Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/OXPvfEXsCmxeCq_bPQ5Zq27NH0M.roa
File: OXPvfEXsCmxeCq_bPQ5Zq27NH0M.roa (raw, json)
Hash identifier: T3NkmhPJ/ekdA9+ZLW3DdkcxVJPg1zOxz1gHYqRLD3U=
Subject key identifier: 39:73:EF:7C:45:EC:0A:6C:5E:0A:AF:DB:3D:0E:59:AB:6E:CD:1F:43
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018CCA2B59F261ABBB057D7256F7991DBDD2
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/OXPvfEXsCmxeCq_bPQ5Zq27NH0M.roa
Signing time: Tue 02 Jan 2024 12:34:47 +0000
ROA not before: Tue 02 Jan 2024 12:34:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9989
IP address blocks: 176.121.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:59:f2:61:ab:bb:05:7d:72:56:f7:99:1d:bd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 12:34:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3973ef7c45ec0a6c5e0aafdb3d0e59ab6ecd1f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:11:0d:94:5c:c4:fd:50:75:f1:c2:5c:c8:
cc:54:97:43:d8:0e:57:89:b0:be:c3:4f:f1:e0:9e:
66:a9:79:69:5b:9c:3c:e0:b1:03:7b:c7:86:c4:51:
8a:99:07:bd:c3:03:ee:90:90:53:a6:94:c7:14:18:
f2:33:25:cf:60:31:9a:f1:57:5f:9c:95:0e:20:07:
5a:89:5b:cd:c2:39:de:4e:02:47:6f:bb:9a:05:eb:
da:9d:6d:9c:ff:1d:10:3b:42:0c:68:6d:7a:50:cd:
8b:88:cb:42:e4:9b:f7:ef:ea:6b:59:05:ac:69:e8:
cd:59:07:a0:68:fd:bb:2d:22:06:c5:3d:0c:d0:d6:
c5:06:db:a6:a6:a9:fc:d6:8f:7f:43:0f:0e:a8:a6:
c8:c4:fb:61:12:80:dc:75:7b:b2:68:8f:c7:c3:d9:
6b:8e:5a:88:d4:17:36:8a:4d:ec:80:bf:7c:e0:33:
bf:b9:f6:b3:8f:17:ee:14:82:33:46:2f:9e:73:90:
68:69:c1:dc:e5:93:ac:1d:b2:9b:c0:a0:e3:67:15:
36:9d:a1:a5:58:97:14:47:55:66:ad:1a:86:bf:74:
5d:6b:f7:d9:09:73:b0:a9:75:ca:b6:f0:76:e3:3e:
05:3a:2f:0a:38:73:6d:e0:05:38:ba:da:87:36:7a:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:73:EF:7C:45:EC:0A:6C:5E:0A:AF:DB:3D:0E:59:AB:6E:CD:1F:43
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/OXPvfEXsCmxeCq_bPQ5Zq27NH0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.95.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f9:38:e9:86:19:fa:68:da:f1:98:bf:94:15:8a:a5:2f:16:
bb:b7:b9:8f:38:d5:62:e6:51:11:2f:3b:10:70:30:61:e6:cb:
cf:92:2a:44:86:35:0c:e3:63:68:78:36:8c:8a:d7:c8:f9:92:
88:bd:1a:7d:14:52:97:84:51:20:48:56:56:f5:41:6e:21:49:
da:b1:c1:92:60:9f:fe:b7:db:05:7e:c2:f5:a8:52:bd:c4:da:
c2:a4:a2:0a:1b:7b:5c:70:a7:20:40:b6:5f:db:cc:2f:70:62:
84:af:4c:47:d3:fc:5a:82:0a:e7:64:4a:08:0b:23:8b:19:a2:
3e:d7:b5:5c:f1:59:c2:d8:b4:be:28:a3:a4:48:ca:df:1a:b6:
70:1b:ce:90:56:33:da:c8:c0:94:52:9b:1e:8c:10:82:86:5f:
a0:2f:4c:e8:7e:07:61:fc:0e:32:c8:59:57:9f:7c:34:e1:71:
97:3a:6d:32:60:e8:06:0c:11:f3:c2:35:b6:94:0c:55:a0:3a:
c9:a5:fb:24:4c:6d:5a:b7:58:4e:b0:f6:f9:03:47:c3:27:9b:
41:09:e3:f9:38:6a:7e:57:c9:bc:9a:2d:3e:e4:bd:24:08:32:
39:62:6d:61:37:c1:d1:7b:7f:b0:53:69:bb:46:45:aa:4e:ae:
eb:a8:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:55 2024 by rpki-client on console-ams.rpki-client.org