Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/OHJp_pH9bRLBuVFXGMJiE4jdndI.roa
File: OHJp_pH9bRLBuVFXGMJiE4jdndI.roa (raw, json)
Hash identifier: OTWMBSBF6iJq7xW8JlKwMODxPTPUDE4qy0QIyqT4+gE=
Subject key identifier: 38:72:69:FE:91:FD:6D:12:C1:B9:51:57:18:C2:62:13:88:DD:9D:D2
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 018CC64A9E34ECFD06E9C99252646AC5D7BD
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/OHJp_pH9bRLBuVFXGMJiE4jdndI.roa
Signing time: Mon 01 Jan 2024 18:30:28 +0000
ROA not before: Mon 01 Jan 2024 18:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51661
IP address blocks: 94.124.106.192/29 maxlen: 29
185.160.20.0/25 maxlen: 25
185.160.20.0/24 maxlen: 24
185.160.23.0/24 maxlen: 24
185.160.22.0/24 maxlen: 24
185.160.21.0/24 maxlen: 24
2a02:1d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:9e:34:ec:fd:06:e9:c9:92:52:64:6a:c5:d7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Jan 1 18:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=387269fe91fd6d12c1b9515718c2621388dd9dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:d5:97:d8:9a:74:55:20:1b:e5:de:2a:a7:
07:a6:64:92:ab:b2:2c:b8:91:3d:a9:dc:6b:1c:eb:
08:a0:73:dc:6c:bb:b9:b1:7a:f4:2b:47:a1:7a:d2:
e8:60:dc:ad:e1:e2:55:96:83:9f:db:f5:9c:3b:5c:
81:3e:ba:af:53:3f:0e:53:b8:fe:ef:da:80:53:15:
d4:e4:c3:60:72:16:c0:6f:3a:c6:40:79:8c:17:b7:
b4:6b:8f:33:f2:0a:b2:a2:10:e1:d8:08:92:a0:c3:
0d:ae:ca:98:ba:a8:34:c3:cb:72:8b:06:98:1b:df:
7e:b9:b9:9d:40:1f:9d:dc:33:58:a4:88:ac:3e:c9:
d5:7d:89:f5:9a:95:a3:8f:90:65:a9:98:7e:8c:62:
8f:91:9b:2b:79:f8:e8:e6:b6:48:77:ca:87:35:c0:
63:6f:cc:38:09:aa:ab:20:53:76:d7:7c:61:a0:0a:
a2:b9:b6:66:59:73:5c:d6:19:eb:2c:e4:87:80:33:
8c:69:26:f7:a2:c5:41:7c:cb:9c:80:a7:aa:9c:1a:
c0:81:bf:d3:d7:23:12:33:f8:b7:6c:7c:89:bb:c4:
d6:3e:da:fb:64:83:8f:3b:27:b6:2e:3e:a9:29:da:
3d:47:94:e6:fe:be:f6:dc:a2:3e:72:23:a0:97:5d:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:69:FE:91:FD:6D:12:C1:B9:51:57:18:C2:62:13:88:DD:9D:D2
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/OHJp_pH9bRLBuVFXGMJiE4jdndI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.106.192/29
185.160.20.0/22
IPv6:
2a02:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:d4:9b:49:f5:99:01:04:10:3b:c6:ba:c0:8a:ec:dd:77:7d:
72:4f:ba:ba:b2:b1:8b:49:34:19:73:36:37:2c:15:e4:ca:ef:
45:9c:a5:53:49:c5:d4:6e:30:9e:3b:46:c1:ee:e5:66:18:86:
92:82:d8:d3:ed:dc:de:e7:68:8f:ba:62:1d:4c:36:b1:06:e5:
18:58:a8:bc:05:ba:21:f8:e1:ae:45:8d:68:b4:a4:e5:1e:22:
c3:2d:5f:82:cf:32:2b:0a:d6:d6:2f:8c:62:9c:f5:c0:59:14:
18:58:20:b5:cb:6d:0e:70:fc:a5:08:71:03:06:92:9b:6e:fd:
1e:99:68:fd:de:12:6e:7a:1d:4f:21:69:0f:4d:f5:06:60:bc:
2b:db:31:37:f9:1d:dc:a4:5e:3b:6c:1b:e2:29:04:ee:66:12:
62:38:68:4d:e3:52:e1:fd:38:5b:1c:29:6f:f9:ba:52:cd:00:
28:7e:fe:43:f8:91:9a:bf:12:a1:f6:35:e5:c5:43:71:65:10:
43:11:88:9d:a9:e9:4e:29:90:08:a8:65:ed:0f:7a:c4:fb:f3:
52:fd:b0:cd:e7:ca:71:69:8e:35:f1:bc:d6:d1:95:c6:b3:2f:
94:22:2e:74:db:76:01:f4:ab:39:d0:dd:4a:88:b2:da:76:0b:
1b:46:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:13:46 2024 by rpki-client on console-ams.rpki-client.org