Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/0BgfBIP3JKMgwsZmzVRbjyNKKmk.roa
File: 0BgfBIP3JKMgwsZmzVRbjyNKKmk.roa (raw, json)
Hash identifier: pcE6r2Z0vCrxrU1nNrbMTXvhdWFLMvTnyL2D4/QR3H0=
Subject key identifier: D0:18:1F:04:83:F7:24:A3:20:C2:C6:66:CD:54:5B:8F:23:4A:2A:69
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 0190A148B2007B59C827CC1DE618BA9DAA49
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/0BgfBIP3JKMgwsZmzVRbjyNKKmk.roa
Signing time: Thu 11 Jul 2024 10:13:34 +0000
ROA not before: Thu 11 Jul 2024 10:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 192.124.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:48:b2:00:7b:59:c8:27:cc:1d:e6:18:ba:9d:aa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jul 11 10:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0181f0483f724a320c2c666cd545b8f234a2a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:7a:42:f7:df:c5:c1:33:85:ff:e5:87:e4:
f6:38:87:05:41:61:57:c2:89:0f:f5:74:2d:87:45:
e3:34:d3:c9:ef:52:7c:08:56:3a:82:c1:d1:97:56:
14:2c:3d:9a:eb:5e:05:a0:c9:ac:dc:7b:1e:c2:98:
8e:34:32:01:b9:98:85:3d:54:19:4d:03:dd:99:5e:
95:37:4d:cb:6b:13:df:69:90:14:42:70:10:6c:18:
4f:35:f2:38:ed:bc:48:a8:fd:f5:8e:ff:3f:a3:aa:
e5:94:b6:56:a1:2b:df:07:03:db:ac:28:eb:c9:b7:
fc:2a:8b:a5:ee:5d:50:7b:a1:3f:d3:fd:10:9b:6e:
30:8e:cc:6a:bd:73:69:5c:90:71:6f:15:4a:f5:54:
4d:c8:28:7f:d7:9d:95:dc:d0:4b:d8:da:f4:6b:2a:
f9:5d:0b:95:75:48:ca:c8:4d:26:53:37:ab:b3:6f:
16:f6:1c:2d:da:ea:00:48:1e:e6:85:4f:bd:ff:40:
7b:25:be:f3:52:91:6a:9f:ca:c9:f4:9e:d5:69:76:
92:95:3f:e8:13:af:87:90:5b:2b:67:71:bc:4d:f6:
07:26:d0:84:2d:f2:e2:1c:67:b2:1f:cf:37:4b:b6:
45:ea:b5:17:aa:15:1a:b5:ea:71:c5:3c:47:9a:02:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:1F:04:83:F7:24:A3:20:C2:C6:66:CD:54:5B:8F:23:4A:2A:69
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/0BgfBIP3JKMgwsZmzVRbjyNKKmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.112.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0f:72:69:e7:0b:13:d3:5b:a9:cb:3b:8c:55:7c:3e:fd:86:
04:e5:f6:dd:67:23:b8:43:e5:41:b7:25:54:4d:80:07:ca:8a:
96:ff:55:22:9d:5f:da:96:df:c1:d5:18:7f:43:66:ea:dd:49:
9c:88:67:37:40:1f:87:86:f1:85:cd:df:95:c4:8c:a2:ad:0e:
fb:1f:94:ca:a7:ca:aa:ef:a9:96:14:c5:61:2b:bf:e1:5d:5d:
bf:04:83:0a:b4:78:1b:bc:11:a8:07:d2:c1:9b:ab:6b:af:24:
81:26:8d:75:4e:23:e8:6f:2b:38:d7:cf:7c:9b:a8:02:e2:b3:
65:fd:ec:55:a8:a7:bf:2e:db:36:5c:a4:86:a2:c0:51:96:ba:
8e:e7:76:32:9d:50:3a:b1:11:9d:df:26:a7:f7:5f:1e:f6:3a:
66:57:e1:3e:21:02:3f:3c:37:2e:33:d4:79:3f:70:ab:fa:a2:
06:1d:3e:9f:fd:bd:d6:20:5c:fd:2f:29:78:33:6b:05:10:27:
cc:87:7b:05:6e:29:7d:7e:8b:5d:29:9f:fa:36:fe:d4:78:82:
30:a4:64:a0:0d:26:cb:ec:05:03:4c:ce:75:72:be:10:c8:55:
3f:40:75:dc:5f:5e:c7:31:74:88:48:28:6a:60:53:53:5f:48:
dd:d0:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:31 2024 by rpki-client on console-ams.rpki-client.org