Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/OXBgfnekntIb1iy2BFb5kUs5B2U.roa
File: OXBgfnekntIb1iy2BFb5kUs5B2U.roa (raw, json)
Hash identifier: K/97SWbdCaI1MZ1furpLEbIsG54VcuWt8jAeQfqF45Q=
Subject key identifier: 39:70:60:7E:77:A4:9E:D2:1B:D6:2C:B6:04:56:F9:91:4B:39:07:65
Certificate issuer: /CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Certificate serial: 018CC5008317EFCAA3EC1FA6E8A5DC0B72BF
Authority key identifier: 30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/OXBgfnekntIb1iy2BFb5kUs5B2U.roa
Signing time: Mon 01 Jan 2024 12:29:54 +0000
ROA not before: Mon 01 Jan 2024 12:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211721
IP address blocks: 194.153.135.0/24 maxlen: 24
2a10:9f42::/31 maxlen: 31
2a10:9f46::/31 maxlen: 31
2a10:9f40::/31 maxlen: 31
2a10:9f44::/31 maxlen: 31
2a10:9f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:83:17:ef:ca:a3:ec:1f:a6:e8:a5:dc:0b:72:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300777c3b44144fd3056bf4b845450cb7fab9c2d
Validity
Not Before: Jan 1 12:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3970607e77a49ed21bd62cb60456f9914b390765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:cf:e0:46:95:f3:f8:df:2d:c3:6d:af:58:
ca:02:43:1c:40:5e:5c:4f:0e:dd:0d:aa:9c:4d:9d:
2e:96:8e:e3:fb:b8:e5:c6:d9:e1:4f:bb:af:8c:36:
b8:8a:d8:52:4a:b4:53:55:91:9d:65:68:9d:40:e0:
b5:c3:d1:56:30:fe:c7:df:21:e8:72:98:04:c3:38:
90:61:3e:94:70:e6:19:d7:2b:ca:a5:a4:ed:20:15:
1a:3c:c2:ab:5b:31:82:d9:cd:e3:96:af:7d:71:67:
40:cf:a8:fb:29:ca:0f:2f:68:5a:e1:3f:cf:cc:e2:
b4:e2:a9:7f:7a:71:6d:20:2e:72:2b:5f:62:a2:7d:
8d:d6:7b:6a:cb:dc:c6:b0:d6:b1:91:9d:ee:bb:dc:
cb:1e:e4:5f:8a:7a:5d:6c:24:9c:a4:42:87:c9:54:
88:53:fe:0a:9a:91:dd:ff:19:5c:3c:82:a5:c8:d1:
01:50:72:d6:8f:fa:8d:a1:db:b8:ef:86:0d:cf:60:
e8:de:0b:c3:5a:17:cc:df:b8:fe:b5:09:dd:b7:0d:
2c:22:c1:ff:59:89:bc:7e:91:6c:1f:77:36:05:f7:
a5:17:46:15:e9:77:ea:75:e3:aa:26:d1:9c:39:94:
d6:2e:61:0e:31:f5:5d:f4:19:79:93:da:f7:b2:98:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:60:7E:77:A4:9E:D2:1B:D6:2C:B6:04:56:F9:91:4B:39:07:65
X509v3 Authority Key Identifier:
keyid:30:07:77:C3:B4:41:44:FD:30:56:BF:4B:84:54:50:CB:7F:AB:9C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAd3w7RBRP0wVr9LhFRQy3-rnC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/OXBgfnekntIb1iy2BFb5kUs5B2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/942022-4fb3-461d-b456-1526cb9abf9b/1/MAd3w7RBRP0wVr9LhFRQy3-rnC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.135.0/24
IPv6:
2a10:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
42:a6:61:d1:34:08:ab:46:94:c9:58:01:a2:17:27:2e:42:33:
54:00:0e:b4:bc:59:e5:57:a7:66:f4:c6:38:80:b9:6e:46:fb:
c0:7d:8b:24:c2:69:69:a7:0c:cf:71:e9:9b:60:1c:56:d9:db:
15:14:5a:40:7f:69:d3:20:d3:0b:fc:fe:98:10:2a:92:1e:04:
1c:5e:4e:9b:bf:ea:98:6b:2e:70:43:35:af:c3:55:6c:47:e9:
13:67:a8:af:1a:58:a9:cb:c8:c8:b8:7e:b2:7c:ff:83:dd:88:
bb:47:0b:f6:2d:47:c1:b3:05:f5:ed:89:a9:ec:6c:a2:c1:f1:
2c:38:8a:12:16:45:6b:05:39:5c:19:f6:aa:0f:f6:7f:c3:b4:
7e:ee:e9:88:e4:1d:78:1b:90:52:9f:14:1b:5f:77:5b:68:16:
5e:ce:1f:fe:0c:7a:0e:9e:c2:f7:7d:b1:4f:4e:85:f7:69:60:
0c:e9:ed:da:fa:64:de:d2:e3:de:66:62:e6:a2:7c:e3:db:41:
97:f9:d1:56:d3:34:33:60:b0:ea:b0:a8:88:c1:d9:94:0e:c0:
8f:1e:72:de:df:80:c1:5e:a7:c2:5b:a8:12:28:7c:18:65:e4:
80:ad:e4:06:2a:e3:61:a0:77:a2:26:d5:cb:7e:bc:17:1c:45:
22:eb:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:37 2024 by rpki-client on console-ams.rpki-client.org