Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/OUGzb4Bf1PCCQYIJOJZ0U-PaJsk.roa
File: OUGzb4Bf1PCCQYIJOJZ0U-PaJsk.roa (raw, json)
Hash identifier: mXkxOqAxwFWkOmgGnkte4FaIgZVHlXIbTnAAW0gbOMo=
Subject key identifier: 39:41:B3:6F:80:5F:D4:F0:82:41:82:09:38:96:74:53:E3:DA:26:C9
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A8F7F69125AAB59336D8FF99C59E4
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/OUGzb4Bf1PCCQYIJOJZ0U-PaJsk.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13628
IP address blocks: 217.79.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8f:7f:69:12:5a:ab:59:33:6d:8f:f9:9c:59:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3941b36f805fd4f08241820938967453e3da26c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:ec:22:cf:34:a6:8d:e9:4f:53:cc:22:0f:
1f:78:ae:e4:55:51:26:9d:b4:21:dd:87:e4:7c:21:
b9:53:34:fc:84:6b:25:4c:ce:39:14:b5:b7:c1:4b:
17:a9:17:bc:20:ec:01:8b:e0:33:86:56:04:b3:05:
82:a7:b3:8e:ce:6f:87:cd:b0:ed:03:9b:2e:e9:da:
82:16:8b:8c:63:43:23:71:d2:5b:33:a0:b4:cf:36:
5c:1a:90:b8:3b:94:ae:3a:4d:00:e1:6a:4a:c3:c0:
8e:2c:05:25:2c:d6:e4:84:ac:bb:cb:16:13:2d:12:
67:89:c0:79:0a:ec:88:69:4a:0c:66:dc:8d:0b:97:
fb:6e:c3:c4:97:9c:fe:49:c9:8d:0f:b1:10:a5:2b:
15:32:10:23:90:c2:11:8f:33:24:86:87:c5:55:69:
67:aa:ed:00:63:76:d4:5e:ee:c1:59:4d:3c:8c:e1:
11:4c:37:ef:6b:11:3b:00:41:f8:1f:a4:40:88:ab:
50:1a:0a:0f:12:14:3f:57:bf:74:d2:e8:75:41:1e:
bf:8d:76:c8:34:27:0a:8b:3a:36:82:c8:67:e4:38:
f9:4e:0d:09:06:24:d3:99:7e:5d:f0:9d:1d:ef:83:
b0:c3:17:71:cd:65:66:08:f4:05:e5:b6:2e:f2:4f:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:B3:6F:80:5F:D4:F0:82:41:82:09:38:96:74:53:E3:DA:26:C9
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/OUGzb4Bf1PCCQYIJOJZ0U-PaJsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a9:4a:91:e1:10:2f:75:5e:96:46:20:f5:05:84:31:ff:2e:
c8:2d:d4:27:28:c7:27:19:95:a2:d8:3d:04:29:7e:b3:1c:fa:
c5:16:d5:91:cb:3b:a1:a3:c4:71:34:53:1e:cd:05:dc:7e:54:
18:b6:53:55:59:ec:fc:c6:b8:4e:3c:26:ad:46:8b:b4:ec:f5:
f5:44:fc:80:55:7e:79:1a:34:2b:b8:d8:9f:06:4f:95:18:ad:
85:e6:78:27:68:36:0c:e2:68:5f:61:0b:55:1e:5b:cc:c6:c8:
96:20:16:8e:83:ad:c0:35:b2:8a:f5:20:e7:78:87:cd:b0:a0:
5c:45:a5:6b:98:b9:14:91:91:5f:15:66:0a:65:e8:94:d2:9c:
ee:25:b4:96:bf:ef:ba:3c:66:74:0d:00:9d:4a:72:59:ac:9d:
69:a8:9b:24:af:26:68:fc:cd:bf:85:ae:d4:94:08:fd:ca:f6:
74:cd:79:39:bf:26:b4:4d:cb:d8:1f:ed:2d:fa:ee:1f:6b:19:
23:df:bf:b5:8c:c6:07:0c:9c:29:ad:1d:d1:e6:a5:2c:61:95:
83:d7:5f:f5:6c:1d:92:11:b1:fd:ae:6d:bd:36:be:2b:c3:1a:
a8:31:8d:1d:ad:b4:d5:d8:58:89:de:62:3d:87:2c:f1:fd:c4:
b2:e1:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:12:37 2024 by rpki-client on console-ams.rpki-client.org