Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/0v7_OvZKrmemXxFEbr4YQBjpJoY.roa
File: 0v7_OvZKrmemXxFEbr4YQBjpJoY.roa (raw, json)
Hash identifier: lg/HOCjtU7L0PgfI0et7FW3g5DnYswZl6OX9z+PHrs8=
Subject key identifier: D2:FE:FF:3A:F6:4A:AE:67:A6:5F:11:44:6E:BE:18:40:18:E9:26:86
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 018CC34957F00C16931D103445E0FA39C157
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/0v7_OvZKrmemXxFEbr4YQBjpJoY.roa
Signing time: Mon 01 Jan 2024 04:30:12 +0000
ROA not before: Mon 01 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2103
IP address blocks: 134.246.0.0/16 maxlen: 16
134.246.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:57:f0:0c:16:93:1d:10:34:45:e0:fa:39:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jan 1 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2feff3af64aae67a65f11446ebe184018e92686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:53:25:ac:2b:6b:d7:9a:55:ee:e7:8e:d8:
b8:b9:85:87:db:06:59:67:ce:fe:43:e1:aa:10:1a:
96:e6:dd:c1:0d:87:11:18:5d:42:d0:ec:98:a4:8b:
8e:fe:a5:f9:99:52:37:94:49:93:25:3c:dc:75:6a:
0a:73:d2:0c:ce:9c:53:99:86:07:8e:d4:7e:08:76:
a1:7d:e0:d8:f5:2e:96:f1:98:95:6c:77:5f:0b:51:
75:0d:25:b9:ba:40:ce:0c:6b:c3:59:6b:2a:93:9c:
12:24:09:c7:ca:9a:5f:0d:33:a0:b8:c8:a1:82:df:
ed:25:01:56:4b:a7:5e:69:94:40:87:94:47:24:52:
2c:d2:07:4d:65:dd:0a:98:6a:10:be:a0:8b:11:1e:
c9:70:52:d3:f3:5e:8b:ad:e7:93:43:72:92:59:3c:
ad:21:8d:7a:75:bf:61:64:9e:e3:82:b2:55:8c:b7:
fc:61:1b:d6:ab:ce:80:f5:61:b2:f8:bd:60:cf:8c:
8e:6a:d9:f4:f4:7d:ef:64:06:89:22:df:64:07:dd:
a7:12:1a:2d:1b:90:d0:46:46:8e:30:9d:5d:bc:de:
15:b6:20:62:76:89:a2:35:f0:b3:85:3d:1a:d5:5b:
ac:e5:0f:3b:ed:9f:5d:94:c3:83:51:30:e8:12:ba:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:FF:3A:F6:4A:AE:67:A6:5F:11:44:6E:BE:18:40:18:E9:26:86
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/0v7_OvZKrmemXxFEbr4YQBjpJoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:c5:64:39:f3:41:07:e2:f0:e8:86:d6:e2:df:cc:9a:2b:17:
7e:de:e2:ab:65:b1:22:27:8b:a0:19:c2:b0:24:9f:f2:28:10:
da:95:b2:30:f2:50:a7:38:0d:80:42:c9:b7:9d:a6:2e:12:ec:
98:48:72:7d:c8:ba:57:b2:c8:de:78:08:df:cc:32:b5:0a:ec:
97:52:bf:f2:ed:1f:cf:0a:40:09:dd:e1:4a:8a:81:6b:d1:79:
4e:08:b4:37:52:e6:ef:e4:bc:36:e6:88:74:9f:f0:c2:40:e1:
0c:33:ef:c1:a1:5e:7f:88:e2:30:68:e1:dc:12:d6:6d:ae:e3:
2d:ca:6e:fa:4d:e1:8a:28:1b:d7:80:f5:42:45:d4:9c:98:d5:
4b:b0:80:28:b7:a8:68:39:96:8e:51:ef:6c:5e:02:d0:bb:77:
3a:0b:34:7a:96:a0:5a:9b:31:42:5d:78:26:f0:6e:35:71:85:
a0:24:de:7f:7c:06:a3:d5:79:a8:7b:fe:1d:3c:04:3e:3f:2a:
c9:06:0b:c5:24:a0:f7:53:f6:85:ad:60:5d:89:0c:7d:b1:d5:
8f:a8:b4:98:f7:96:b5:62:2a:13:3f:39:fc:ea:17:5f:45:f8:
6c:31:dd:34:ff:a8:61:9c:26:73:fa:a9:cb:1b:38:78:37:09:
59:c3:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:36:23 2024 by rpki-client on console-ams.rpki-client.org