Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/OkC3YSgnzuttylTA0_FODIoA7Jw.roa
File: OkC3YSgnzuttylTA0_FODIoA7Jw.roa (raw, json)
Hash identifier: km8IoKSR7jh7uACJRYGljRyrX/anRn3lwuPFMbdC2rU=
Subject key identifier: 3A:40:B7:61:28:27:CE:EB:6D:CA:54:C0:D3:F1:4E:0C:8A:00:EC:9C
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 018CC725BDBCAE53DC6EF0BFFE4052F49FD5
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/OkC3YSgnzuttylTA0_FODIoA7Jw.roa
Signing time: Mon 01 Jan 2024 22:29:48 +0000
ROA not before: Mon 01 Jan 2024 22:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 195.8.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:bd:bc:ae:53:dc:6e:f0:bf:fe:40:52:f4:9f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Jan 1 22:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a40b7612827ceeb6dca54c0d3f14e0c8a00ec9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:7d:f4:18:bd:dc:7f:a8:70:d2:ca:17:11:
0a:d5:57:ef:29:7f:87:9f:8b:8d:fe:a2:97:b2:5d:
ce:1a:fa:75:c7:d3:3d:84:21:6e:22:37:5c:d3:ec:
8b:51:f2:2e:d4:3b:b2:6b:46:ee:b4:ed:70:aa:6b:
75:3f:0a:9f:eb:91:c0:72:a5:ce:fe:a5:5a:56:ba:
21:ae:74:ec:e1:dd:33:26:4a:ff:dd:1c:33:01:f6:
ab:d1:cc:86:c5:71:b9:3b:5a:7f:09:a8:92:3e:84:
1b:23:e1:b0:7c:49:1f:46:05:f9:c6:2e:c6:e1:7b:
ce:7e:4a:3f:15:3d:b1:94:9e:f2:99:da:84:1c:f0:
40:57:e6:44:41:4c:5f:b6:9e:28:d9:80:5b:a4:ad:
35:0c:ea:3e:3a:dd:9d:3c:8e:55:19:83:af:bc:bd:
e4:3c:2e:43:b3:57:c4:7c:d4:e1:b3:4d:b8:84:ea:
4f:dc:a8:95:02:91:18:8c:9d:95:f9:99:f8:5a:e5:
d3:77:c4:a8:e5:fc:4a:51:7b:15:23:ce:dc:33:3b:
06:75:f3:dd:64:e8:55:0a:2a:4e:e8:1b:da:6c:f4:
f2:e7:14:ee:93:9e:9f:cc:d5:1c:12:81:bf:da:3e:
d1:c1:58:6c:27:a2:5e:0e:56:ff:62:b2:a3:03:87:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:40:B7:61:28:27:CE:EB:6D:CA:54:C0:D3:F1:4E:0C:8A:00:EC:9C
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/OkC3YSgnzuttylTA0_FODIoA7Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5a:00:74:86:11:11:f1:b5:75:83:6e:27:0e:36:99:29:4f:
ca:14:55:a4:f9:85:e8:06:43:40:0a:e0:ae:02:91:5e:7b:1d:
93:22:5a:25:df:fc:09:7e:65:c0:db:1e:cf:87:f6:19:58:2d:
4a:28:76:53:53:62:89:4b:7c:3a:39:91:c0:89:1c:12:52:ac:
fb:6c:e2:4c:97:36:69:5f:a9:c3:c4:24:bc:99:74:1b:64:a3:
4c:c4:ca:d0:db:75:9c:69:dd:89:fe:a5:57:be:c6:a7:78:3d:
78:29:1e:90:41:c9:00:04:32:ba:d7:e7:1a:7d:ff:c7:b0:43:
75:82:3a:d5:27:2f:0c:05:d4:4f:0a:9e:6f:e1:c3:f4:27:29:
50:56:af:17:51:1b:74:51:7c:9a:32:34:f8:8c:7b:91:da:9d:
5a:00:10:a8:ad:cb:0e:8f:45:c9:07:8c:59:08:0e:c3:4c:aa:
43:c5:32:4a:9d:a7:b5:92:3c:ae:c0:65:19:10:27:e1:6e:6a:
8c:ee:f7:86:ce:15:30:18:6d:9e:d9:92:7e:fe:76:9f:91:a4:
7e:d2:f6:66:4c:b7:50:ec:77:f5:7a:5a:87:a6:b1:84:82:31:
58:c4:26:7c:5a:39:ab:f1:24:90:75:39:63:cb:ba:7e:42:bd:
71:43:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:20:26 2024 by rpki-client on console-ams.rpki-client.org