Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ONQ6m9RH_jQrVocIk_ZT988sP1o.roa
File: ONQ6m9RH_jQrVocIk_ZT988sP1o.roa (raw, json)
Hash identifier: 5KbB+O5qyUkq0mctiRtCCY/nfHphN/7IrLvy0f8WUwQ=
Subject key identifier: 38:D4:3A:9B:D4:47:FE:34:2B:56:87:08:93:F6:53:F7:CF:2C:3F:5A
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA993CFB6CF656A33E5339872550B4FB
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ONQ6m9RH_jQrVocIk_ZT988sP1o.roa
Signing time: Tue 02 Jan 2024 14:34:49 +0000
ROA not before: Tue 02 Jan 2024 14:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212036
IP address blocks: 87.107.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:3c:fb:6c:f6:56:a3:3e:53:39:87:25:50:b4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38d43a9bd447fe342b56870893f653f7cf2c3f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c9:08:12:dd:72:35:a6:8e:e6:28:ac:20:dc:
23:2b:60:c9:bf:14:45:c5:f4:f7:21:e8:59:fd:f4:
80:cc:f2:d5:1f:dc:7e:00:a0:38:d9:23:1d:79:be:
9a:7b:f5:1c:c0:fa:50:3c:64:a1:46:a3:35:34:25:
14:0f:5d:59:a3:7b:3c:91:5b:af:8a:74:2a:ce:0f:
77:e9:16:db:fb:77:83:88:e6:f3:34:d5:56:00:ca:
8f:7f:1c:c7:e0:10:f2:6a:f4:cc:5b:64:84:4a:77:
95:71:d1:76:f8:23:22:54:17:ff:54:d0:9d:cc:11:
8b:c0:5b:24:0a:6d:07:2a:7b:d2:f1:9a:e8:8b:b0:
43:d0:8d:70:96:71:b9:6c:e1:28:6a:4f:c5:af:79:
a4:e4:c0:71:34:2c:97:06:ab:9b:ec:5b:1d:93:c2:
ef:34:54:99:48:87:5e:35:f8:58:14:a4:79:3a:e4:
fe:20:9e:5f:ab:13:ba:73:8e:11:3c:e2:20:86:38:
5d:a8:0c:b9:64:b3:73:3c:61:8b:bb:13:00:0e:d7:
4b:b5:17:53:84:58:8c:85:ae:11:37:d5:37:67:46:
3e:34:f0:78:05:46:49:e0:77:67:35:45:a1:46:62:
c0:30:ad:6c:1c:f2:99:99:e6:b6:40:2a:c8:9f:47:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D4:3A:9B:D4:47:FE:34:2B:56:87:08:93:F6:53:F7:CF:2C:3F:5A
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ONQ6m9RH_jQrVocIk_ZT988sP1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.101.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ed:b3:51:bf:2c:f6:cc:3b:89:7e:cc:81:c3:4f:95:89:55:
07:26:2b:0f:49:0d:74:bb:f8:9a:e4:1f:16:2c:ba:6f:bb:a8:
b1:2c:f0:3d:30:ed:58:de:8c:ff:51:8b:51:4a:5c:98:c3:05:
64:d3:30:8a:02:a1:c1:65:ec:f4:69:02:e0:e3:a4:3d:34:3e:
f7:89:b2:ab:c5:36:15:eb:2a:14:11:d8:e2:2c:77:f7:6b:13:
53:e2:32:3e:df:d7:2e:28:09:cc:2d:0c:7c:04:20:03:71:03:
64:c6:8e:69:17:aa:09:4e:4a:68:2d:f1:46:7f:3e:11:57:73:
0b:01:23:58:e5:44:34:14:54:39:b5:9a:ff:f8:fc:95:86:98:
6f:78:30:91:31:33:7e:71:64:fd:36:90:61:55:e4:dd:b3:cd:
ab:18:4d:9e:61:d5:55:5e:0b:d3:59:7f:86:06:37:71:d2:f0:
50:b8:7c:88:52:a7:c8:f5:a5:64:69:80:b2:1a:ab:47:59:2c:
c9:12:70:5e:34:fb:ab:e6:d7:f1:e8:f0:af:e7:56:7a:e7:21:
e5:18:6f:92:bc:01:08:fe:f8:6b:e8:81:5e:ea:6b:62:ab:c3:
3d:e7:60:30:77:e9:e4:7c:b4:07:e7:54:bd:aa:64:76:31:ca:
9a:11:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:35 2024 by rpki-client on console-fra.rpki-client.org