Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/oM6cpGSASk6ux-PLsp9ELLe5LGs.roa
File: oM6cpGSASk6ux-PLsp9ELLe5LGs.roa (raw, json)
Hash identifier: 5OGt9IDl92Un+JA4zkuD1bT5P8PTulcJAJYS8RwSkJ4=
Subject key identifier: A0:CE:9C:A4:64:80:4A:4E:AE:C7:E3:CB:B2:9F:44:2C:B7:B9:2C:6B
Certificate issuer: /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Certificate serial: 018CE35995BD443FA579A9420923F5F24BF5
Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/oM6cpGSASk6ux-PLsp9ELLe5LGs.roa
Signing time: Sun 07 Jan 2024 09:55:48 +0000
ROA not before: Sun 07 Jan 2024 09:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209567
IP address blocks: 185.69.3.0/24 maxlen: 24
194.2.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:59:95:bd:44:3f:a5:79:a9:42:09:23:f5:f2:4b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Validity
Not Before: Jan 7 09:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0ce9ca464804a4eaec7e3cbb29f442cb7b92c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:c5:67:97:c8:17:12:9f:a1:d1:07:b8:a9:
51:7b:6d:ca:58:c7:2b:9b:92:7d:5f:1d:77:ed:e4:
07:0d:d8:6d:d4:a3:c8:f9:ea:d6:77:05:d4:23:b4:
d9:08:3d:c9:d9:fd:73:86:6b:b5:ac:a2:36:bd:46:
6a:96:c1:b7:c6:8e:0c:1d:41:23:cf:69:70:f6:10:
7b:6d:ff:73:09:b5:92:da:7c:70:36:a4:a4:4b:32:
00:7e:c9:03:88:13:75:1d:c3:5e:6e:48:2b:a0:e6:
42:85:c5:6a:c2:c5:c4:71:a5:22:20:40:5c:89:45:
71:31:aa:eb:10:19:e4:2c:a2:1e:5c:53:e0:15:c0:
7c:f1:89:1b:f6:1b:b5:9a:94:af:9f:3d:cc:83:0f:
7a:dc:f0:a6:91:f7:18:2e:81:de:5d:6a:60:a4:f7:
9f:3c:57:dd:73:69:04:06:6b:ef:15:0f:a4:7c:25:
fe:21:2c:b6:60:1b:29:ff:e2:99:fa:0f:6b:7f:c8:
8c:70:86:7c:4e:13:0a:06:bd:26:ba:b2:0b:2c:be:
7a:58:9e:ce:1a:52:54:c8:67:3c:3e:62:cc:a8:e7:
55:1c:3c:26:96:40:b0:fa:6b:95:45:44:4d:94:0f:
d5:fe:b7:66:40:65:77:52:c8:53:6a:ac:13:13:5f:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:9C:A4:64:80:4A:4E:AE:C7:E3:CB:B2:9F:44:2C:B7:B9:2C:6B
X509v3 Authority Key Identifier:
keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/oM6cpGSASk6ux-PLsp9ELLe5LGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.3.0/24
194.2.75.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f3:6d:b6:a6:7f:62:cb:bc:29:d6:10:bf:b2:d5:45:d6:de:
d0:26:62:8a:14:7f:b6:66:d5:3c:04:41:93:da:0a:35:46:fd:
aa:1c:75:4e:b9:4a:4c:cd:df:56:f5:1a:02:56:22:aa:c0:05:
2a:bc:eb:6e:f0:0d:bb:6c:8f:e2:8b:ad:52:25:c6:0a:82:7d:
41:ca:c3:ee:df:d2:f0:fd:87:4c:e4:d9:5b:83:20:ea:c6:f6:
40:bb:f9:de:78:22:9d:88:91:52:ac:c4:00:3f:c1:36:ee:de:
60:e3:b7:57:3b:2c:21:d2:6f:b6:f0:b3:0f:f4:5c:4e:e9:b1:
60:92:c0:f1:fd:a4:40:61:87:61:f2:d6:28:e6:08:43:59:26:
92:fa:04:80:3a:8c:2a:83:6f:5a:01:eb:82:e8:f3:c8:10:37:
da:19:8f:77:cf:e1:b6:98:65:bc:b5:81:f6:dc:96:6f:a8:ef:
56:2c:22:52:43:b7:1e:1c:85:eb:a0:32:1a:87:f1:c1:64:3a:
d1:3f:f6:5a:dd:b6:ba:7f:89:9b:f7:ac:1b:98:79:4a:21:33:
56:66:16:60:e9:9b:6d:ac:a2:81:5c:67:70:9a:cb:b7:5f:30:
b9:45:42:6c:f1:f7:33:78:22:f1:a1:f0:81:b5:73:40:f6:18:
14:66:ab:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:48 2024 by rpki-client on console-fra.rpki-client.org