Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/O16nuc7PJv6UKtnErfVUixGSf_E.roa
File: O16nuc7PJv6UKtnErfVUixGSf_E.roa (raw, json)
Hash identifier: 8sj4uacTwu5c2UT6Oe79n43YkxNlDlcyRNLmnWbAQFg=
Subject key identifier: 3B:5E:A7:B9:CE:CF:26:FE:94:2A:D9:C4:AD:F5:54:8B:11:92:7F:F1
Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial: 018CFCBEA179FB044852F1B1071665100210
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/O16nuc7PJv6UKtnErfVUixGSf_E.roa
Signing time: Fri 12 Jan 2024 08:16:40 +0000
ROA not before: Fri 12 Jan 2024 08:16:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44947
IP address blocks: 185.154.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:be:a1:79:fb:04:48:52:f1:b1:07:16:65:10:02:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
Validity
Not Before: Jan 12 08:16:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b5ea7b9cecf26fe942ad9c4adf5548b11927ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1d:8f:9f:55:4a:e7:ba:d3:22:41:23:9f:2d:
54:46:a5:e5:24:cd:1b:6f:8e:ef:d9:06:35:24:17:
fb:02:bf:8d:b0:d3:22:48:72:ed:18:6a:f1:a9:68:
c3:24:24:df:c8:8d:e2:16:f2:20:6a:6f:f6:1e:60:
47:4b:a1:e3:d7:05:13:5f:ab:99:25:df:ed:d3:ad:
ae:12:59:19:93:1d:37:ba:00:d6:6d:b4:45:8d:27:
53:8e:ff:16:4b:59:3b:b9:84:a5:6d:e8:8f:d4:aa:
fc:d5:97:7f:20:cc:73:5d:0f:15:f7:d7:c1:8c:0b:
26:27:e0:02:b2:d3:a8:5d:6a:ed:d5:f2:f5:31:5e:
95:ab:8c:28:de:b6:82:2e:8f:94:71:76:7d:d7:ec:
e0:76:25:7c:6e:90:91:dc:bf:92:99:90:79:5a:6b:
e6:ab:57:cc:ee:f8:34:b8:d1:a2:5c:a9:ab:28:b1:
c8:13:e6:ab:ef:56:08:4a:2d:43:67:23:89:3f:5b:
48:5f:6f:e7:4d:ea:7a:5d:23:5b:d5:55:06:f2:08:
ba:ec:cc:db:00:8f:a4:0d:12:77:ae:31:a5:97:72:
09:d7:a3:42:50:4a:6e:3e:25:10:37:0c:42:dc:9f:
65:9c:b2:c1:2b:97:8b:cc:5a:a1:22:bf:0a:ec:0e:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:A7:B9:CE:CF:26:FE:94:2A:D9:C4:AD:F5:54:8B:11:92:7F:F1
X509v3 Authority Key Identifier:
keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/O16nuc7PJv6UKtnErfVUixGSf_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
Signature Algorithm: sha256WithRSAEncryption
98:51:e9:1f:42:90:1c:fe:8c:f7:0e:d6:93:7e:ff:78:c0:ff:
e4:0b:85:b4:77:74:c4:02:55:00:7b:9b:67:68:93:1a:2f:7a:
2d:30:0f:76:51:fa:67:29:db:e6:8e:8e:95:7b:58:8d:eb:4a:
60:f7:16:50:41:fe:2e:f6:9b:b6:40:90:f7:25:a5:43:45:8a:
e8:24:a6:04:a3:a9:fb:cf:35:7d:37:a0:14:80:67:50:cf:be:
ad:2a:7f:fd:96:47:28:04:58:6b:66:8f:e3:44:6b:9d:36:63:
f6:88:2c:37:35:9f:c7:9a:d9:49:ae:bf:3b:36:58:9c:c7:56:
b3:63:2e:d7:64:17:88:10:b4:15:aa:1c:f5:0c:ac:6a:6b:1a:
e1:8b:a5:5e:a5:ee:c3:22:fe:85:66:d9:b3:bf:06:89:ac:d5:
6f:61:60:38:a4:d0:b7:df:7e:a2:f1:ec:03:15:68:74:6a:f2:
1e:11:07:ee:09:b9:69:4c:6d:e2:d5:42:bc:1b:cb:a7:64:20:
00:c3:09:57:23:05:9e:36:2b:b5:5c:e0:ea:3a:8a:db:ad:4d:
21:5f:32:87:99:18:7e:40:a3:c3:35:64:26:1d:98:c0:87:01:
8d:17:46:0d:53:53:6d:d1:36:2b:bf:55:1b:23:7f:97:55:6f:
fa:21:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:00 2024 by rpki-client on console-ams.rpki-client.org