Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/O6pdSoDfCxN737VrpIMdIxd-Pjk.roa
File: O6pdSoDfCxN737VrpIMdIxd-Pjk.roa (raw, json)
Hash identifier: CsekYbX9ZQhq2PGiaNgVzJ9Veav+kfEOH5MREfovI2c=
Subject key identifier: 3B:AA:5D:4A:80:DF:0B:13:7B:DF:B5:6B:A4:83:1D:23:17:7E:3E:39
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F96226D9F7ED9BAA6A0A2A8EE4738
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/O6pdSoDfCxN737VrpIMdIxd-Pjk.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199300
IP address blocks: 80.233.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:96:22:6d:9f:7e:d9:ba:a6:a0:a2:a8:ee:47:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3baa5d4a80df0b137bdfb56ba4831d23177e3e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:03:c5:dc:59:e8:e7:65:d7:6f:89:bf:ad:d8:
2d:0e:a8:78:bb:8b:c9:dd:16:0e:88:b2:a1:10:49:
68:b4:31:e3:30:8f:be:e4:01:ec:aa:09:d3:38:7b:
9d:1a:27:b2:2f:c8:e5:87:ad:5e:38:57:31:7c:a9:
58:23:ed:55:2f:7f:52:52:50:67:c0:86:3b:b4:45:
e9:7c:f2:21:34:ed:a8:51:21:6c:f4:c6:2f:3d:8e:
38:89:ff:96:0b:52:d3:67:54:40:8a:62:f8:05:61:
0b:ca:70:fd:9b:e0:50:1e:67:eb:e4:5e:87:44:4e:
00:04:07:40:d3:93:9f:6e:31:97:39:0e:d5:5a:7c:
8e:3e:a4:2e:6c:68:d7:e6:0d:a6:71:d1:52:4d:35:
a7:63:24:5e:94:8e:8a:dd:45:55:43:2e:52:b5:af:
99:1d:3e:3d:67:a1:bc:36:58:3c:c8:01:da:a7:0e:
30:34:d8:06:71:1a:6a:84:75:a6:cc:d5:b2:bb:74:
24:71:cb:7d:0f:de:88:a7:f4:01:26:92:94:aa:4d:
31:40:9d:4c:94:41:94:db:45:40:a9:45:58:8f:43:
5d:c7:69:ed:4e:18:2b:6f:6a:5b:75:80:fb:ed:7d:
a1:55:ed:d6:8b:9d:0c:df:b7:25:82:0c:88:77:d8:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AA:5D:4A:80:DF:0B:13:7B:DF:B5:6B:A4:83:1D:23:17:7E:3E:39
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/O6pdSoDfCxN737VrpIMdIxd-Pjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
47:19:c4:f0:e9:80:e3:08:f3:00:6e:d7:c9:58:d0:72:d5:33:
2b:81:cf:c2:12:24:b7:cf:d4:41:fd:32:80:de:55:1a:7f:38:
56:6f:9d:00:08:b9:b4:14:5f:b0:62:61:fb:ac:26:89:a7:b2:
23:cc:42:ce:1a:56:6d:11:bf:c8:bc:9b:35:3d:57:1f:41:46:
7b:10:44:2a:97:3a:1a:f6:5b:46:01:1a:3f:b4:3d:b2:58:67:
3d:c1:72:87:fb:8e:95:59:33:4f:f4:2d:d7:e9:ab:13:35:bc:
60:cd:a8:58:ba:e8:2b:8f:48:c8:b5:54:c3:b1:f0:d4:7c:7c:
db:17:97:92:e6:4f:55:1f:02:77:78:37:f9:bb:63:36:4e:67:
5f:ef:11:4e:3f:bd:1d:0d:85:ff:21:68:e2:35:71:7b:94:49:
4b:30:a2:77:3f:d8:71:96:92:f6:50:d9:5f:63:1a:c9:27:4c:
b8:99:22:53:7a:70:24:30:08:7f:aa:e3:2f:a5:e3:71:7d:dc:
54:12:21:b6:13:29:22:e4:9f:4d:2f:e5:bd:c3:a2:86:6b:97:
f9:76:1b:0f:fb:98:6b:57:7e:74:0d:b8:12:20:a3:ad:fa:56:
15:3a:62:40:26:14:42:de:8f:f4:71:99:5f:77:a5:49:19:cc:
36:ad:90:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:49:32 2024 by rpki-client on console-fra.rpki-client.org