Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OIwb-1CMVfFL7Bp5556RtQVd1qY.roa
File: OIwb-1CMVfFL7Bp5556RtQVd1qY.roa (raw, json)
Hash identifier: s5ydwnxUgiQtGWg33WCP7G5m3dFj17AxcyrQD/ubhk0=
Subject key identifier: 38:8C:1B:FB:50:8C:55:F1:4B:EC:1A:79:E7:9E:91:B5:05:5D:D6:A6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8026F754D38A0872EEF8E668EF7E7D3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OIwb-1CMVfFL7Bp5556RtQVd1qY.roa
Signing time: Tue 02 Jan 2024 02:30:51 +0000
ROA not before: Tue 02 Jan 2024 02:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13627
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:6f:75:4d:38:a0:87:2e:ef:8e:66:8e:f7:e7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=388c1bfb508c55f14bec1a79e79e91b5055dd6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:cf:0d:76:d3:69:f4:cd:e0:cb:25:ed:48:
55:c0:3e:51:00:3b:e4:2c:de:7f:b0:6c:d0:3d:3d:
f0:17:35:f5:92:96:87:ab:36:2e:74:1f:16:a7:81:
85:7f:a6:6b:4e:1d:6b:c0:60:b2:7f:ea:04:fe:03:
4d:3b:bc:5b:22:48:77:e4:dc:ce:aa:e9:af:15:09:
59:22:7e:ca:73:f0:48:a0:63:22:5f:8b:15:85:c2:
49:b3:59:f2:56:46:c0:95:76:a0:3d:81:59:72:91:
90:6a:b8:53:9f:05:97:78:28:33:46:33:e1:db:9c:
68:f9:cc:e6:ec:0b:3c:6b:10:0b:f5:76:dd:d8:f1:
36:ac:27:2e:8a:06:2a:2e:c5:42:3d:e2:97:e9:52:
bf:70:63:3a:fd:ea:7d:01:53:36:04:38:46:70:9a:
6b:d8:23:21:20:4c:ca:47:ab:f5:00:56:2b:1f:eb:
cf:2f:e0:81:3b:c3:35:93:dd:30:af:b8:08:6e:04:
c8:4b:6c:8c:ce:0b:18:66:3a:f5:d6:25:e6:0a:e7:
d0:75:0f:41:63:3c:7d:9d:37:3c:9f:7f:c5:20:52:
0d:97:7b:53:15:cd:85:fd:bf:8a:66:32:3e:75:3b:
7e:78:3e:c9:55:ee:b6:26:79:f5:44:67:a0:6c:75:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:1B:FB:50:8C:55:F1:4B:EC:1A:79:E7:9E:91:B5:05:5D:D6:A6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OIwb-1CMVfFL7Bp5556RtQVd1qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9d:af:97:0f:19:6e:15:6f:58:90:ac:02:06:95:52:ab:96:
84:3f:25:e6:fd:80:bf:87:2a:54:50:74:3c:52:23:77:d3:f5:
5a:b7:cd:cc:67:af:32:3c:ea:e0:d0:c9:19:32:c1:cb:2c:5e:
d8:9b:b6:02:47:74:18:67:d5:47:90:52:e8:6c:1f:7c:7d:4e:
fc:5b:51:c8:0e:ae:00:5e:5a:56:7b:d7:b7:55:78:25:26:7e:
fb:d7:a4:03:23:c1:c8:a9:80:63:f4:8a:28:a4:bd:2d:7b:a1:
1b:f2:d4:90:a5:78:18:f0:b3:a1:d1:24:fd:0b:1c:2c:fa:b2:
f7:ea:83:21:e1:0e:8f:16:dd:1e:30:91:82:0c:73:6b:b3:c4:
f2:59:64:12:ca:da:24:41:17:44:84:f0:c5:a1:85:60:2d:34:
18:30:b0:13:8b:1f:fa:55:a6:88:6b:f2:7e:e6:e3:df:fb:62:
78:81:9f:7c:3d:df:a5:e3:11:5a:6b:8c:46:99:71:78:02:b8:
9c:26:e1:86:5c:73:95:cd:a3:29:21:9c:05:38:ce:2b:75:61:
49:a6:d8:9f:74:65:ac:19:f1:7a:2f:fd:37:15:dd:0e:dc:46:
52:1e:24:b1:0c:86:9f:71:16:a1:85:f5:6a:f8:bc:b1:ba:82:
0e:6b:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:23 2024 by rpki-client on console-ams.rpki-client.org