Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/OGoDqGceap0LO4UflHWBDMlOLs4.roa
File: OGoDqGceap0LO4UflHWBDMlOLs4.roa (raw, json)
Hash identifier: KBXHjLlryy4o3LnRVnX52IPADaZ7Fq99KK+ZHFL1o0U=
Subject key identifier: 38:6A:03:A8:67:1E:6A:9D:0B:3B:85:1F:94:75:81:0C:C9:4E:2E:CE
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 018CC7935A983E59B7023C6F144395508A0C
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/OGoDqGceap0LO4UflHWBDMlOLs4.roa
Signing time: Tue 02 Jan 2024 00:29:32 +0000
ROA not before: Tue 02 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8758
IP address blocks: 194.35.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:5a:98:3e:59:b7:02:3c:6f:14:43:95:50:8a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Jan 2 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=386a03a8671e6a9d0b3b851f9475810cc94e2ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:d3:c9:12:2e:7e:01:fe:20:96:f2:6d:fd:
ac:be:e3:3f:9d:cb:a2:6c:89:b4:4b:7e:d2:fa:42:
96:30:c9:5d:99:10:b0:1d:1d:cd:8e:66:94:bf:9f:
e3:53:b7:d1:bb:52:d3:30:25:4e:b8:bd:2a:86:55:
a8:fe:84:5c:24:5b:42:93:5a:22:0f:94:9b:52:bd:
b8:62:43:29:8d:e6:bb:49:0e:e2:29:86:a7:e3:61:
76:82:37:af:b9:06:27:66:a7:55:e5:28:ee:f3:78:
e7:c4:35:1e:31:7b:9d:eb:55:a1:25:4f:42:6e:4a:
a6:23:eb:a3:30:62:dd:8f:50:b0:46:99:c0:34:a6:
8c:9a:63:cc:c4:f0:5b:ba:51:fe:db:7a:e4:32:fe:
08:ce:07:0d:e9:d9:c6:5d:c5:d3:da:87:a5:d7:42:
e6:73:10:d0:0e:2e:f0:a3:e1:a3:f6:20:af:8b:6a:
dd:2f:8e:63:fb:5d:84:f2:e9:90:56:c4:cf:b5:b1:
4f:1e:b8:63:98:5b:6f:55:56:53:6b:1c:c5:ad:45:
5a:2e:be:ee:17:9e:19:c0:10:04:06:5e:a8:ba:af:
fe:e7:14:65:c1:6c:df:1c:f3:78:40:23:3b:f7:9a:
19:4f:99:f1:5a:91:ec:89:e9:a4:25:84:a3:10:0c:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6A:03:A8:67:1E:6A:9D:0B:3B:85:1F:94:75:81:0C:C9:4E:2E:CE
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/OGoDqGceap0LO4UflHWBDMlOLs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:46:0a:c7:2a:65:0f:37:d5:94:41:46:41:6a:c8:ce:8f:f8:
c8:d1:8f:6c:11:f7:d4:d2:53:e6:06:51:26:90:d2:b2:49:32:
f7:30:c4:8b:9b:54:2c:d2:c6:a4:e4:86:79:9d:4e:b9:55:47:
3e:18:b6:1c:7e:1b:b8:99:a4:df:b1:54:4c:d1:fa:09:a7:c8:
39:43:d0:63:56:04:15:38:57:5f:4a:32:0c:e5:82:f8:31:11:
37:4c:b2:42:a9:61:fb:98:e2:9c:b7:70:cc:d5:1c:35:fc:49:
5d:41:97:8d:ce:49:6a:1c:51:b4:90:8f:c7:a3:d7:2b:a2:41:
ff:d1:52:39:c5:6e:c6:14:62:b9:2a:77:c8:c2:78:4f:77:7c:
e3:b1:25:a9:5d:a2:06:86:b2:9e:a3:03:b0:d2:1d:ad:83:53:
43:74:de:30:47:16:1e:dc:39:aa:da:10:b0:c4:60:97:73:6b:
33:ba:9b:72:0f:8b:d4:c1:2a:c2:71:84:57:e6:cb:3d:14:32:
52:4b:7c:5c:a9:0c:fe:b7:66:3f:81:4c:e1:4b:de:28:7b:e1:
a3:12:5f:07:ba:85:00:da:92:d2:27:f8:8b:73:9c:37:5f:5b:
4d:df:0b:59:36:09:01:0d:04:97:82:e4:eb:6b:8a:d5:57:36:
7a:56:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 11:00:47 2024 by rpki-client on console-ams.rpki-client.org