Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/m-oc_A6ovxSCdRXBe84XB4RKw2E.roa
File: m-oc_A6ovxSCdRXBe84XB4RKw2E.roa (raw, json)
Hash identifier: pRVHQM2h/gVXG01VcJQd9QbPzX99593m9vEqvvK+y5Q=
Subject key identifier: 9B:EA:1C:FC:0E:A8:BF:14:82:75:15:C1:7B:CE:17:07:84:4A:C3:61
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018CC5DC1D26493BF406058E132468F51A2A
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/m-oc_A6ovxSCdRXBe84XB4RKw2E.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49135
IP address blocks: 80.123.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1d:26:49:3b:f4:06:05:8e:13:24:68:f5:1a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bea1cfc0ea8bf14827515c17bce1707844ac361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:aa:c6:c4:1c:b4:13:1a:51:07:fe:0f:83:0b:
60:3c:e9:93:f7:70:4f:c7:fd:f7:d3:90:36:59:5b:
25:53:25:fd:9c:0b:02:44:c5:02:b1:23:16:82:cc:
81:96:ac:df:1f:db:3e:ae:ec:83:ba:1f:f8:c6:7e:
a6:16:07:88:4c:7b:2b:ba:c6:9c:09:bf:76:6d:02:
67:77:0b:f5:52:c4:d6:1c:00:3b:cd:5f:d7:74:19:
db:e2:4d:b5:f4:85:15:62:79:93:16:3d:b9:dd:b3:
53:42:d1:c1:6f:4e:85:6a:b0:db:23:c3:63:6b:df:
1d:15:b1:bf:66:e2:e4:5f:ba:50:fc:33:b6:d8:58:
ee:c1:52:72:52:a0:3f:14:0d:22:7d:52:90:1c:10:
f7:73:86:4b:80:8e:20:73:09:31:0c:e8:b3:81:ef:
80:5c:26:d8:c8:90:b6:7c:ad:1c:0f:e0:3d:c4:36:
3f:5e:02:1e:d3:18:86:b6:d1:51:8e:c3:36:76:5a:
f2:84:83:b1:a0:e0:80:b6:b0:a2:5c:a9:1f:b4:d9:
1e:d1:40:a7:fb:6b:18:4e:0b:9d:fa:7d:8d:01:15:
8f:ee:ce:2e:91:1d:20:21:d3:43:3b:cc:6f:9a:fb:
cc:82:a5:c8:c5:55:38:9f:50:4e:35:56:aa:2e:0e:
12:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:1C:FC:0E:A8:BF:14:82:75:15:C1:7B:CE:17:07:84:4A:C3:61
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/m-oc_A6ovxSCdRXBe84XB4RKw2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.123.153.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:49:89:98:bb:f0:2e:9a:64:39:7c:95:36:bf:36:61:59:3a:
c5:d0:65:cb:32:f2:b6:88:e7:af:53:2b:3f:48:ff:47:9f:4d:
96:7a:3e:55:3a:ae:d7:25:04:c0:5a:69:61:e3:fc:ea:f5:a8:
86:38:57:00:3d:43:1d:a9:cc:9e:df:07:91:f6:28:64:bb:c4:
1c:d2:11:57:2d:7f:7d:96:a0:b9:05:ca:ab:c6:3b:79:00:43:
36:f9:3a:c9:78:d2:89:84:9d:73:e9:d8:80:7e:d3:72:a8:bf:
1f:cf:d8:7b:cd:a2:95:e7:04:ea:b0:69:19:13:ed:86:d0:2f:
e1:92:77:c2:41:f1:ad:99:d9:4e:ee:08:45:ac:3f:d5:c7:ad:
be:d0:05:a1:f9:8d:8e:f1:a0:98:d5:f9:ce:41:ea:ea:a1:03:
97:5d:8e:4b:51:49:ea:c7:3e:37:5d:30:37:87:49:c2:7f:ce:
ba:cc:3b:b4:4e:06:86:df:2f:e9:b8:39:45:fc:00:1b:0e:a3:
a9:1a:aa:90:df:f6:9b:49:db:ec:1c:9a:1d:6d:1c:af:f9:99:
e7:93:04:22:ae:05:58:80:09:1d:79:f5:2d:6d:6e:15:f9:bd:
5d:e2:40:b0:35:fc:2c:27:09:ff:7d:27:2c:52:46:a7:a8:1d:
fd:81:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:14:54 2024 by rpki-client on console-ams.rpki-client.org