Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/0C8bj-jMmIPPLk5sDwTD1lgMA90.roa
File: 0C8bj-jMmIPPLk5sDwTD1lgMA90.roa (raw, json)
Hash identifier: k5t+dQSBM5Nsb05qX4lsb8dpe+4q11xhSnVkL+JwH5w=
Subject key identifier: D0:2F:1B:8F:E8:CC:98:83:CF:2E:4E:6C:0F:04:C3:D6:58:0C:03:DD
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 018CC3488C323791BA048E764F9E4FFE84FB
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/0C8bj-jMmIPPLk5sDwTD1lgMA90.roa
Signing time: Mon 01 Jan 2024 04:29:20 +0000
ROA not before: Mon 01 Jan 2024 04:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29684
IP address blocks: 195.43.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8c:32:37:91:ba:04:8e:76:4f:9e:4f:fe:84:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d02f1b8fe8cc9883cf2e4e6c0f04c3d6580c03dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:06:e3:d3:a3:71:65:de:c6:1b:cc:8c:9d:45:
f9:b5:54:e2:5d:8d:07:4e:e3:69:1f:38:6c:6b:7f:
43:fc:98:e1:80:ba:27:d7:be:71:71:ec:c2:73:a9:
d9:57:ef:31:7b:3a:ab:00:dc:59:bf:26:b0:64:4d:
a2:17:13:f4:c2:18:c2:7e:46:a5:80:52:9b:0c:3b:
12:6a:b1:c0:fd:5c:ae:f7:de:0a:d5:1e:47:bf:cd:
f4:60:14:1c:8f:b1:b3:72:82:2c:63:da:5a:46:b5:
5d:ba:5d:e1:a4:b3:79:64:f9:cd:10:6e:a2:8d:1e:
d9:0c:2a:a4:71:b6:ec:1a:5c:93:3f:bd:37:d0:5f:
39:96:fb:2f:12:e2:2f:ac:bf:98:69:17:8b:db:6e:
2c:cf:39:66:e9:7d:b4:c1:f5:13:7c:dd:fd:9c:a1:
9b:c7:e3:b9:74:95:f3:2b:c5:67:97:c3:8a:0e:87:
ed:a0:59:a6:c7:8b:e1:f9:1c:93:56:58:72:c4:31:
79:49:89:c5:68:52:86:d3:0d:03:99:2b:75:a4:54:
18:d3:b3:0d:6d:8d:1a:2d:76:5f:ca:57:0b:f7:cb:
57:98:6c:da:3d:18:ba:86:bf:06:e0:c6:f6:64:c6:
85:cd:90:b4:41:6a:46:3d:ac:8e:5f:da:02:83:2b:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:1B:8F:E8:CC:98:83:CF:2E:4E:6C:0F:04:C3:D6:58:0C:03:DD
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/0C8bj-jMmIPPLk5sDwTD1lgMA90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7b:ae:e5:5e:ab:9b:ad:e2:56:9b:5d:bf:05:3e:db:09:29:
83:1e:cb:75:44:76:c6:12:5d:3b:4a:2b:6c:12:48:d7:f4:60:
e9:ec:b7:9a:e1:74:4c:b9:45:bd:a8:b6:b4:9c:6a:b2:43:b4:
f5:ab:bf:16:0c:74:85:0d:3b:27:2f:25:94:a8:8d:d2:11:c7:
57:92:72:ea:f3:46:47:ee:7b:10:54:09:50:5e:18:29:61:59:
7b:0e:c9:a2:cb:a0:e3:b8:f2:68:b0:14:9d:fc:eb:00:04:cf:
51:80:04:7f:14:01:7b:48:6d:cb:b6:32:36:0d:d9:a3:a9:5d:
f9:36:26:08:75:13:2d:e8:3e:4f:39:de:65:b4:69:32:62:86:
94:c2:de:a1:f5:c2:db:63:bc:2b:df:c6:50:c0:9c:09:28:5c:
1e:7a:51:2d:02:5a:75:9c:7d:fb:85:5b:72:f4:9f:6e:e0:dc:
d6:53:2d:51:8c:5d:d6:8e:ec:aa:d2:55:df:84:bb:c6:d5:78:
db:93:12:de:d9:50:47:a7:2c:e6:d4:29:11:db:51:82:e5:6b:
36:41:91:06:6d:ca:f2:9a:48:83:4e:40:f7:f4:8f:54:11:31:
02:b4:7d:bb:fb:da:52:05:09:4e:69:5b:1a:19:7e:19:c8:34:
fd:01:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:26:47 2024 by rpki-client on console-ams.rpki-client.org