Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/oLmaOEVE8DwjuTJAAVhAlJxNyOI.roa
File: oLmaOEVE8DwjuTJAAVhAlJxNyOI.roa (raw, json)
Hash identifier: 7V52S6eLl2ubh3jMoLQQbYbapg+Zuh79qTxYiUHRJ5I=
Subject key identifier: A0:B9:9A:38:45:44:F0:3C:23:B9:32:40:01:58:40:94:9C:4D:C8:E2
Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial: 018CC94DF1CFACB27ECF59DC839713D76542
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/oLmaOEVE8DwjuTJAAVhAlJxNyOI.roa
Signing time: Tue 02 Jan 2024 08:32:57 +0000
ROA not before: Tue 02 Jan 2024 08:32:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 703
IP address blocks: 194.169.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f1:cf:ac:b2:7e:cf:59:dc:83:97:13:d7:65:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Validity
Not Before: Jan 2 08:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0b99a384544f03c23b93240015840949c4dc8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:ff:6f:b3:25:15:3f:2e:e2:3b:bf:26:8b:
a8:56:a6:e2:ad:ec:f3:c7:13:b8:30:2b:a2:29:20:
ff:76:80:77:00:44:ac:14:4c:57:3e:5f:df:ba:cc:
79:10:0d:13:86:6f:4e:3c:3f:ce:d3:61:97:a4:78:
c8:db:63:69:77:6c:60:8e:70:88:c1:9d:06:1a:eb:
dd:80:4d:20:f9:3f:f9:ab:a8:b5:5f:16:91:e0:7e:
98:3a:7e:5f:9e:c3:86:d0:59:40:a7:84:1d:1a:30:
79:99:9c:ff:05:d2:0d:71:2c:89:fd:42:61:a0:e9:
de:fc:e7:ed:cf:3d:fe:80:33:90:de:94:ef:70:7b:
39:f4:e6:d5:67:fe:e3:a5:aa:2c:81:a0:f4:bd:1c:
ce:7f:55:2b:08:fe:8a:24:b5:57:eb:42:84:c3:90:
70:68:13:6d:a8:e9:a3:d6:94:b9:8b:09:da:32:45:
e9:52:47:31:c6:9a:f6:54:cc:85:61:28:04:f9:37:
76:ab:b0:f7:6b:20:03:e3:bd:5f:50:1f:19:a8:70:
1f:90:86:f1:2f:b3:d3:27:fe:6e:65:e1:9e:fd:eb:
48:01:df:0b:83:84:7e:e6:5f:15:25:8c:a6:a3:67:
48:15:c8:b4:dd:e2:4a:3e:71:55:d3:5d:39:84:51:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B9:9A:38:45:44:F0:3C:23:B9:32:40:01:58:40:94:9C:4D:C8:E2
X509v3 Authority Key Identifier:
keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/oLmaOEVE8DwjuTJAAVhAlJxNyOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ac:12:e4:87:35:48:7c:61:ca:15:64:0b:bc:8b:31:90:f3:
8d:fc:de:24:f8:4d:76:a9:f8:b1:c4:39:50:6e:4a:5b:87:29:
88:03:ec:3a:04:0f:cb:18:d7:a2:80:84:fb:c3:af:e6:d3:8a:
fa:57:0f:da:9e:a7:bf:30:64:c3:c1:91:c2:34:e6:e3:3c:9f:
a5:8a:db:b6:e2:cf:9c:02:c7:2e:67:29:c2:51:51:e5:d2:81:
a9:8c:b2:12:b7:28:d7:98:8a:51:f3:59:bb:b4:b6:c6:68:98:
62:f8:2f:71:7f:e0:5f:09:e7:34:fb:80:4c:ea:9d:aa:2b:88:
94:84:96:92:7d:7b:32:31:09:c0:57:f6:b9:15:db:2b:b1:61:
66:ee:fb:a7:da:ef:fd:b1:28:47:fc:a6:1e:4a:d7:bf:be:b1:
e2:3e:e2:71:8a:4a:d5:70:58:5f:40:5b:1e:30:ff:47:c5:a5:
43:52:a4:c1:58:6c:bd:72:66:cb:a9:04:ae:30:f9:55:7c:3b:
1d:1d:36:a1:eb:7e:f0:5e:9d:e4:ef:94:fb:1a:75:6f:e3:7e:
16:26:da:11:e1:f3:22:80:45:ac:fa:8a:a6:54:9f:59:24:5d:
7e:fa:1d:fd:d4:20:8b:97:ab:36:fe:85:7d:2d:f7:28:c2:13:
b6:59:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:54:13 2024 by rpki-client on console-fra.rpki-client.org