Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/OKZWG_4ekVLR6IIuTzJXBZnsdnI.roa
File: OKZWG_4ekVLR6IIuTzJXBZnsdnI.roa (raw, json)
Hash identifier: n8ww+zT9HunmICriukg8hot7V2UgpD3BM9idztUilM0=
Subject key identifier: 38:A6:56:1B:FE:1E:91:52:D1:E8:82:2E:4F:32:57:05:99:EC:76:72
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DACD6F8BC7336A544B46967E2492B9
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/OKZWG_4ekVLR6IIuTzJXBZnsdnI.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202833
IP address blocks: 193.19.148.0/22 maxlen: 24
45.158.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cd:6f:8b:c7:33:6a:54:4b:46:96:7e:24:92:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38a6561bfe1e9152d1e8822e4f32570599ec7672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9f:39:29:fe:79:1c:cd:f7:74:97:d3:f1:aa:
45:ce:82:61:ed:9d:e0:4b:16:85:e8:3d:e6:bf:ed:
1b:99:15:46:9c:30:29:ab:8a:c3:59:67:8d:2c:48:
ba:bd:e1:64:ae:8c:70:41:23:7d:67:ff:de:29:e9:
a2:b1:ee:e0:03:1c:db:c7:54:70:7e:92:da:a5:89:
91:c7:65:3f:4b:85:c9:f0:03:6f:98:c1:c3:67:a2:
85:14:e3:2d:e0:b0:7c:8f:53:8b:a5:44:f3:93:2c:
97:13:ed:72:ee:c6:e3:73:42:bf:e3:9e:91:23:c1:
59:84:d4:f3:e9:f6:6e:f7:b4:06:98:40:bf:38:fe:
d2:99:b2:60:fb:38:b4:06:f6:48:34:31:55:56:e1:
78:b9:fd:5b:a5:d4:9f:3a:b1:65:32:dd:25:5b:1d:
fc:f5:39:fa:8d:ee:9d:e1:45:c4:eb:00:2e:8e:ea:
ac:be:9c:23:56:50:17:8c:db:fd:ce:1a:66:73:d6:
a5:d1:72:81:9a:de:07:11:8d:ab:f3:cf:ef:5b:2a:
f3:ca:5f:3c:d4:62:fb:b5:d1:2f:8b:4b:6a:e9:ff:
47:00:fe:09:40:97:4d:2f:5e:b5:18:e3:5b:ee:c4:
38:49:6f:67:54:1c:c2:61:01:22:be:d1:60:ac:b0:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:56:1B:FE:1E:91:52:D1:E8:82:2E:4F:32:57:05:99:EC:76:72
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/OKZWG_4ekVLR6IIuTzJXBZnsdnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.84.0/22
193.19.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:25:6d:c8:dd:83:3f:2f:f2:9b:91:e9:bc:82:b0:f6:c4:f1:
4e:ec:76:33:aa:d2:23:c5:af:d2:ca:79:4e:99:54:e7:d0:85:
d6:4b:5e:cf:a4:6d:fe:48:c8:a7:77:bd:8a:34:3c:2a:67:5d:
b5:01:88:ea:df:d9:9c:24:6f:43:10:91:6f:9d:dc:7a:67:d5:
da:a1:ac:ec:4f:02:c4:d1:52:18:4b:06:35:fa:86:fb:f6:c1:
bd:79:12:c4:a1:4a:72:3c:2f:2e:cc:78:2f:74:84:ea:71:b5:
76:65:a5:30:ff:b6:66:8b:15:9d:e9:96:a5:63:e4:58:6a:57:
38:f4:e8:78:2d:ab:68:36:12:34:ce:cf:32:3d:1e:3c:59:94:
0e:e0:17:5f:55:91:be:ba:1b:34:af:cf:98:d7:31:5b:c2:16:
ca:87:36:36:91:55:1c:2f:37:14:91:a6:bc:15:97:3f:7b:38:
b7:87:eb:20:b4:bc:6c:3c:c1:3f:e1:6f:25:d5:fa:f9:25:e7:
b0:f6:6b:b4:22:a9:77:cb:69:87:58:85:ee:61:e5:7c:c3:de:
c4:c1:85:cb:be:8f:38:cc:aa:9a:86:99:67:c3:6e:53:cd:4c:
cc:12:fa:7e:16:22:21:2e:14:7d:40:3f:44:c6:22:a4:71:7b:
ef:22:94:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:53:45 2024 by rpki-client on console-ams.rpki-client.org