Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/OgF2iDel203SZUCZs4z6-HBxcqg.roa
File: OgF2iDel203SZUCZs4z6-HBxcqg.roa (raw, json)
Hash identifier: Wp4s7fYWuRy0ziie5sDAFI9IWCmZoTJGA8FpAFlLmlU=
Subject key identifier: 3A:01:76:88:37:A5:DB:4D:D2:65:40:99:B3:8C:FA:F8:70:71:72:A8
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 018CC801ADB578DCD74451C8DAF9975B3307
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/OgF2iDel203SZUCZs4z6-HBxcqg.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 212.123.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ad:b5:78:dc:d7:44:51:c8:da:f9:97:5b:33:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a01768837a5db4dd2654099b38cfaf8707172a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:5f:99:5c:b1:1f:20:bf:cf:83:80:d7:ce:
85:b2:9e:6a:e7:5d:b7:14:c6:8b:71:0a:f7:8c:22:
94:ae:47:45:23:d5:00:69:50:36:9e:74:fd:0a:71:
cb:2f:37:70:66:cc:9c:ff:35:d2:b7:e1:fc:9c:1e:
65:53:af:eb:92:ab:9c:df:4a:29:18:f2:f2:b3:76:
93:7b:8e:a5:05:27:b7:82:64:bf:66:cd:21:b5:08:
44:73:34:38:3d:03:b3:f9:62:60:27:29:ae:6b:f2:
08:24:77:55:af:11:09:78:d7:b3:be:39:aa:bd:a2:
1c:9f:f8:53:8e:a8:1c:6d:f3:35:e4:05:3d:bd:40:
4e:57:86:b0:b7:49:b3:82:d6:94:57:92:9e:55:33:
a2:e8:21:ca:a2:e5:5f:40:0c:33:72:f8:62:29:4d:
37:c0:4a:04:d9:7f:b3:ef:e8:26:7a:74:66:7f:8f:
58:45:b0:4c:e7:35:3a:9b:6d:c3:be:58:49:40:5c:
fc:7e:d2:cb:ed:a7:1f:ec:ab:28:28:1d:e3:d3:21:
06:3f:8c:3f:3d:13:b8:4c:3d:c9:9b:9c:4e:21:78:
75:72:7d:7c:d1:2d:38:a6:48:f3:95:f7:46:c5:d1:
7e:6e:1f:72:f2:5c:2d:ab:ba:05:97:c0:ef:44:c9:
dd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:01:76:88:37:A5:DB:4D:D2:65:40:99:B3:8C:FA:F8:70:71:72:A8
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/OgF2iDel203SZUCZs4z6-HBxcqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.123.46.0/23
Signature Algorithm: sha256WithRSAEncryption
96:6c:5e:9b:c2:b9:d9:b5:f7:1a:a0:51:1a:d7:55:5e:f6:72:
ad:4f:7d:c6:e5:ba:62:8f:27:cd:c8:26:5f:af:65:22:0d:6a:
b0:57:fe:e3:3e:70:da:47:16:52:5a:72:64:50:49:3d:5c:16:
85:01:83:10:fe:0c:9d:36:79:17:87:0e:0d:83:8a:87:97:38:
20:5a:9c:76:5f:83:44:57:63:43:bc:9e:6f:7e:94:af:d7:a4:
a0:c0:9b:fb:62:57:7b:0e:42:3c:7e:72:56:46:8c:fb:b7:82:
e0:0a:c7:97:66:b1:72:ba:d0:c9:5b:48:44:07:94:04:69:b1:
cd:60:d8:e5:4c:a8:27:fb:70:bc:d3:22:bc:47:09:8f:a9:62:
6b:06:14:ec:cb:43:cf:d7:be:48:55:d5:f2:40:8b:f2:89:85:
24:bb:9c:d5:98:ee:8e:40:b7:18:71:61:49:e7:a3:85:94:c5:
d7:46:d9:bc:8f:d8:eb:d4:8a:51:93:47:89:0a:19:10:61:58:
cf:a0:88:d1:85:19:80:1e:58:75:5e:98:9e:a6:11:55:f1:53:
be:69:d9:a2:21:56:5b:e5:b0:40:15:c0:6f:74:90:95:69:ab:
f9:46:05:07:7e:b8:d0:34:c2:d4:90:d7:9c:cd:b7:8d:b5:70:
d9:ac:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:15:13 2024 by rpki-client on console-fra.rpki-client.org