Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/OHa_-sSU7dMfQmKVi7LUtcCse60.roa
File: OHa_-sSU7dMfQmKVi7LUtcCse60.roa (raw, json)
Hash identifier: PBN3ilZLkyzgJjyvwebOKystSXmyDQyUrw+5NhOqCs8=
Subject key identifier: 38:76:BF:FA:C4:94:ED:D3:1F:42:62:95:8B:B2:D4:B5:C0:AC:7B:AD
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 018CC8017A05259CEEA4C3C1FB7ACFE6E3E1
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/OHa_-sSU7dMfQmKVi7LUtcCse60.roa
Signing time: Tue 02 Jan 2024 02:29:49 +0000
ROA not before: Tue 02 Jan 2024 02:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56687
IP address blocks: 2a05:2584::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7a:05:25:9c:ee:a4:c3:c1:fb:7a:cf:e6:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jan 2 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3876bffac494edd31f4262958bb2d4b5c0ac7bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:1c:25:52:41:3b:36:48:00:58:1a:02:1f:
00:62:4d:b6:96:d8:0c:20:5f:53:81:a4:82:8d:54:
b7:b2:5f:55:a5:38:5f:bd:11:5f:de:94:12:2c:14:
a8:72:2f:08:72:43:8f:26:b8:10:44:7b:61:f3:0b:
8b:37:b4:a0:34:ae:f4:36:83:fd:df:97:d3:c0:80:
94:b1:08:86:d3:cf:b1:6b:13:42:cc:e6:f5:ca:cc:
46:1e:b6:2d:eb:d7:9f:76:2a:2c:88:65:52:a9:e3:
76:62:de:b6:66:65:7b:6b:da:7c:bc:70:1a:e3:19:
65:0c:5b:86:da:f3:52:bd:ca:48:0a:c8:d8:4e:ee:
6a:cc:a1:20:f6:c8:db:d7:04:02:37:5a:ce:88:d3:
59:66:d8:a4:cf:42:fb:0d:25:84:0d:6e:d5:5d:9a:
45:6a:c7:d3:ec:b0:e2:e1:7d:0e:80:2f:70:62:1f:
8e:d7:08:01:22:aa:f9:1e:23:a4:d7:8f:06:6a:3d:
f3:0d:02:88:dc:ed:33:7b:72:fb:2b:eb:a3:e4:35:
4c:56:e8:9c:75:0e:b2:91:67:b2:c4:52:7f:93:19:
e5:77:77:8f:b6:75:83:c6:f8:37:3a:88:8e:a9:30:
72:84:f7:a0:0b:0e:9f:7b:16:e6:ae:da:3d:78:bb:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:BF:FA:C4:94:ED:D3:1F:42:62:95:8B:B2:D4:B5:C0:AC:7B:AD
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/OHa_-sSU7dMfQmKVi7LUtcCse60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:2584::/30
Signature Algorithm: sha256WithRSAEncryption
66:09:fa:4e:7c:f1:49:f5:7b:6f:ea:2a:c0:9b:22:5b:37:61:
d4:32:f6:f5:30:c3:f6:11:7d:f6:22:34:fb:11:c4:4b:60:ef:
61:e8:df:ae:3e:78:58:80:c0:d7:c4:8a:8d:99:f3:fa:1c:2c:
de:3d:21:f9:ac:8d:69:e8:c9:fb:c3:70:0e:3e:92:1a:b8:f3:
1a:65:1e:64:94:35:d8:34:fb:8e:25:1c:bb:c5:a5:08:3c:eb:
79:9b:fc:bc:c2:bb:e3:fd:b9:37:cf:58:58:ef:ca:7b:ba:8d:
c1:39:06:2d:44:6f:4e:c8:73:cc:f4:5a:31:4d:07:fe:0c:77:
68:35:7b:5c:00:74:71:90:6f:a3:3b:0d:41:ed:6d:63:f9:43:
36:80:48:04:7e:c4:5e:57:b1:75:3c:3d:36:f0:da:dc:4a:0c:
32:0a:d4:2b:fb:b4:e1:eb:c4:01:38:91:ca:5c:e7:23:1d:71:
bd:04:f9:b4:d0:54:7f:53:36:35:11:73:09:53:7e:b1:9a:e0:
aa:66:f6:cf:c7:14:91:a3:e7:0e:d6:1d:64:32:16:a7:18:23:
29:88:54:92:23:55:a8:ff:9e:29:8a:42:6b:ea:1c:b1:42:db:
32:6e:f2:7b:25:b2:40:46:08:ae:80:ba:13:3e:7d:4d:ab:99:
32:37:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:46:13 2024 by rpki-client on console-fra.rpki-client.org