Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oMbaJSssqUWbVeVRbmRfbHitjXQ.roa
File: oMbaJSssqUWbVeVRbmRfbHitjXQ.roa (raw, json)
Hash identifier: yw2KY5dZMsRDVN8yJQUCxQSw+CitLsIGcV/seIRUqbE=
Subject key identifier: A0:C6:DA:25:2B:2C:A9:45:9B:55:E5:51:6E:64:5F:6C:78:AD:8D:74
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018D3696D81666CB88F24E6ABE0AD89CA139
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oMbaJSssqUWbVeVRbmRfbHitjXQ.roa
Signing time: Tue 23 Jan 2024 13:51:11 +0000
ROA not before: Tue 23 Jan 2024 13:51:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 139.28.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:96:d8:16:66:cb:88:f2:4e:6a:be:0a:d8:9c:a1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 23 13:51:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0c6da252b2ca9459b55e5516e645f6c78ad8d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:40:f0:62:e2:05:b1:ff:a8:26:46:cc:e8:
8c:da:9c:8d:1d:db:81:ef:a4:8a:72:4d:0f:ac:e3:
87:dc:0e:92:73:f4:25:6e:43:44:5c:3e:ae:3d:44:
1f:86:df:d5:f6:a5:b0:10:b3:24:fe:10:f5:ef:a8:
b1:69:49:39:0f:c5:64:91:0a:4c:f3:18:7c:0c:34:
8a:f7:45:a7:35:9b:15:61:18:27:57:47:ec:0f:e9:
1e:c8:4b:f2:5a:b3:28:83:ab:0a:fb:31:38:6c:cc:
ac:d9:70:b3:ce:30:74:25:10:54:5c:af:15:64:62:
f9:87:19:c8:b7:a9:34:fb:ba:1d:95:f3:bf:82:9b:
f6:96:1b:08:9f:7a:db:62:83:2b:31:42:a3:42:39:
19:2f:a9:cc:e4:17:15:24:dc:68:64:d0:bc:e3:8d:
19:c2:59:19:06:5a:a9:2d:f1:e0:6a:aa:81:52:a2:
89:fc:8c:6e:9f:e7:ac:c6:62:a4:58:6d:d2:52:b4:
9d:b2:53:38:50:5c:8a:1a:a9:6f:a4:a5:a2:81:23:
77:14:d5:e9:af:70:3b:67:a5:15:00:0b:aa:f7:4f:
da:78:ba:64:ba:a3:83:48:05:fa:66:35:09:83:ce:
ca:7d:3b:33:8c:c0:68:67:e9:b5:a5:03:4b:3a:a4:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C6:DA:25:2B:2C:A9:45:9B:55:E5:51:6E:64:5F:6C:78:AD:8D:74
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/oMbaJSssqUWbVeVRbmRfbHitjXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.172.0/22
Signature Algorithm: sha256WithRSAEncryption
61:d1:c8:04:88:62:53:1b:af:39:2b:c4:cd:59:ae:8c:f4:19:
ef:a6:b5:41:3f:56:c9:57:15:6e:9b:31:e9:64:c8:2a:d7:ff:
7c:11:16:c6:bb:20:9a:27:fd:af:a9:70:4b:f2:9d:92:6a:5e:
a2:2c:b9:b1:b8:77:b0:1e:20:aa:bc:7b:77:f1:13:5d:3b:55:
a4:98:fa:63:7e:0e:68:f5:80:7f:6c:07:e8:79:32:fe:c5:e5:
1b:e6:4e:6e:4d:34:ad:14:8a:25:32:e1:fc:0b:d9:26:7e:75:
da:0e:e8:bb:8e:5f:fe:31:8c:2e:7f:c6:0e:a8:fa:4a:0f:cb:
85:6c:13:d3:6a:1e:cf:f2:a8:73:55:6b:0d:25:d2:13:2b:54:
f7:6e:0e:05:25:a0:75:2d:a2:ca:0d:b8:43:d3:7c:0d:64:c4:
ff:c4:18:80:b6:ea:a8:4d:b4:ca:df:a1:53:8b:54:49:f6:65:
0e:b6:61:84:aa:bb:f4:c5:fb:24:f0:ab:ae:71:7f:42:b7:31:
13:f7:5e:87:f3:bc:61:90:79:53:b0:41:02:5a:0f:5a:cc:36:
09:90:62:ff:36:9c:8c:6a:23:2a:8e:30:df:1e:85:f2:17:cd:
fb:f4:95:df:d5:78:66:fb:15:c8:6a:96:77:99:19:36:af:a1:
c3:50:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:57:54 2024 by rpki-client on console-ams.rpki-client.org