Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/OHRbui8waHbmDddetMibXp_teWM.roa
File: OHRbui8waHbmDddetMibXp_teWM.roa (raw, json)
Hash identifier: JkG6JGigFg3zQ+EGxo5Y1hmYHB/wVAGS1btjsCTByeE=
Subject key identifier: 38:74:5B:BA:2F:30:68:76:E6:0D:D7:5E:B4:C8:9B:5E:9F:ED:79:63
Certificate issuer: /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial: 018CCA29410A1FA25D0CCA629E818542AED6
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/OHRbui8waHbmDddetMibXp_teWM.roa
Signing time: Tue 02 Jan 2024 12:32:30 +0000
ROA not before: Tue 02 Jan 2024 12:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204122
IP address blocks: 31.170.96.0/24 maxlen: 24
31.170.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:41:0a:1f:a2:5d:0c:ca:62:9e:81:85:42:ae:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Validity
Not Before: Jan 2 12:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38745bba2f306876e60dd75eb4c89b5e9fed7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:c7:08:9c:80:76:5f:29:6c:32:16:19:c3:
9e:86:0e:c7:21:77:f0:ae:e7:0e:25:3e:f3:b1:cd:
d0:85:4d:1b:ea:43:12:78:e6:5e:66:4f:d9:43:71:
98:96:e8:0d:f2:b7:d5:9a:52:05:12:97:60:0f:52:
ec:6e:5a:f1:cc:80:4b:6c:e5:4f:f8:44:0d:98:3b:
da:7d:56:74:0d:69:7a:c2:2f:ea:f6:67:98:19:06:
73:4e:56:0c:d2:67:21:9c:e7:4c:11:0a:73:f2:e4:
c1:c3:82:d0:20:27:6a:a7:44:6c:c7:63:bc:5c:2d:
8e:b9:3c:d9:9c:11:59:a8:75:30:9e:04:51:41:a2:
30:eb:41:da:2e:02:80:1d:5e:14:f0:9c:34:50:92:
fc:36:38:cb:89:9d:b6:66:48:ff:f6:24:ce:8b:18:
cd:7c:4e:60:97:d8:e5:6b:d7:33:4e:97:53:82:4f:
2d:f9:2a:b8:e7:6c:85:03:f7:5e:f6:db:13:a9:4d:
c6:f4:a9:d1:df:14:0c:1b:5f:c2:53:6b:b7:29:d3:
69:7b:60:10:d5:cf:e0:90:2c:df:51:83:7e:30:c8:
e0:ce:57:97:e7:93:99:03:98:74:d1:a9:db:69:07:
15:ab:f3:6e:db:52:08:81:4b:a1:1c:5a:af:e8:ac:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:74:5B:BA:2F:30:68:76:E6:0D:D7:5E:B4:C8:9B:5E:9F:ED:79:63
X509v3 Authority Key Identifier:
keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/OHRbui8waHbmDddetMibXp_teWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.96.0/23
Signature Algorithm: sha256WithRSAEncryption
33:bd:37:c2:15:00:2e:7a:8a:6a:22:fb:e0:64:f7:2a:95:0a:
ed:e3:e2:8a:ed:d2:fd:8a:e3:42:18:d0:39:08:81:16:8d:97:
01:85:76:2e:a0:35:6f:92:01:af:23:7f:ae:c6:ef:be:c8:a0:
81:ee:47:3e:e3:83:5b:dd:0b:31:c8:15:4e:8c:d1:32:c3:ba:
7b:7d:cc:5b:80:b2:06:43:60:fd:86:16:51:52:f8:18:ab:62:
9c:ff:84:0e:a1:f4:c1:69:fa:d1:9f:6f:c9:3c:07:06:a0:d0:
7c:13:6d:81:65:11:fe:e1:69:7d:76:95:0b:ec:df:80:b8:4d:
7a:c4:5b:86:ed:0c:84:34:a9:3d:87:c7:d6:5f:f3:00:59:ed:
6d:c2:48:6d:19:f4:94:11:cf:ff:7f:d8:9b:60:6c:0b:ad:7e:
fa:8c:38:e8:da:e0:76:89:11:21:60:26:a0:1b:cd:d0:c6:cd:
9a:a6:8d:26:0a:17:74:e5:0f:00:25:cb:e1:10:e8:28:eb:fd:
87:14:95:4e:7d:c1:93:a5:3d:83:59:ce:32:8a:8e:54:74:22:
1e:3d:b3:34:fb:d5:f4:86:19:75:4e:77:a0:e4:43:87:85:18:
2d:a4:87:0a:6d:7b:0d:6a:3b:18:42:12:d2:7f:c0:8a:4f:05:
40:49:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:28 2024 by rpki-client on console-ams.rpki-client.org