Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oSNOAkpxgUnmogukPUoc5pyQSyg.roa
File: oSNOAkpxgUnmogukPUoc5pyQSyg.roa (raw, json)
Hash identifier: KFgFTBZtHsAH+ko5L9DJtw3uE8YOCCu5za4itBTX/WI=
Subject key identifier: A1:23:4E:02:4A:71:81:49:E6:A2:0B:A4:3D:4A:1C:E6:9C:90:4B:28
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E802B9B9FB194D9957B9F570E4DF0A932
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oSNOAkpxgUnmogukPUoc5pyQSyg.roa
Signing time: Wed 27 Mar 2024 13:48:45 +0000
ROA not before: Wed 27 Mar 2024 13:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 193.58.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:2b:9b:9f:b1:94:d9:95:7b:9f:57:0e:4d:f0:a9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 27 13:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1234e024a718149e6a20ba43d4a1ce69c904b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:ae:85:49:26:39:11:7b:50:87:31:0e:99:
2d:0b:8d:6d:05:e7:5e:66:f7:4a:63:c2:66:7c:8c:
4f:a6:a7:1c:e3:48:84:d9:23:34:cb:10:1d:c3:c4:
61:36:8b:dc:88:1d:f9:11:87:bb:5c:6d:b8:b8:fc:
99:0c:eb:9c:f3:ab:fd:3d:e8:f3:7e:c1:c6:e1:85:
81:3e:8d:a3:5d:d8:d8:a6:02:2c:32:0a:45:2c:b2:
7f:71:8c:3e:7c:92:75:38:b2:6e:f7:0f:d6:4b:e5:
07:23:b5:de:95:fd:cf:bd:18:22:7a:27:10:7f:67:
a1:02:92:be:d5:82:0b:cb:18:13:f5:94:e8:da:e3:
db:00:37:1c:df:87:de:78:49:f3:90:c8:b3:44:78:
7b:49:ad:ff:53:a3:3d:5e:07:1d:56:9b:e9:b6:83:
c1:40:05:f1:53:3d:98:f4:a4:29:57:1b:68:ea:f0:
8a:8a:a0:6b:fd:f1:77:50:bc:cd:23:e9:6a:1b:02:
27:45:d5:21:ab:dc:b0:d4:7a:a4:58:bf:48:8c:eb:
c3:48:e0:25:4c:db:67:66:40:c1:06:92:28:b8:eb:
db:b1:b2:fe:a0:97:7b:cb:ef:d4:84:d0:06:b0:89:
d2:84:72:ca:f8:82:c3:d2:22:a8:59:38:b1:93:5c:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:23:4E:02:4A:71:81:49:E6:A2:0B:A4:3D:4A:1C:E6:9C:90:4B:28
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oSNOAkpxgUnmogukPUoc5pyQSyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
08:53:f1:5e:9d:bd:9c:7b:1f:a3:26:e1:fa:cc:55:af:81:17:
11:76:fb:95:9b:a2:1f:1c:00:d9:46:32:e6:fe:2a:e8:14:26:
95:76:38:bf:be:e5:6b:81:4f:53:cf:d2:05:3e:66:12:fe:34:
70:0e:82:b5:2b:f9:b7:9e:09:f7:a6:71:1d:7b:8c:e5:c1:1d:
d5:af:6b:d2:f1:ee:1a:fc:37:fc:72:04:4a:1f:b0:a2:55:69:
9c:9d:b4:3f:e0:5b:f0:d6:d3:e1:9c:9d:21:60:d7:53:cb:58:
46:32:96:14:a6:44:0f:36:55:a1:7d:83:19:00:a1:48:60:45:
97:0d:a7:e1:a5:56:e7:e0:28:70:ad:3b:5e:43:5c:c6:9e:71:
df:cf:c3:1d:45:e0:9c:eb:95:41:83:02:9a:3f:e4:7c:5d:ee:
37:bf:2b:3c:42:41:ef:ec:bb:c8:d7:a7:26:ee:e5:fc:26:b2:
da:d1:54:38:ed:03:d8:21:65:35:86:ec:0d:5d:4b:10:6e:e8:
14:17:9e:22:d7:34:9f:ce:af:e7:49:ac:84:f9:d9:b2:bd:30:
51:18:fd:44:9d:a0:96:2b:52:04:1b:71:4e:56:cb:f3:70:db:
bf:fc:f1:7f:db:40:66:2f:19:e4:5d:2d:45:fd:f1:38:bf:b5:
25:ea:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:31 2024 by rpki-client on console-ams.rpki-client.org