Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/oooFoCxZnZCzUE1-SSZ1tg8fSCs.roa
File: oooFoCxZnZCzUE1-SSZ1tg8fSCs.roa (raw, json)
Hash identifier: 7fFQYiASMAeYLnriEXjZ4ARaj6276ifAjfJKll91RCc=
Subject key identifier: A2:8A:05:A0:2C:59:9D:90:B3:50:4D:7E:49:26:75:B6:0F:1F:48:2B
Certificate issuer: /CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Certificate serial: 018CC79354ADBEF5DD042B280D91688AAE67
Authority key identifier: 13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/oooFoCxZnZCzUE1-SSZ1tg8fSCs.roa
Signing time: Tue 02 Jan 2024 00:29:30 +0000
ROA not before: Tue 02 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59848
IP address blocks: 146.19.242.0/24 maxlen: 24
2a0c:e880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:54:ad:be:f5:dd:04:2b:28:0d:91:68:8a:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Validity
Not Before: Jan 2 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a28a05a02c599d90b3504d7e492675b60f1f482b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:50:93:0d:ed:6e:9c:a3:29:36:c4:1d:d6:
b1:be:3b:35:33:d9:7d:f8:cf:26:4d:ec:b7:84:d4:
27:80:8c:db:5f:5a:e1:68:72:61:f0:f0:d6:c2:f6:
41:ae:74:9d:e6:23:ee:7c:74:03:a7:49:55:fc:fe:
fe:67:f0:1d:d6:bc:44:8c:68:50:12:71:3b:67:8b:
c3:c2:50:2c:9e:b5:2d:20:38:9b:b9:1c:ad:07:3d:
07:a7:2f:0f:23:d0:a5:53:b9:7b:58:6d:6f:c5:38:
0d:ae:a8:36:64:20:e7:de:de:1e:b2:44:ab:68:03:
69:55:54:e5:d9:9d:50:9d:2a:cb:e7:95:36:95:8e:
77:91:27:b1:0f:15:f5:4c:f3:53:ec:08:41:51:bc:
bd:e9:f8:63:6a:71:b0:d8:93:14:0a:38:b8:bc:e4:
e8:1a:ba:0f:ab:16:fb:e7:c3:01:f0:66:4f:65:ea:
79:45:8f:a8:8d:25:1b:6a:fc:92:73:25:32:40:71:
1f:64:ff:59:6e:bb:bc:8b:b1:e2:11:ea:58:3c:f7:
7f:7d:72:a2:50:85:18:12:7e:78:b1:a6:c9:c3:64:
24:d4:87:c1:1d:32:56:3a:2d:4d:57:d4:0a:5f:27:
27:f5:aa:eb:25:5b:a7:c8:93:5d:a0:b7:28:5c:d3:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8A:05:A0:2C:59:9D:90:B3:50:4D:7E:49:26:75:B6:0F:1F:48:2B
X509v3 Authority Key Identifier:
keyid:13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/oooFoCxZnZCzUE1-SSZ1tg8fSCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.242.0/24
IPv6:
2a0c:e880::/29
Signature Algorithm: sha256WithRSAEncryption
80:b5:fb:26:4a:10:1c:c8:27:f9:7b:d6:3f:ae:a9:6e:cc:4c:
ad:9e:df:47:6c:77:99:e0:e6:69:66:9d:da:e3:b8:89:e7:a2:
65:81:1f:ed:cd:f8:59:c5:03:6e:cf:41:e6:ae:4b:94:56:83:
b9:3f:39:c0:7d:77:60:a8:93:7e:aa:69:17:f2:e2:0b:c8:d0:
6a:c5:c5:75:9c:ff:3e:a1:cc:a4:30:7d:bf:9b:2a:27:84:5a:
7a:3d:8d:57:6f:93:8e:19:63:91:b6:23:b9:0a:0c:03:65:19:
dd:4e:dd:3f:99:41:11:9e:b2:77:20:ce:65:b1:9f:b9:6a:fb:
db:a0:7c:64:be:1c:78:53:b3:70:f2:af:12:4f:89:f3:b8:c2:
a0:13:bf:7e:2e:6b:0d:79:06:9e:54:3e:da:61:8b:7c:2c:67:
d1:93:20:06:1b:62:bc:86:55:99:19:5c:bb:26:00:94:96:57:
0f:01:b1:e1:e6:a8:14:5f:30:12:92:c2:47:59:95:1a:c7:8c:
37:be:db:18:c7:c3:29:be:83:bd:f9:0b:3e:63:2f:f2:c7:a0:
7a:4d:08:2b:ca:b6:f3:e9:b0:56:7b:19:aa:01:24:5f:25:51:
1b:6f:c6:c8:a0:44:a1:4c:bf:ce:83:73:53:59:5a:45:c5:46:
01:a8:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 08:44:19 2024 by rpki-client on console-ams.rpki-client.org