Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/oHUshbA47ICjyYPl38riE6vhJRY.roa
File: oHUshbA47ICjyYPl38riE6vhJRY.roa (raw, json)
Hash identifier: W8cOqaShZg03ra3d0ayPzYuN1P670CX+xvmKfN9SaRg=
Subject key identifier: A0:75:2C:85:B0:38:EC:80:A3:C9:83:E5:DF:CA:E2:13:AB:E1:25:16
Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial: 018CC3B7267D74B4A728B9257E2B15875F1D
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/oHUshbA47ICjyYPl38riE6vhJRY.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 185.239.190.0/24 maxlen: 24
185.239.189.0/24 maxlen: 24
185.239.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:26:7d:74:b4:a7:28:b9:25:7e:2b:15:87:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0752c85b038ec80a3c983e5dfcae213abe12516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:dd:a6:c7:72:7f:af:3a:5e:da:3f:12:52:
46:f4:98:d2:63:3e:0e:13:43:4e:da:b0:0c:89:81:
7f:e6:1f:38:fc:c1:b6:91:4a:f1:91:e4:b6:bb:d5:
45:c1:c4:af:6a:de:1c:da:bc:df:58:13:a1:20:ef:
e2:c1:60:0a:7c:4b:e2:fc:fe:ea:4f:5c:e3:13:5e:
6b:39:ba:18:86:58:a1:ac:0e:12:4b:e8:4d:10:cb:
2d:1d:42:a0:b4:7c:6f:69:8b:83:0e:da:b3:85:3a:
f8:e4:08:5c:d8:8b:5f:0a:39:d3:7d:9f:95:42:7b:
3e:90:43:78:3c:45:3c:b9:b2:bc:ac:5a:d7:11:f0:
2c:e0:38:dd:fe:4e:8b:7a:d4:5e:8b:5c:00:7e:b5:
8b:44:d4:da:29:f8:da:21:41:f7:d3:83:b3:77:d7:
59:e8:db:08:dc:e7:79:9d:78:19:f9:3e:be:b2:82:
a5:6f:af:57:6d:9c:6e:e1:ba:e1:30:d1:d1:b3:91:
08:2e:10:f3:9d:ba:ed:4f:28:92:d2:a0:f3:a7:de:
71:e3:c1:b2:08:f3:0b:64:2d:47:1f:d9:72:ff:e8:
5c:38:07:ec:89:f0:1e:68:fc:6b:3f:fd:db:4a:c2:
16:26:bb:63:eb:ab:28:4b:a3:59:9d:98:c7:95:9d:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:75:2C:85:B0:38:EC:80:A3:C9:83:E5:DF:CA:E2:13:AB:E1:25:16
X509v3 Authority Key Identifier:
keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/oHUshbA47ICjyYPl38riE6vhJRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.188.0-185.239.190.255
Signature Algorithm: sha256WithRSAEncryption
37:df:5a:d8:95:9e:0b:da:50:0b:1f:19:57:1a:2d:5a:61:4b:
71:55:f5:d0:18:42:cb:c1:96:9a:46:de:b4:53:dd:89:91:1f:
55:94:b0:ba:62:75:1c:c8:28:b1:d0:ad:88:16:1d:36:51:9d:
e1:f3:2b:ac:df:3d:bf:27:de:8a:f3:ab:6d:68:06:d6:2b:f5:
64:8b:40:ad:e4:eb:ac:0d:3b:49:e0:5a:28:1b:b1:df:a6:02:
18:e8:dc:51:d8:77:54:2d:78:bb:d8:67:2b:d8:77:4c:7f:ea:
19:4c:1a:cc:dd:c1:c2:ee:37:15:32:18:42:ae:55:f8:60:2d:
b0:0c:0b:cf:f5:11:9d:41:f2:e3:ca:20:b7:c4:f8:c3:83:9a:
71:b5:49:d2:ac:4f:de:a8:77:eb:eb:c6:41:2c:3e:7c:d5:50:
a2:68:d1:3a:18:65:7f:70:d8:a9:51:c0:bc:39:e7:7c:c0:67:
68:57:87:9e:30:93:66:96:5f:f3:de:56:60:71:c1:22:c4:68:
2e:ed:61:50:25:be:12:8a:1c:5f:9a:e9:0a:81:55:ec:43:60:
a4:ff:a7:9c:5b:10:b7:b1:98:29:29:5f:db:60:8c:e7:07:7d:
c4:c2:39:c8:9d:df:64:4a:04:f8:60:c5:2a:11:82:8a:f6:97:
35:57:7d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:39:02 2024 by rpki-client on console-ams.rpki-client.org