Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/oLV8_LYCuwa6wPo93bIGXnBGMDE.roa
File: oLV8_LYCuwa6wPo93bIGXnBGMDE.roa (raw, json)
Hash identifier: M4QHNO3vHjIaXsoS6SVBBD7D09EFeUUe1T8elYC9MYg=
Subject key identifier: A0:B5:7C:FC:B6:02:BB:06:BA:C0:FA:3D:DD:B2:06:5E:70:46:30:31
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 01930201EF8DFBA59EC0253E9CA284436E5E
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/oLV8_LYCuwa6wPo93bIGXnBGMDE.roa
Signing time: Wed 06 Nov 2024 15:05:01 +0000
ROA not before: Wed 06 Nov 2024 15:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48273
IP address blocks: 185.168.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:01:ef:8d:fb:a5:9e:c0:25:3e:9c:a2:84:43:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Nov 6 15:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0b57cfcb602bb06bac0fa3dddb2065e70463031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:53:c9:6c:65:81:54:7a:67:87:1e:d8:5f:
86:73:7b:05:ca:9b:f2:fd:bf:41:e4:fb:f1:cf:c7:
5d:d6:fd:ff:2b:dd:41:9a:2a:40:28:b4:40:80:30:
a9:42:4b:13:f1:11:2d:c4:5e:de:3c:1a:3c:a0:24:
e7:5c:74:fd:c0:27:98:6a:4a:56:e6:80:ef:39:6a:
75:fa:2f:f2:9e:ac:40:15:c7:81:7a:56:54:2e:53:
f2:9b:bd:e5:e8:7f:59:3a:57:d9:6a:2c:08:62:77:
bf:a0:74:af:79:eb:da:5f:23:50:8f:74:39:c1:41:
43:c1:88:af:4f:b3:c6:6b:7c:fa:32:d2:f9:f7:3f:
b6:67:48:66:34:5c:c2:7f:05:7a:25:bc:c8:ef:5b:
01:17:a0:d2:1e:54:1b:4e:ec:8b:8b:5c:fc:11:0b:
dc:76:f0:0f:d9:50:76:cf:48:dd:17:14:4e:d7:ee:
d4:0b:18:9f:da:88:42:3c:9e:7c:6b:b3:f4:b8:bd:
07:d6:ba:dd:d9:bc:34:f2:2f:04:0a:f2:ac:b4:0d:
b1:85:b1:5b:94:12:01:85:d6:f5:68:c0:9d:cc:b3:
14:f8:ea:0f:76:9f:5e:10:88:a8:01:6b:9d:a4:1c:
33:30:c0:19:66:f6:86:88:0c:58:9c:e3:ae:ed:4d:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:7C:FC:B6:02:BB:06:BA:C0:FA:3D:DD:B2:06:5E:70:46:30:31
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/oLV8_LYCuwa6wPo93bIGXnBGMDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.10.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c1:ce:73:cd:dd:83:bf:5c:8d:07:96:b7:85:49:b0:19:6c:
0a:c4:6b:05:e4:43:94:68:cc:d4:39:5e:77:fc:34:0c:f1:b3:
d9:7e:9f:48:33:27:d8:ae:c3:8b:b8:a0:06:ac:96:6b:34:4d:
23:da:65:2a:33:fa:24:3d:02:68:90:e9:95:91:bc:0f:43:e6:
52:d6:4c:aa:00:3a:40:a3:5f:50:03:f4:03:91:63:d3:df:18:
43:96:e2:f4:24:7f:70:6e:ee:21:db:5e:32:ed:eb:be:44:1f:
4f:68:41:f2:82:8a:47:ce:f2:77:61:46:b9:0a:ee:a0:ed:a6:
52:a6:ab:2c:2f:8d:35:f7:29:cc:ee:2a:16:1d:ea:3b:98:bd:
8b:eb:c2:81:56:48:71:a9:36:3d:34:48:00:69:81:f3:7d:c3:
97:55:4f:0b:eb:96:03:14:94:e9:a1:a4:be:ab:ba:10:f9:5d:
a2:a4:4e:20:64:a0:f9:72:7a:f3:82:f2:69:d1:b5:42:aa:46:
2c:ed:a1:ca:ae:63:da:c5:59:7f:ef:aa:01:d5:14:f0:33:fa:
76:85:cf:39:88:e1:30:cf:5b:8a:2e:de:e3:32:6f:6e:19:67:
43:6c:61:68:c5:dc:ca:44:3f:3a:3e:cb:56:a9:64:25:95:11:
7c:96:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:01:38 2024 by rpki-client on console-ams.rpki-client.org