Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/OJLjih2YK6F69isB8bA5lX8i0Lo.roa
File: OJLjih2YK6F69isB8bA5lX8i0Lo.roa (raw, json)
Hash identifier: BwsEX3wN6WMS1mmxiIMTSv+jpc2XIqzOPei4JvQJ9KY=
Subject key identifier: 38:92:E3:8A:1D:98:2B:A1:7A:F6:2B:01:F1:B0:39:95:7F:22:D0:BA
Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial: 018CC26CFE74E9E5D8765530CB085CBCE7C8
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/OJLjih2YK6F69isB8bA5lX8i0Lo.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3223
IP address blocks: 185.121.16.0/24 maxlen: 24
185.121.16.0/22 maxlen: 22
185.121.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fe:74:e9:e5:d8:76:55:30:cb:08:5c:bc:e7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3892e38a1d982ba17af62b01f1b039957f22d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:e3:63:2e:23:a5:18:99:fc:95:3e:db:72:
34:3f:7b:8c:9f:b3:eb:c4:8b:47:07:0f:7c:0f:26:
5d:4d:89:49:96:cc:9d:14:9a:3a:59:fe:d2:e2:d6:
db:db:b5:63:37:c5:70:86:e2:5a:04:1c:8c:38:56:
59:f8:dd:62:62:46:09:8d:fa:b3:88:6d:14:eb:97:
39:61:10:5a:7d:f2:68:a0:98:8e:9d:d2:b3:13:c2:
39:9c:82:5e:a8:d7:32:f7:af:23:9c:e9:ff:23:e6:
e8:72:df:1e:c7:cf:8a:a8:71:da:71:3c:e7:90:16:
55:79:32:83:12:57:58:40:90:1f:5d:c3:ec:5a:9e:
d2:20:35:8b:50:d9:7a:97:03:a2:6e:a9:7a:2e:f5:
bd:ab:bd:24:88:07:ab:32:24:96:bc:91:0f:8a:ec:
61:3b:89:80:10:a5:6a:e4:cf:75:bc:d4:74:26:68:
3e:4d:0e:61:e2:cf:a3:64:a7:35:92:28:47:02:ea:
6a:48:66:fe:03:39:75:d9:85:74:10:e9:5b:94:4b:
fd:cf:bc:6a:0d:fe:f5:45:01:65:d1:95:ba:9d:03:
61:37:48:08:28:00:bd:cf:17:bf:b8:e5:4d:39:a4:
76:b9:fa:d9:90:8e:1b:19:d7:15:7c:70:0a:84:78:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:E3:8A:1D:98:2B:A1:7A:F6:2B:01:F1:B0:39:95:7F:22:D0:BA
X509v3 Authority Key Identifier:
keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/OJLjih2YK6F69isB8bA5lX8i0Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
67:8e:e4:d3:6b:c8:17:fe:81:08:6f:48:23:2e:d6:9a:ef:c7:
a7:58:d1:a2:84:0b:4c:bd:54:44:51:05:80:ef:c5:36:3d:d8:
df:bf:76:a3:ba:de:e7:4f:31:cc:9e:4c:d0:f9:50:a6:3f:0b:
4c:0b:cd:fa:f5:68:d6:38:b5:3b:a8:76:51:47:11:86:ce:f7:
8b:c4:c2:17:ed:0e:41:74:cd:1a:dd:d6:92:d2:d7:81:f0:10:
a8:b8:4c:11:fe:93:a7:4a:d8:6c:fd:fa:87:c0:1a:cd:17:0b:
47:9d:51:1b:8d:ce:b8:d2:9a:a4:23:eb:b1:6d:fe:66:fe:1b:
c2:34:97:80:f0:92:ae:a2:8a:14:69:aa:3d:33:f0:2e:62:fb:
27:99:e8:c8:27:6d:fa:ea:cd:db:e2:e0:e2:bb:01:7f:4c:5e:
d2:81:5e:3c:d4:4f:10:dc:bc:75:5e:2f:5e:fa:49:ca:cf:99:
8e:9c:5c:db:02:aa:fb:59:12:e0:8a:ed:47:a7:fa:53:98:8e:
81:ba:13:eb:d9:65:8a:36:03:6e:f5:24:2c:ec:39:af:4f:b7:
f8:19:7c:7c:c5:1c:e2:f2:87:3e:d3:94:96:f2:a2:41:b2:0a:
93:46:02:af:20:03:32:91:e7:1c:a7:24:41:8c:df:9c:61:af:
b2:84:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 13:08:49 2024 by rpki-client on console-ams.rpki-client.org