Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/oFIy6aalwJN43_ICk21upBPQ2aY.roa
File: oFIy6aalwJN43_ICk21upBPQ2aY.roa (raw, json)
Hash identifier: EDGXxb+PE4dO5kOe3fdyodp1+vF1CX/8SnY+e8ef5D0=
Subject key identifier: A0:52:32:E9:A6:A5:C0:93:78:DF:F2:02:93:6D:6E:A4:13:D0:D9:A6
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 018CC348A19BA732459C1608369372109420
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/oFIy6aalwJN43_ICk21upBPQ2aY.roa
Signing time: Mon 01 Jan 2024 04:29:26 +0000
ROA not before: Mon 01 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8787
IP address blocks: 195.88.10.0/23 maxlen: 23
2001:67c:2090::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a1:9b:a7:32:45:9c:16:08:36:93:72:10:94:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jan 1 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a05232e9a6a5c09378dff202936d6ea413d0d9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:52:6c:6a:d3:35:0b:26:a7:63:d2:c1:bf:
0c:df:4f:00:7d:f7:81:98:91:1a:9f:f9:97:92:b5:
d1:d7:d1:00:dd:fb:6f:6e:dd:f5:be:9b:0e:d2:17:
06:27:81:a1:c2:73:4c:e5:29:2c:75:01:91:ed:d4:
77:f6:75:35:30:90:d9:43:7f:6e:53:38:98:fe:2e:
4c:c0:34:7c:c4:4a:f7:b8:4c:0b:49:5f:23:aa:57:
0a:f2:5b:be:06:31:41:03:2d:80:9f:d7:96:a1:7f:
40:f6:e8:27:8b:67:13:96:57:2d:78:62:47:97:d4:
bd:a5:2a:57:c4:ee:84:be:6b:29:1d:2b:60:0d:61:
d3:b6:56:ec:7c:29:1c:76:4e:e2:03:58:37:28:6f:
87:fd:9e:ff:c8:b6:f6:6a:59:b9:c2:ea:72:31:54:
6b:9f:c7:96:79:89:96:17:d6:b9:cb:3e:c6:c3:df:
da:11:3b:49:1b:29:55:87:ec:bd:db:c0:8c:c2:20:
fb:97:df:9b:3b:92:14:7a:e8:a7:d5:51:d2:8e:66:
20:69:a1:c4:14:89:7e:f2:8f:44:1f:4d:1a:d7:63:
97:21:3b:18:22:0f:bb:d1:b1:65:35:94:8d:81:6d:
b8:95:95:8d:c9:e7:52:92:cc:58:bf:5a:33:9b:8b:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:32:E9:A6:A5:C0:93:78:DF:F2:02:93:6D:6E:A4:13:D0:D9:A6
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/oFIy6aalwJN43_ICk21upBPQ2aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.10.0/23
IPv6:
2001:67c:2090::/48
Signature Algorithm: sha256WithRSAEncryption
06:03:a1:27:26:05:1a:72:06:4e:33:34:54:6c:e7:aa:12:89:
5c:71:58:32:13:b0:a7:d8:8a:d1:3c:d0:8d:55:13:c5:df:32:
55:61:4a:16:33:15:00:2a:48:8c:f7:01:d4:44:e8:f5:4b:71:
34:08:a0:f7:fe:5c:e4:ac:13:f6:33:7f:b0:54:8c:3d:60:34:
13:71:5d:3b:fc:b7:33:59:41:b7:6d:51:68:58:d7:c4:bf:2f:
23:5b:2e:d1:f4:33:a2:f9:e5:1e:5f:50:7b:ae:e3:05:8f:3a:
1a:ae:cf:eb:05:39:24:f4:e3:af:af:c9:06:21:8c:9d:71:48:
fd:f5:98:3c:a8:d5:4d:a3:b9:ed:4d:ae:bb:b7:54:0c:19:5f:
cc:f2:39:06:5b:23:6b:09:c4:4e:cf:79:24:84:e4:4e:a2:09:
7c:bf:68:4d:36:4f:26:00:db:9f:37:a9:4f:f0:1f:8f:e7:73:
d5:ef:3f:7a:d1:f1:6b:6a:7b:ae:df:71:c2:f5:f1:9c:75:7a:
32:15:d4:fa:fa:fd:be:f7:bc:5b:6c:fc:75:24:88:fd:0a:b3:
7e:6e:2a:20:4b:b1:a9:46:48:e0:07:a4:88:72:85:c4:47:9a:
15:bb:94:29:68:37:b9:37:9e:15:38:8a:6b:28:94:e8:81:3c:
51:0f:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:48:27 2024 by rpki-client on console-fra.rpki-client.org