Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/oLeR7BPLTgpGsH7JpVeJliB5Y0Q.roa
File: oLeR7BPLTgpGsH7JpVeJliB5Y0Q.roa (raw, json)
Hash identifier: 7H9It+xRl5dpbZzvBSQiQv2aBTz+FrbRe0U+O/nEYN8=
Subject key identifier: A0:B7:91:EC:13:CB:4E:0A:46:B0:7E:C9:A5:57:89:96:20:79:63:44
Certificate issuer: /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial: 018CC8DF38B39E48428174BF60A45B68FE42
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/oLeR7BPLTgpGsH7JpVeJliB5Y0Q.roa
Signing time: Tue 02 Jan 2024 06:32:01 +0000
ROA not before: Tue 02 Jan 2024 06:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210172
IP address blocks: 194.53.178.0/24 maxlen: 24
194.53.179.0/24 maxlen: 24
194.53.176.0/22 maxlen: 22
194.53.176.0/24 maxlen: 24
194.53.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:38:b3:9e:48:42:81:74:bf:60:a4:5b:68:fe:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Validity
Not Before: Jan 2 06:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0b791ec13cb4e0a46b07ec9a557899620796344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:fc:8d:ba:3a:dd:97:ba:c1:19:1a:c3:c9:
19:dd:9e:2f:16:58:d3:b0:c5:c4:3d:ad:d1:33:33:
27:f5:b4:87:fa:ea:57:61:73:e2:a5:34:4a:cd:75:
d1:8c:40:e5:b4:3a:62:1f:8a:4a:f6:6c:23:d2:69:
31:bc:83:f0:bf:7c:7c:45:c1:a1:53:74:e2:32:f7:
b3:d5:c4:10:35:b2:e9:3d:22:36:4b:12:2c:24:c2:
54:66:2e:e6:08:46:87:cc:d0:b6:86:d2:60:50:12:
ee:38:09:2b:db:ac:d5:64:3e:db:66:aa:60:f7:07:
ad:0b:68:bb:20:e5:3f:0f:76:b8:81:60:8a:52:bc:
f3:ba:14:cb:a5:86:08:08:d8:8b:95:2a:84:b1:c6:
cc:ad:1a:8c:49:1d:06:b1:db:ce:37:ae:7f:d5:b4:
76:7b:73:fb:a7:4c:e8:49:50:4f:65:22:83:11:eb:
96:85:aa:d9:64:73:3a:e8:d0:25:9f:4d:66:e4:4b:
b4:2b:ea:d1:2a:b9:4e:94:05:95:86:23:67:f6:46:
bb:90:58:e4:09:0c:49:29:4b:d1:34:0e:b0:88:de:
30:09:37:d7:a6:13:16:f1:d8:17:4f:07:a1:3e:0b:
ab:f8:e3:da:12:4e:3d:b7:4d:6c:52:d0:97:07:99:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B7:91:EC:13:CB:4E:0A:46:B0:7E:C9:A5:57:89:96:20:79:63:44
X509v3 Authority Key Identifier:
keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/oLeR7BPLTgpGsH7JpVeJliB5Y0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.176.0/22
Signature Algorithm: sha256WithRSAEncryption
37:21:ac:0b:2a:98:07:12:49:6a:50:8b:6c:cc:89:df:e4:de:
72:a3:a4:8c:2f:0a:40:4f:da:f3:ef:10:45:27:cd:70:df:52:
11:da:26:d7:ba:8b:d5:26:90:d6:21:04:37:c4:47:1c:33:63:
1b:3c:a2:9f:cc:dd:34:63:cb:1d:8e:55:57:c0:48:e4:c7:e8:
d6:3b:6a:88:fc:43:d2:54:00:35:0f:b4:f1:77:94:b5:09:0c:
c9:53:bf:3a:b4:d8:14:09:32:57:0d:7c:a6:6a:e8:38:ba:9b:
9e:f7:6f:61:0f:90:a1:b3:17:a2:f1:fa:89:ac:00:25:20:eb:
3d:d1:cf:de:9f:e7:4b:38:54:03:8c:a6:37:36:5c:4d:2a:82:
79:0e:e4:d3:d9:b7:b4:d1:8c:11:ea:04:e2:a3:64:a4:7b:ab:
17:5e:e2:52:f5:5c:c8:a8:42:1d:21:48:9a:a4:16:06:1c:d1:
d1:38:4f:29:0a:a9:66:f3:15:64:a3:a9:f1:a5:dd:b7:52:df:
f7:e0:a0:a0:d2:94:47:a5:db:8c:c1:f3:87:48:91:b3:0d:09:
0f:5a:87:cd:d0:3a:a8:e8:77:6f:22:32:27:d2:80:d5:02:fc:
fb:aa:15:9c:5b:94:40:8d:38:d5:e2:1b:6c:47:13:dd:a5:e6:
14:a2:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:43 2024 by rpki-client on console-fra.rpki-client.org