Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/oo-a44S7TIqo6a7u_RVh26TFcho.roa
File: oo-a44S7TIqo6a7u_RVh26TFcho.roa (raw, json)
Hash identifier: ukM9SAQsS8ui5EqZSKgfLauW+kG2GioEvBWuie00C3s=
Subject key identifier: A2:8F:9A:E3:84:BB:4C:8A:A8:E9:AE:EE:FD:15:61:DB:A4:C5:72:1A
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018CC64A752074242DA6D845B8DD4E8CA2D7
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/oo-a44S7TIqo6a7u_RVh26TFcho.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2.255.190.0/24 maxlen: 24
2.255.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:75:20:74:24:2d:a6:d8:45:b8:dd:4e:8c:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a28f9ae384bb4c8aa8e9aeeefd1561dba4c5721a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:a7:df:0d:f6:b9:b2:cc:09:5d:51:72:04:
bf:25:d9:da:ff:74:40:5c:76:a5:08:23:d3:aa:56:
d3:4f:ee:1a:40:bc:83:60:76:69:64:2c:45:b1:e3:
7e:47:12:56:6e:33:4c:16:e7:1d:98:e5:f8:18:03:
3d:e8:22:7d:91:0e:2e:28:a4:3b:a3:68:57:76:af:
92:7d:d5:7f:9a:2f:b7:4d:4d:53:21:08:d3:a8:df:
20:04:fe:70:74:4b:2d:09:f3:f3:21:be:54:94:b5:
2a:7e:4a:ea:e5:2d:4c:5a:5a:df:f2:50:e3:a4:22:
c0:a4:8d:a4:72:45:99:03:fe:58:f0:bf:76:32:06:
5d:15:f5:1a:9f:72:4e:42:79:ed:da:2d:a0:85:48:
ec:19:05:58:67:b9:3d:64:e1:81:25:de:34:4f:b9:
3f:c8:51:64:d2:82:9c:3a:de:93:da:ee:f6:fc:68:
33:29:d1:19:d7:18:96:bb:e0:31:c9:7f:b5:2d:bd:
25:68:d9:cc:bb:4f:12:77:d9:dd:7b:7e:40:f1:96:
cb:da:fe:3c:e1:99:e7:8d:6c:e5:8f:45:76:a0:31:
ef:3b:c9:02:d2:3e:c3:52:8e:51:37:86:af:c4:2c:
df:dc:29:7a:8e:0a:b9:37:a8:c5:3a:48:43:ea:33:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:9A:E3:84:BB:4C:8A:A8:E9:AE:EE:FD:15:61:DB:A4:C5:72:1A
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/oo-a44S7TIqo6a7u_RVh26TFcho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:0b:26:34:0d:c7:c9:aa:6a:73:c3:ab:e7:d6:38:0b:4e:bc:
dc:06:ff:57:a8:91:7e:a7:83:ba:82:ef:ab:5a:5d:10:2b:c1:
02:1d:75:ee:a2:3a:6b:e0:3f:a7:48:1a:00:c0:07:8f:6e:ed:
16:b2:31:a1:7b:cf:73:63:8b:58:37:c4:5a:89:f6:ba:da:32:
2a:5d:0c:3a:6c:50:63:0d:10:5d:da:5f:09:d8:f7:b5:43:11:
6f:91:0f:30:79:39:ea:85:b4:ee:f9:74:dd:15:6a:85:bf:b8:
ce:f4:4e:8e:a6:79:19:1c:19:f8:61:b1:fc:9f:65:9f:fd:fd:
df:48:d9:e3:cd:4d:02:25:ef:d0:da:58:e8:82:b1:0a:8f:80:
1c:27:d0:ba:3c:46:ed:98:37:b8:9d:5c:56:60:e0:35:53:f3:
1b:8d:81:20:36:aa:2e:74:d9:ec:90:07:91:9e:09:88:db:11:
a6:ec:ee:3f:7b:70:42:21:07:9b:46:07:1c:cd:c1:00:ab:c0:
32:33:f8:06:d3:b0:c1:47:34:94:17:cf:5b:8a:3e:7a:dc:30:
10:65:1b:6a:43:01:f2:11:71:db:73:fd:7e:3c:62:96:b7:78:
2d:1a:4c:40:9b:8d:20:74:1f:3f:8e:f9:4f:77:7a:8b:a2:67:
2f:33:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:54:54 2024 by rpki-client on console-ams.rpki-client.org