Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/_OOqOvv2tnmm40HheICu6KlwTNA.roa
File: _OOqOvv2tnmm40HheICu6KlwTNA.roa (raw, json)
Hash identifier: 9Ftqc71I9jvMFmbevg66LwFq+W4fuDly3UPB0uWA5Gk=
Subject key identifier: FC:E3:AA:3A:FB:F6:B6:79:A6:E3:41:E1:78:80:AE:E8:A9:70:4C:D0
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 018CC3B69B619C06C777C7084937A48D6FAC
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/_OOqOvv2tnmm40HheICu6KlwTNA.roa
Signing time: Mon 01 Jan 2024 06:29:33 +0000
ROA not before: Mon 01 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1213
IP address blocks: 147.252.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9b:61:9c:06:c7:77:c7:08:49:37:a4:8d:6f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Jan 1 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fce3aa3afbf6b679a6e341e17880aee8a9704cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:39:74:0e:65:05:95:c2:50:37:2f:ac:f0:
5a:c2:a2:f7:ef:3b:5e:32:a6:a5:eb:44:d7:dc:5e:
39:ce:c7:a6:fa:9e:ae:71:49:d1:f8:c0:84:6d:85:
14:64:7a:f8:06:91:24:52:c5:0e:2e:ca:31:30:87:
7b:58:1d:35:86:ae:0b:f0:2b:1f:e5:a1:23:1a:55:
d7:d3:66:d2:ba:e7:86:5b:e8:d3:c7:74:86:1c:6c:
84:5d:bd:a4:bb:81:5a:28:91:cd:2c:33:26:96:44:
48:23:e6:b4:e7:0a:3c:c0:55:ae:53:c2:f4:67:54:
64:fe:fd:3b:a8:d3:0d:4d:c0:ff:51:ca:ad:a7:7a:
dc:56:dc:48:7c:03:67:d6:ef:93:3e:24:b6:69:75:
d9:82:be:ba:a7:57:29:79:1f:c9:09:8f:80:ac:25:
73:68:9d:88:24:53:ba:05:81:a4:9c:cb:db:17:81:
82:0f:9e:6e:36:03:67:c4:76:25:2d:24:65:13:d9:
37:f6:8c:1c:e6:d9:dc:39:8a:fc:32:14:7d:44:88:
3b:c0:68:1f:8c:15:2c:ba:72:ff:bb:11:fa:81:3b:
6d:4b:6d:70:24:d1:bb:83:af:a3:5e:a7:ea:0e:e9:
ee:d5:98:3b:27:3f:8b:12:ff:2a:2e:e1:56:11:2a:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E3:AA:3A:FB:F6:B6:79:A6:E3:41:E1:78:80:AE:E8:A9:70:4C:D0
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/_OOqOvv2tnmm40HheICu6KlwTNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:60:58:28:fc:19:18:08:82:97:ec:00:9a:c1:29:e7:59:6b:
c7:e4:32:af:65:98:03:9e:f5:2d:b8:9a:b1:73:66:75:5e:6a:
a9:65:dd:31:c0:c9:a8:3b:9a:6e:d6:a1:9a:03:8d:e2:fb:9b:
c0:7f:f2:41:17:17:2d:2c:ff:7e:07:c4:21:67:42:d8:bd:64:
89:9a:54:a0:4d:c2:3a:49:11:13:52:fe:03:c8:44:0d:b9:7a:
d9:63:22:21:46:77:2e:f6:44:ad:c4:b7:2f:09:a6:07:9f:d0:
a2:66:e3:af:7c:9f:f4:22:63:1a:98:60:ef:1c:b3:b7:47:b1:
b4:0d:be:09:43:07:d4:8c:fa:9f:3b:a0:e3:e6:de:27:ac:e1:
92:ed:9d:39:3e:c0:4c:63:e1:cb:78:f2:03:21:05:2f:c8:c8:
4c:2a:f6:d7:08:22:6e:7f:d3:e1:1e:27:aa:08:83:ed:51:d0:
63:fa:93:57:5a:42:c5:85:ba:f3:3a:43:64:04:06:cb:8f:86:
e4:6d:59:10:27:22:c0:75:8b:8f:08:9e:3b:23:a0:b1:a9:8c:
e8:19:8f:11:f2:af:08:d1:c1:0d:5a:e0:c0:a1:db:17:2e:0c:
ee:2d:26:45:c1:ea:39:b9:fd:59:18:1d:cf:e7:a7:43:46:6d:
fe:c1:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:48:10 2024 by rpki-client on console-ams.rpki-client.org