Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/owGgLm2II_wyrH50PjYKYl9oQOs.roa
File: owGgLm2II_wyrH50PjYKYl9oQOs.roa (raw, json)
Hash identifier: /LLWy8ISz0ohbQeD3TTONBJTE8/Gcj+akKknKqYmbzg=
Subject key identifier: A3:01:A0:2E:6D:88:23:FC:32:AC:7E:74:3E:36:0A:62:5F:68:40:EB
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC492527DBB6D9ABB4737179917A746D8
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/owGgLm2II_wyrH50PjYKYl9oQOs.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206105
IP address blocks: 80.95.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:52:7d:bb:6d:9a:bb:47:37:17:99:17:a7:46:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a301a02e6d8823fc32ac7e743e360a625f6840eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:70:43:cd:1b:0e:b6:00:c0:a9:f6:ec:ad:
20:29:5a:53:25:71:19:87:08:c5:24:a6:36:e9:af:
bd:82:67:ae:3a:7f:af:6f:78:26:3a:3f:ff:25:93:
48:b4:e4:1d:d1:84:ad:d5:0a:43:5f:8e:ba:5e:fa:
29:31:15:35:04:3f:7a:d8:35:fa:8d:0d:5e:c9:0f:
fe:1c:a4:ca:97:e7:a2:4e:c3:84:cf:11:cc:c2:ac:
1b:a0:1b:87:08:a5:ac:ff:f9:56:89:d1:95:07:bc:
85:2d:8c:02:81:79:c2:c1:c4:b3:5c:12:f5:13:7a:
01:31:2b:f0:31:4c:e4:a2:2e:1f:03:11:89:45:5b:
7c:05:be:95:59:70:2c:6d:05:5e:dd:35:31:2d:d7:
44:40:58:2c:f6:bd:c6:79:f3:31:8b:ed:16:f1:6b:
a3:3b:d2:08:0e:48:9c:56:fb:2e:5b:5b:d5:f3:66:
26:c3:6f:26:2b:88:d6:74:50:82:0e:1d:88:5a:19:
80:48:53:a1:9d:a3:ad:89:c2:a8:a8:2a:a3:e2:90:
e3:db:bd:9a:7c:df:f1:ac:fa:30:e7:68:be:fd:0c:
44:38:70:11:ac:5f:de:9d:8f:68:ee:65:7a:14:f7:
db:89:20:ea:30:3b:9f:dd:fb:d7:36:ec:5f:2c:bb:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:A0:2E:6D:88:23:FC:32:AC:7E:74:3E:36:0A:62:5F:68:40:EB
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/owGgLm2II_wyrH50PjYKYl9oQOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:30:38:8d:24:79:dd:75:39:ee:a5:a2:95:fe:6e:4b:3d:8a:
7f:b8:5c:fd:83:52:b1:53:58:69:20:42:1b:64:65:66:ed:e8:
88:3a:8a:46:88:fa:af:98:1c:70:7f:fd:52:7f:21:3c:1b:97:
f9:15:ff:30:44:09:17:c2:d1:7c:d9:b4:c5:de:85:33:57:76:
0e:e4:d9:88:98:59:81:c7:26:51:a1:80:4c:3f:3c:c6:75:7d:
de:75:67:2e:d3:ef:f0:9e:b2:5e:77:c1:02:71:0a:a9:13:9d:
59:45:37:25:64:e9:6e:dd:13:5f:b4:87:ee:e4:a7:63:fd:5d:
7c:4d:25:72:be:09:c8:7c:09:b6:ff:39:76:0f:56:b9:28:81:
6a:4b:e7:c9:f3:44:09:ca:cd:fe:5a:4f:5e:0d:39:ee:24:c7:
80:4d:bb:0b:fb:38:6d:4b:72:6a:a7:15:7d:a6:6b:45:63:c3:
27:95:63:2b:0e:72:99:8f:b1:75:3f:89:ce:ba:67:52:5e:81:
28:ef:11:52:84:62:e9:d2:9e:36:cc:93:8a:9e:7b:59:2d:63:
17:8c:f9:a0:9f:0f:6f:a7:95:5a:0e:04:86:1e:5b:55:23:a0:
bd:43:cf:9b:90:5d:26:0b:71:fb:2b:2c:46:fe:3d:15:7b:00:
0d:c1:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:38:46 2024 by rpki-client on console-ams.rpki-client.org