Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/o0jf7_Ca06y0pLLe0uzTrojfptg.roa
File: o0jf7_Ca06y0pLLe0uzTrojfptg.roa (raw, json)
Hash identifier: tKxAMzDAudoizWANqDBExyxw1S7nARs+SYO3tfgSJ5A=
Subject key identifier: A3:48:DF:EF:F0:9A:D3:AC:B4:A4:B2:DE:D2:EC:D3:AE:88:DF:A6:D8
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC4873D01806ADC0DAAAAF2835C2F0
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/o0jf7_Ca06y0pLLe0uzTrojfptg.roa
Signing time: Mon 01 Jan 2024 16:29:57 +0000
ROA not before: Mon 01 Jan 2024 16:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51764
IP address blocks: 195.208.202.0/24 maxlen: 24
195.208.203.0/24 maxlen: 24
195.208.200.0/24 maxlen: 24
195.208.201.0/24 maxlen: 24
195.209.100.0/24 maxlen: 24
195.209.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:48:73:d0:18:06:ad:c0:da:aa:af:28:35:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a348dfeff09ad3acb4a4b2ded2ecd3ae88dfa6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:f3:42:45:40:82:81:cc:99:ea:a3:ce:ad:
5d:28:da:dc:5c:a4:55:f8:e1:f8:34:86:6e:53:28:
30:1f:67:2c:03:54:2e:89:2d:19:f6:66:d2:b0:87:
17:94:80:d1:59:da:9d:54:7c:c6:03:8d:d0:98:86:
03:df:98:a0:a7:1c:c8:a5:22:36:d6:4f:92:92:14:
fc:59:4e:2d:d6:15:2b:c0:12:52:c4:58:7b:2e:b3:
f5:86:44:fd:4f:11:e9:03:cc:93:f2:ee:7e:41:de:
69:ee:24:e5:93:52:ed:6f:38:8a:10:29:bd:23:1f:
45:0a:ce:b1:67:91:af:ab:65:6b:1b:7a:50:3b:13:
dd:07:f2:43:41:b9:4f:4d:e8:37:b4:84:a3:1e:60:
3a:9d:ee:07:d2:86:77:18:6b:5e:af:eb:1d:28:31:
6e:76:54:7f:ed:2e:b9:37:f3:dc:50:ff:0e:43:e1:
75:d2:de:fd:61:90:88:d3:b2:2d:79:b2:ec:a5:56:
ed:24:c3:03:e0:ab:f9:e5:c7:0e:81:d2:84:e7:f7:
82:4b:e0:6e:d6:91:99:18:83:a8:30:ca:65:37:ff:
c2:9d:ce:bf:ec:11:65:51:37:12:e5:6e:68:9f:2d:
31:72:d4:b7:25:4c:e1:5c:22:8c:48:fb:0d:e0:c2:
df:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:48:DF:EF:F0:9A:D3:AC:B4:A4:B2:DE:D2:EC:D3:AE:88:DF:A6:D8
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/o0jf7_Ca06y0pLLe0uzTrojfptg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.200.0/22
195.209.100.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:c1:d0:07:59:0c:2f:8f:86:54:60:2e:17:3e:3a:33:a8:50:
13:94:fd:a2:ca:b0:93:bb:a5:0f:01:e3:5d:4b:36:28:3d:a4:
94:1c:37:7f:8c:97:3a:12:65:14:35:70:1e:56:a0:58:87:a7:
9f:41:a9:6b:8d:8b:90:5d:be:c5:f3:e5:5c:6c:e2:41:96:cb:
62:fc:67:24:0a:13:a4:11:4b:1d:f5:91:11:8f:24:fa:d9:d4:
62:1e:1d:14:40:1f:21:10:7a:e9:8e:2b:9d:6c:92:ce:69:e5:
8f:2b:bc:b1:23:a5:4a:81:5f:59:28:6d:90:2c:a7:da:e5:8f:
4f:91:73:92:ed:63:50:de:96:a1:81:22:e5:21:c0:81:1c:7f:
d6:89:c8:5d:9a:e2:6d:a3:59:9b:2c:0a:df:be:0b:22:e2:11:
b2:a1:27:f8:e0:cd:26:ca:82:33:b6:3d:db:00:0d:d2:df:18:
85:31:55:80:c0:e5:40:f8:1a:ec:b1:49:95:66:ac:3a:68:bc:
9b:62:38:9e:97:6b:48:f4:11:61:54:4c:7e:eb:1d:c6:b0:9c:
c7:b8:f3:93:14:a5:ba:90:86:5d:36:f3:1c:47:66:82:05:a5:
58:f6:36:b7:82:3f:e4:14:a7:61:5f:5f:87:63:a7:2e:19:1e:
df:ee:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:30 2024 by rpki-client on console-fra.rpki-client.org