Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OW-MHnFcbEkUOzZ-Yq--hgmxEn4.roa
File: OW-MHnFcbEkUOzZ-Yq--hgmxEn4.roa (raw, json)
Hash identifier: ODq+juWSjK+Nolo/Sx0p1B/IZKEaPFuDHAaBWQ4+vl0=
Subject key identifier: 39:6F:8C:1E:71:5C:6C:49:14:3B:36:7E:62:AF:BE:86:09:B1:12:7E
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0191FA3D06791D6103ED38680E49CFA23B63
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OW-MHnFcbEkUOzZ-Yq--hgmxEn4.roa
Signing time: Mon 16 Sep 2024 09:49:48 +0000
ROA not before: Mon 16 Sep 2024 09:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 80.246.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:3d:06:79:1d:61:03:ed:38:68:0e:49:cf:a2:3b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Sep 16 09:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=396f8c1e715c6c49143b367e62afbe8609b1127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:f1:b3:58:c3:cb:0a:60:30:75:ae:86:40:
ae:2d:8d:f1:63:88:31:32:30:f7:84:9d:ae:57:d8:
6e:88:1e:31:1e:5e:23:50:19:76:88:ee:90:65:d4:
06:f3:31:88:da:c1:10:92:2b:d7:57:8d:3c:11:6d:
ff:e4:2b:2b:35:e3:58:42:0f:aa:33:79:2c:d1:12:
13:8e:b1:6c:3d:8b:d9:5a:89:90:d9:f9:8d:7c:72:
34:9c:d1:39:1f:04:0b:95:95:2d:a8:de:01:a8:a1:
25:9b:4d:dc:9e:00:8b:06:60:87:19:c1:c1:4b:58:
8e:06:a4:1e:95:c8:ab:0e:14:6a:cf:ab:f1:f8:da:
0f:2e:f7:1b:ab:21:a9:b9:25:32:ad:04:df:51:58:
ba:7b:8a:7c:90:4b:cd:d2:64:e1:de:19:14:b3:80:
d9:b3:a6:7b:5c:a0:cd:d8:9d:62:70:e8:03:7c:a8:
76:35:42:a8:6c:c0:39:1b:24:62:03:33:9c:8a:cf:
e5:51:3e:e2:49:2c:e6:dd:6e:e7:85:f1:d4:16:92:
c6:32:59:b2:be:80:a5:91:56:50:ca:12:25:2d:0c:
02:3b:dc:d7:77:3b:33:af:d2:c6:cb:cb:f5:fc:b8:
97:29:0c:12:91:6e:8a:b6:68:6b:24:67:39:53:25:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:8C:1E:71:5C:6C:49:14:3B:36:7E:62:AF:BE:86:09:B1:12:7E
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/OW-MHnFcbEkUOzZ-Yq--hgmxEn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.224.0/24
Signature Algorithm: sha256WithRSAEncryption
80:06:64:aa:10:96:72:7d:71:b0:12:b6:ae:9c:e2:58:c7:6e:
62:90:e7:93:58:04:f3:b0:09:23:e5:7b:14:61:76:ef:db:ad:
37:80:15:f9:d6:aa:33:9a:fb:d7:4c:7f:4f:fb:b7:97:56:59:
41:ea:28:12:06:02:dd:34:e3:53:d4:fe:8c:05:93:fa:20:91:
76:eb:5a:6c:c0:c9:12:89:c6:b4:5a:66:17:40:70:07:23:b9:
5e:3b:e4:b3:cd:04:5d:14:61:73:1c:b8:4d:c6:19:34:c9:ab:
78:80:c0:e4:4c:76:56:a4:16:77:00:f6:bd:65:1b:9a:ac:f7:
7f:09:1e:6b:7e:f6:eb:e6:8a:78:16:41:4a:85:1c:f7:bc:2a:
dd:1c:3a:50:db:41:1c:60:97:f1:6d:8c:29:20:9e:7d:39:2c:
f2:a6:03:7c:d7:f3:98:0e:35:0e:a4:de:b5:9f:85:c5:12:8e:
e9:4d:f5:24:0c:6f:e0:31:62:9f:71:a5:32:9b:d5:f0:4a:51:
64:3c:6b:03:a5:7a:8a:56:c5:35:44:51:5b:e4:c9:f0:7b:c2:
cc:ab:eb:cb:e3:2a:1e:1b:20:64:bf:d8:bc:b4:8b:e4:b4:9b:
7d:08:44:67:96:8b:86:03:29:59:4e:b0:4b:15:d3:ff:d6:2c:
46:cc:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:37 2024 by rpki-client on console-fra.rpki-client.org