Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/OXN_WaCHC8_sZGStfh8gpmBcemI.roa
File: OXN_WaCHC8_sZGStfh8gpmBcemI.roa (raw, json)
Hash identifier: 3FTilvPSp9cq3etNhWqaULDyT2VNdwAVZ6h0I2JPx/M=
Subject key identifier: 39:73:7F:59:A0:87:0B:CF:EC:64:64:AD:7E:1F:20:A6:60:5C:7A:62
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BAA041180CFF41DA10B9204BC6EF27
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/OXN_WaCHC8_sZGStfh8gpmBcemI.roa
Signing time: Tue 02 Jan 2024 10:31:40 +0000
ROA not before: Tue 02 Jan 2024 10:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201936
IP address blocks: 94.241.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:a0:41:18:0c:ff:41:da:10:b9:20:4b:c6:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39737f59a0870bcfec6464ad7e1f20a6605c7a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:3f:68:68:ee:1c:66:a5:1d:cc:fc:07:7f:
a4:66:f5:a1:91:86:fd:14:ed:9e:af:d9:4a:8e:f5:
df:82:9b:ab:eb:5e:c0:f0:42:ce:75:93:54:57:72:
a2:4a:35:db:16:08:e2:02:2a:57:98:03:6b:fc:3b:
ad:09:38:ec:c9:bd:38:18:0c:ca:ea:13:2e:be:5b:
fa:8f:87:22:30:34:2c:d9:91:25:fd:98:24:6e:01:
c6:29:f0:d7:b7:43:2a:53:a1:40:3b:b4:59:4c:07:
81:e5:c4:e4:4e:23:86:0c:f6:77:bb:df:9d:37:4a:
7f:a3:4b:09:eb:aa:ad:81:e6:3d:04:19:e4:4a:74:
74:f6:95:dd:10:7f:f1:cf:82:03:ad:39:38:dc:b0:
f9:0d:5d:02:f5:a7:0c:03:2f:4f:31:ed:12:d4:70:
98:7f:98:1b:7c:eb:72:04:43:10:b0:d4:14:1b:a0:
5b:c5:fd:35:05:9f:15:b6:9f:eb:11:e2:78:d2:df:
78:f2:cd:6a:b1:a2:ca:fd:ac:eb:b5:92:60:0a:74:
38:a0:0e:94:c0:34:0d:8e:2c:9c:13:12:15:d3:cf:
a2:d8:60:91:3e:21:6d:84:45:4e:9a:e4:f6:d2:51:
d0:d5:9e:4b:32:b1:69:1b:ba:86:28:9e:8c:12:eb:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:73:7F:59:A0:87:0B:CF:EC:64:64:AD:7E:1F:20:A6:60:5C:7A:62
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/OXN_WaCHC8_sZGStfh8gpmBcemI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.132.0/22
Signature Algorithm: sha256WithRSAEncryption
41:a7:c5:c6:ef:b6:29:fe:7e:04:84:01:e7:38:40:63:12:29:
7e:d0:81:b9:b1:1f:2b:82:e6:4e:21:6a:c0:5c:f2:ca:df:99:
dc:47:48:ce:d1:97:0d:0b:95:10:44:c9:d1:19:e6:85:01:e2:
d4:a4:af:db:10:1e:b5:f3:80:19:3c:02:81:66:4a:5f:3e:f8:
a1:6d:f2:12:fa:1c:8c:00:ef:65:b5:10:d9:b1:2f:08:98:ac:
fe:95:e8:83:27:e0:52:3f:8d:66:f1:1f:46:7d:36:48:eb:60:
39:e7:c8:7b:f9:d3:82:95:e9:d8:12:e3:3d:93:98:df:05:35:
31:b9:1b:ad:19:95:07:84:c9:a1:a8:6d:87:aa:14:43:ab:b4:
14:69:5b:4a:3a:c3:4b:23:63:ea:df:1a:4a:4c:25:f9:63:26:
93:79:ad:67:04:a1:44:43:20:9a:51:0a:0f:f3:ff:27:f8:ed:
6e:06:8f:94:4b:15:36:e4:ad:a5:15:d8:42:03:4f:4b:d9:45:
76:87:ce:cb:f5:3d:f3:6c:dd:5b:b4:39:7d:0b:41:ac:4c:77:
30:4d:02:d6:f8:51:bb:68:0b:fd:12:a3:a4:ed:75:35:ab:96:
f1:99:77:cb:99:43:f6:38:60:34:60:2b:b7:ef:31:6c:d9:26:
84:a7:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:51:25 2024 by rpki-client on console-ams.rpki-client.org