Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/OYAbsv-ODgtdM5nTnFXIbaI2Dko.roa
File: OYAbsv-ODgtdM5nTnFXIbaI2Dko.roa (raw, json)
Hash identifier: a+LvdqWzXU9GZE8wSnbdx1jImLBDun9TdGNHP2pYFJ4=
Subject key identifier: 39:80:1B:B2:FF:8E:0E:0B:5D:33:99:D3:9C:55:C8:6D:A2:36:0E:4A
Certificate issuer: /CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Certificate serial: 018CC9BC2E868D8FCF6971B46222A5FA63F9
Authority key identifier: F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/OYAbsv-ODgtdM5nTnFXIbaI2Dko.roa
Signing time: Tue 02 Jan 2024 10:33:22 +0000
ROA not before: Tue 02 Jan 2024 10:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208046
IP address blocks: 195.54.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2e:86:8d:8f:cf:69:71:b4:62:22:a5:fa:63:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e729a54cc76b889c832e0d1395894af7c0e5fe
Validity
Not Before: Jan 2 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39801bb2ff8e0e0b5d3399d39c55c86da2360e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:aa:e7:57:7c:ba:d0:46:5f:c7:9a:f6:6b:39:
f8:e3:e3:22:6c:c6:b8:02:84:21:a8:d8:c3:31:67:
31:b6:04:8d:61:b3:eb:65:4b:0f:48:23:bd:7c:37:
ed:37:f1:31:db:a3:67:ea:ef:6f:93:55:98:c8:6e:
8e:42:67:07:de:a1:ed:87:e9:8b:71:89:38:12:66:
96:63:6e:a2:ee:3b:be:64:d3:94:4f:cb:ef:f5:f3:
0b:d1:0f:b9:f1:95:0a:47:39:4b:8d:8c:86:a1:25:
cd:84:d8:8e:2d:d2:bd:8d:de:65:cc:c9:92:99:6e:
9e:18:a4:d2:12:b2:5d:19:22:ff:3f:85:5e:58:04:
71:76:ad:51:86:80:54:4b:f2:16:07:ae:6b:c1:72:
2a:57:ee:9b:84:6e:9c:b6:88:95:57:b0:15:61:a3:
86:b6:f7:6c:0a:de:6b:d4:c3:61:e5:92:55:5a:da:
18:75:e8:0c:c2:45:a7:5a:2e:4f:6a:b9:80:67:b3:
c4:a0:d4:55:ed:f1:b2:74:86:8e:ab:fc:2f:bc:c4:
52:af:e4:90:f8:6a:6a:26:aa:84:04:bb:91:38:ff:
48:69:96:0f:e6:ec:a1:6f:5a:87:08:b8:27:c8:2d:
cf:b1:e0:b8:60:db:b5:4e:fa:9c:7b:32:1e:c4:9c:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:80:1B:B2:FF:8E:0E:0B:5D:33:99:D3:9C:55:C8:6D:A2:36:0E:4A
X509v3 Authority Key Identifier:
keyid:F0:E7:29:A5:4C:C7:6B:88:9C:83:2E:0D:13:95:89:4A:F7:C0:E5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OcppUzHa4icgy4NE5WJSvfA5f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/OYAbsv-ODgtdM5nTnFXIbaI2Dko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/360de7-6fdc-4067-8f4d-676b52096cf8/1/8OcppUzHa4icgy4NE5WJSvfA5f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.59.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5b:a1:c5:5c:0f:84:a9:b9:8f:e9:90:ac:e5:71:38:8c:bc:
12:36:6e:21:62:2f:d3:25:11:9d:ef:b1:43:69:8a:67:79:68:
4b:48:41:a5:8c:34:79:bd:af:43:ff:68:23:43:1f:e6:14:40:
36:32:62:d1:2e:99:f7:ab:ea:b5:68:83:a2:cf:ed:4d:b2:c3:
2e:30:0b:d9:b1:30:50:6c:77:b9:28:ab:5d:7d:a8:c3:ef:1c:
b9:cf:2b:71:99:73:58:4c:76:a8:dc:42:8d:7c:44:f6:06:e4:
94:cb:5a:f8:fe:8a:e4:65:d2:ec:26:0c:66:83:f6:9a:c7:d2:
98:d7:55:eb:58:e8:49:dd:03:8f:69:52:4a:9e:5f:e0:ed:62:
11:39:11:ab:5a:70:af:69:81:bf:62:ce:ec:2b:23:8f:05:37:
1f:f8:e6:db:ec:5b:5c:1e:78:d8:5d:19:9a:d7:67:da:22:4b:
5d:20:e1:19:3c:7a:cc:09:97:45:95:29:b2:03:9c:b7:b3:ee:
1c:66:bf:62:d0:ab:e7:8a:9f:e6:27:c4:b7:95:4b:7c:d0:1c:
c2:38:6a:c7:de:c0:30:74:54:ee:e8:13:16:92:f0:da:ee:78:
2c:79:4d:49:60:21:d3:ba:0e:be:cb:e7:34:95:a8:90:ca:8e:
08:ba:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:40:11 2024 by rpki-client on console-ams.rpki-client.org