Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/ogWOf9bTQe_2f3k_b04UkLXohNQ.roa
File: ogWOf9bTQe_2f3k_b04UkLXohNQ.roa (raw, json)
Hash identifier: bgvU2zf3tsBQoXPVvkwb23EGiwRi7NPGScTQkkgsPEI=
Subject key identifier: A2:05:8E:7F:D6:D3:41:EF:F6:7F:79:3F:6F:4E:14:90:B5:E8:84:D4
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 018CF516EF36CA65382C6243A55B97CD699E
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/ogWOf9bTQe_2f3k_b04UkLXohNQ.roa
Signing time: Wed 10 Jan 2024 20:36:10 +0000
ROA not before: Wed 10 Jan 2024 20:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.117.11.0/24 maxlen: 24
185.117.8.0/24 maxlen: 24
185.117.9.0/24 maxlen: 24
185.117.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:16:ef:36:ca:65:38:2c:62:43:a5:5b:97:cd:69:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Jan 10 20:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2058e7fd6d341eff67f793f6f4e1490b5e884d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:60:ee:8a:70:67:a3:42:f2:bc:c6:22:fe:
80:05:b1:48:51:89:9c:bd:b4:37:e6:24:af:c2:49:
f3:32:19:1b:aa:8e:8d:c3:e1:ca:07:0a:ea:93:56:
16:4e:3d:41:8b:07:a9:01:13:fa:4b:e0:5f:1a:9b:
bb:b2:54:a2:cb:7c:6a:f5:9b:a2:a1:fc:2f:85:fe:
41:e9:d9:89:a4:33:5f:c1:b6:2a:b3:8c:4e:06:ab:
dd:2c:a5:3f:16:17:4f:19:06:77:64:d7:dd:93:7c:
67:3a:df:14:3e:66:c4:70:d7:70:b5:24:0f:46:25:
63:00:f1:c8:2e:cd:c2:1c:59:bc:0b:d4:e5:45:b2:
c2:b3:51:c6:b9:c5:f1:7b:81:71:36:76:bf:19:a7:
bf:8d:46:e6:7b:f4:e1:cb:56:22:d8:4e:85:c5:22:
6e:c7:26:72:8a:52:ec:4a:5c:9b:26:5c:26:f1:91:
fd:c0:4d:25:d5:6b:cd:4c:2e:57:fc:69:f5:fa:41:
e3:87:1c:14:00:01:75:7a:9d:1a:2d:81:f4:64:3f:
78:b3:71:56:b9:10:db:e6:a6:b7:8b:01:15:c9:e1:
86:4a:47:1f:47:95:3b:ac:76:9b:e8:1e:53:99:9a:
70:ae:86:5d:e1:07:25:42:b9:1c:64:30:a9:97:c7:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:05:8E:7F:D6:D3:41:EF:F6:7F:79:3F:6F:4E:14:90:B5:E8:84:D4
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/ogWOf9bTQe_2f3k_b04UkLXohNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.8.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ac:79:26:12:48:f4:7f:70:5d:0e:b0:96:c3:a5:19:75:a4:
5a:4c:5f:b0:84:85:6e:e8:c7:f5:cb:9c:56:02:f2:43:af:ea:
d3:32:5d:d2:13:e3:27:a0:a9:2d:36:12:54:48:98:65:29:1b:
b4:91:9b:78:f8:5c:ca:e4:bf:b0:ae:0b:e9:b2:d5:f5:1f:ec:
00:31:1a:e1:ae:cc:11:97:a9:ef:aa:93:4e:6b:ab:5d:77:2a:
e9:ae:29:74:d9:db:36:c7:10:e7:08:51:75:2d:11:7c:dc:0d:
72:fe:c2:3b:88:46:d2:ed:ea:dc:93:4e:c2:00:f0:ee:5d:b8:
34:3a:40:09:7d:ed:71:1b:ef:ac:f7:16:46:32:c0:49:ed:7e:
19:2f:0c:bf:d7:c6:6a:e8:76:85:b1:11:a2:30:7d:af:6a:bb:
58:73:e2:d4:bd:54:63:17:8c:73:a1:39:e8:19:ae:0b:29:e3:
86:17:f3:13:75:34:54:7a:52:42:59:0a:be:4a:34:65:60:7d:
41:c4:15:23:6a:54:5d:64:07:03:52:af:0b:5e:1a:c4:88:96:
5b:92:c6:30:22:c0:5d:14:e7:71:54:88:c6:87:1d:c2:0b:25:
16:9f:a7:7b:11:ca:c1:be:24:6f:f9:3d:25:e6:70:a8:38:c8:
05:01:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:53:02 2024 by rpki-client on console-ams.rpki-client.org