Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/oittcbGIy7t9NUtqwLKIUNiePkE.roa
File: oittcbGIy7t9NUtqwLKIUNiePkE.roa (raw, json)
Hash identifier: kb1BMlgbCXeUOmCPEaX7Zfkuk1RGwVF/brX384Ww3bc=
Subject key identifier: A2:2B:6D:71:B1:88:CB:BB:7D:35:4B:6A:C0:B2:88:50:D8:9E:3E:41
Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial: 01902FA3FC5A241B16F96E0F3D384FCFF836
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/oittcbGIy7t9NUtqwLKIUNiePkE.roa
Signing time: Wed 19 Jun 2024 08:36:34 +0000
ROA not before: Wed 19 Jun 2024 08:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41522
IP address blocks: 194.9.52.0/23 maxlen: 23
195.93.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:a3:fc:5a:24:1b:16:f9:6e:0f:3d:38:4f:cf:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
Validity
Not Before: Jun 19 08:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a22b6d71b188cbbb7d354b6ac0b28850d89e3e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:fe:de:56:8e:60:3a:3a:67:c9:b4:2e:fc:d3:
c1:65:49:df:2f:ad:5b:b0:b6:79:ed:74:7b:99:b5:
6a:53:53:cd:fc:0e:ee:d6:fc:fd:7c:f5:fd:70:5e:
fa:82:4b:e7:22:20:3d:3d:0d:2a:52:58:2c:46:ad:
55:6e:38:46:e7:1f:e6:96:e7:99:60:74:16:7d:41:
5b:5f:6e:3e:74:d3:76:0a:d4:20:90:ef:c3:56:37:
b7:65:91:73:c2:90:ae:ee:55:02:74:ce:5f:9f:87:
c3:a9:47:fe:fd:9f:ed:ff:21:27:af:54:9d:ac:6e:
9c:06:8d:88:76:aa:a2:0d:8a:65:5f:a9:2e:73:18:
1c:58:f1:c5:2d:1c:48:4f:13:f1:95:a1:b9:77:e3:
2d:cf:cd:23:25:70:0c:b5:dc:d8:7f:4c:b8:4b:f7:
e7:d9:a8:63:94:03:1c:ec:63:b8:50:c2:77:4d:87:
86:8c:21:b7:73:15:42:16:f2:98:45:fb:17:31:19:
be:58:44:85:2e:7c:d4:ec:58:d9:82:aa:f3:88:30:
10:d1:49:7c:dc:85:8e:f9:59:54:a0:f6:7f:25:ed:
18:33:19:04:43:55:d4:6a:2b:2d:ee:8a:88:c1:54:
d3:7b:53:3e:8a:7d:b4:6a:e1:6a:dc:36:2c:ea:ac:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:6D:71:B1:88:CB:BB:7D:35:4B:6A:C0:B2:88:50:D8:9E:3E:41
X509v3 Authority Key Identifier:
keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/oittcbGIy7t9NUtqwLKIUNiePkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.52.0/23
195.93.250.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:9e:a4:07:b7:13:d4:2c:09:ab:8e:d3:98:df:eb:03:fb:dd:
c0:ff:a1:8b:e6:ab:f8:f3:14:ff:e4:45:a3:40:f9:17:fa:4d:
28:56:81:53:7d:0e:7d:d1:7b:e5:b0:06:f1:a5:3c:42:ae:36:
92:46:c1:08:d3:e0:31:4f:3e:1a:4f:eb:76:b9:0b:ed:da:b2:
29:1d:40:d1:e8:e1:8f:fc:86:7f:f3:ba:e0:83:2a:5b:05:1b:
2d:24:78:10:47:97:05:31:9e:5b:73:d7:18:11:73:6e:02:c6:
9b:8e:5d:44:1e:13:7b:b6:60:cd:45:10:e5:f9:bc:63:ad:e9:
46:e0:46:16:b3:d5:87:20:04:24:95:d0:24:a1:0b:52:5e:68:
24:6c:99:ec:ba:b5:24:5d:87:a2:35:37:4e:ac:cd:0e:c2:74:
1d:2f:52:c5:04:1b:7f:f3:bc:fa:e3:62:34:9f:4b:86:3a:93:
c1:3a:3d:e7:c5:5e:30:ce:04:a6:ff:30:f4:2a:70:2c:d9:d2:
84:76:17:7c:2b:f1:b1:47:4d:5e:55:74:3d:2c:26:e2:bd:30:
5c:77:0b:50:44:88:08:78:60:06:08:8e:8f:3b:84:87:1c:c4:
4f:4e:e2:76:b3:eb:7f:f0:a1:5e:f6:3d:3d:89:1e:ef:17:8d:
23:6c:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:35:43 2024 by rpki-client on console-ams.rpki-client.org