Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/oP29UoiXukgQ4lNv5XkYj6pX5VA.roa
File: oP29UoiXukgQ4lNv5XkYj6pX5VA.roa (raw, json)
Hash identifier: XdeGoVx9R5HvyJJPGj1SUcvjOOh+iiF2jNKqCeqADaI=
Subject key identifier: A0:FD:BD:52:88:97:BA:48:10:E2:53:6F:E5:79:18:8F:AA:57:E5:50
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 018CC4247720D90EDDA2B6CBCE8A2CFBA96E
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/oP29UoiXukgQ4lNv5XkYj6pX5VA.roa
Signing time: Mon 01 Jan 2024 08:29:33 +0000
ROA not before: Mon 01 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137
IP address blocks: 159.149.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:77:20:d9:0e:dd:a2:b6:cb:ce:8a:2c:fb:a9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0fdbd528897ba4810e2536fe579188faa57e550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:7e:fc:30:0c:70:7a:c3:1e:14:0b:e3:6c:
e5:1a:46:f5:19:b1:b5:cd:51:4c:ab:77:40:d5:12:
53:8f:88:5c:38:30:2e:9c:b9:e2:4b:6f:bf:85:84:
9c:45:88:3a:a0:d8:38:bf:38:5e:af:f6:c1:ff:12:
13:a0:13:5c:20:70:ea:06:45:f1:86:a8:fc:4a:11:
07:fb:61:3e:83:50:fb:8e:ee:04:a5:c0:db:d3:c1:
38:0f:47:26:33:48:79:c7:86:db:eb:1e:b9:bd:7f:
f5:a5:22:29:99:14:1d:5e:1d:d8:7c:af:2f:86:7b:
69:ba:41:e8:c7:ba:43:02:83:bc:7e:55:de:af:70:
50:68:96:26:e7:36:96:36:0a:0a:eb:00:56:62:82:
41:a6:54:a5:d7:8c:cf:39:d6:67:57:51:a6:50:c1:
ed:e0:b2:61:2a:4c:8c:b7:49:33:cd:80:c6:88:7e:
e7:9e:5b:e1:e9:4f:8a:5e:08:b1:6f:2f:1c:eb:3a:
6d:56:28:8d:78:ad:2c:85:ad:fb:b4:36:47:90:b3:
d2:75:c4:5d:de:e3:96:df:96:20:d7:b8:16:6c:ea:
44:ed:68:6b:38:c6:be:05:92:77:da:94:89:a0:53:
f9:ad:8b:1f:c8:22:e1:c5:f7:29:ad:ae:4f:59:30:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:BD:52:88:97:BA:48:10:E2:53:6F:E5:79:18:8F:AA:57:E5:50
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/oP29UoiXukgQ4lNv5XkYj6pX5VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:63:90:28:e7:5e:fb:e6:5b:9e:e1:27:ec:7b:1e:e6:fb:5e:
69:4e:9f:8a:34:e1:04:b4:f7:c3:4b:bd:15:92:12:e4:4c:df:
8e:a7:e2:ec:d8:11:69:f0:58:bd:bd:b6:d0:62:19:1d:4e:50:
4c:25:1c:2b:29:04:db:f9:20:44:bd:b3:5a:88:de:05:6c:f8:
4b:e5:d6:c5:5b:7f:3c:4b:e3:92:ee:37:9c:87:6e:35:f6:47:
1c:33:25:a3:77:36:31:c9:14:91:eb:d4:8a:1a:2d:c8:bf:03:
f6:64:ff:02:e5:68:8a:6e:5a:97:66:b4:b0:70:20:fe:13:b8:
81:8c:00:85:19:12:50:e9:3f:2c:76:62:da:7e:07:4c:44:73:
2e:7c:5d:8c:03:16:23:db:b4:c3:13:b9:29:a8:63:06:6f:02:
61:16:86:d8:83:25:67:8a:3c:ad:64:1c:67:ef:d9:66:c8:17:
8c:a1:0b:ab:cc:3a:9a:9c:d4:bc:ed:1f:ed:f4:8a:39:97:d5:
19:f5:ce:f5:2f:9a:e9:e4:c3:07:98:5d:b3:19:70:dd:6b:2a:
6d:b6:8c:1f:83:64:f9:68:60:25:f1:f8:d7:8b:6a:3f:50:d3:
d8:3a:22:14:0e:51:2f:ef:4d:20:73:eb:c1:b7:b0:4c:5f:2f:
a3:36:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:26:53 2024 by rpki-client on console-ams.rpki-client.org