51:bf:
83:34:e8:7d:df:27:7c:cb:3a:c7:61:6f:f4:a2:81:
14:40:e6:bb:69:ab:10:8f:47:6e:51:45:09:68:b5:
7d:33:41:ff:e4:5a:11:05:77:2f:0f:78:d2:94:1e:
94:09:ee:db:dd:2e:69:95:fa:84:98:f5:78:5c:32:
55:cd:04:7a:fc:06:6f:7f:2c:68:84:5e:e6:24:0f:
0c:9c:84:66:70:5d:0b:94:0e:bc:c1:85:62:6a:af:
05:ad:f0:4b:b2:d7:9f:3b:57:62:48:19:6d:61:c9:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:D2:1E:96:CC:0B:C1:48:9B:5B:03:72:FB:D0:C7:77:D3:A6:B4
X509v3 Authority Key Identifier:
keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/3OPSHpbMC8FIm1sDcvvQx3fTprQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:58:92:14:6e:d9:37:00:1b:44:f0:3e:4a:9e:c9:91:af:5a:
42:f6:98:5e:61:d5:84:82:0c:4e:2a:3d:4e:77:9c:e4:12:53:
17:58:97:f3:9d:cb:f1:a3:d6:04:ac:19:50:25:76:da:1b:fa:
f0:14:b0:0c:3c:9c:c1:05:2f:5e:0f:f7:a8:77:5a:80:c4:6b:
3a:ef:8b:06:21:e8:48:f8:48:23:b3:32:fe:8b:22:1b:ec:28:
1c:d8:3d:f0:06:22:5a:4d:e8:45:98:33:eb:c5:ec:43:f5:94:
7f:2f:52:54:8d:04:79:e7:0e:9b:97:85:d8:1b:f7:d3:8f:5e:
63:88:16:ed:e2:a0:e6:e8:e6:92:52:4d:11:71:22:f8:71:6a:
c0:73:66:0a:4b:af:85:1a:d6:51:40:2a:0e:95:b8:45:96:4c:
52:c8:e7:50:9e:e4:4c:d4:ff:62:41:90:8f:ae:6a:6e:91:2e:
34:33:f3:5b:f3:3b:e0:45:56:e3:b6:b9:26:11:be:1c:7c:18:
14:6b:5f:56:98:39:1a:a9:d0:ea:1f:99:63:c0:0d:9d:f2:b1:
09:35:30:ee:aa:6e:7e:d3:0c:4e:0b:29:89:8d:39:a5:cf:b0:
ca:6e:bc:11:a7:88:d7:d1:74:64:cf:76:ad:da:f5:4b:f6:bf:
95:6e:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:49 2024 by rpki-client on console-ams.rpki-client.org