Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/OQ1U7KPeRWFEZdJPgufSh0Dj2PM.roa
File: OQ1U7KPeRWFEZdJPgufSh0Dj2PM.roa (raw, json)
Hash identifier: 4fMJEXNPL/qo879VVV3MG1DZValcqp8QzR8tIvw6BPE=
Subject key identifier: 39:0D:54:EC:A3:DE:45:61:44:65:D2:4F:82:E7:D2:87:40:E3:D8:F3
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 018CC9BBF537D2993277BEB6736BB6E26F08
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/OQ1U7KPeRWFEZdJPgufSh0Dj2PM.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51224
IP address blocks: 194.13.70.0/24 maxlen: 24
194.13.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f5:37:d2:99:32:77:be:b6:73:6b:b6:e2:6f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=390d54eca3de45614465d24f82e7d28740e3d8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:72:cf:22:9c:37:54:b2:9a:76:fe:62:f7:
54:b0:ce:1d:de:61:76:25:66:94:3a:90:58:45:a3:
87:a7:bc:38:c6:5f:ec:98:39:21:93:73:fd:58:f7:
09:25:69:2c:31:f2:dc:56:7b:d5:ef:51:11:4d:05:
3f:f9:bd:46:30:80:2d:95:05:c8:3f:73:da:90:4b:
5d:fd:b3:24:89:80:e4:b3:c6:4b:4a:7a:3c:64:3a:
d3:1c:01:e2:cc:7d:71:b4:8b:ba:c2:f7:c6:08:2c:
9d:c5:d1:49:73:e7:ad:ab:ad:e4:c1:31:30:f8:0d:
43:e7:b2:a7:df:3f:91:34:4c:e9:01:d8:35:a0:72:
6c:8c:4c:c8:c8:54:04:48:4d:5a:a7:13:0f:cf:98:
b4:e1:07:c2:2e:7c:7c:4e:58:02:6a:7d:44:a0:e5:
42:f3:1c:e3:77:d8:3a:75:f1:1c:e1:6a:4c:80:d7:
11:e7:29:a3:b4:63:e3:8e:e4:66:56:8e:0f:60:68:
70:9d:98:f1:25:f0:51:97:73:f7:cd:3b:38:59:34:
9b:18:ec:35:26:e9:8e:7f:7e:c1:42:2f:b4:65:02:
72:3c:11:e3:bb:cd:81:12:7f:56:a9:4d:06:e8:94:
9c:61:b6:80:b3:1e:a0:f4:23:5f:a6:49:ad:e9:1f:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0D:54:EC:A3:DE:45:61:44:65:D2:4F:82:E7:D2:87:40:E3:D8:F3
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/OQ1U7KPeRWFEZdJPgufSh0Dj2PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.70.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:15:ad:da:22:8e:78:c5:a3:cb:19:ec:14:2b:d6:0a:f0:61:
a6:02:e8:cb:24:d3:ed:c7:97:c7:8c:70:4d:03:13:9d:41:b0:
29:63:fa:d0:a7:4b:e6:e0:19:e9:01:d2:de:92:83:3a:58:bd:
60:27:49:8d:f5:a9:43:3b:f0:03:e7:72:49:f2:d0:68:1b:6a:
d8:3b:1a:a0:4d:0d:30:e5:a5:2b:90:5f:a5:f7:3a:6c:53:fa:
22:0a:4e:67:9f:39:06:d3:0f:3d:e7:79:47:0f:36:b4:d1:fe:
f7:93:ee:22:70:b3:df:fa:df:92:8e:36:58:39:e8:67:01:0b:
c4:4f:92:aa:6d:a0:15:b3:9c:fa:d9:ab:9f:30:de:27:0d:9a:
9f:3d:cb:98:86:33:9e:0c:bd:8a:92:25:1a:ee:de:2f:33:94:
8f:74:38:a6:76:c8:d2:72:b5:c6:80:e0:07:46:a0:25:9a:9a:
1c:77:51:11:37:02:d8:c8:96:8b:b4:89:cd:d2:95:ee:e0:1a:
9e:63:ac:8c:b0:e7:15:a0:d9:9c:c1:a4:86:67:8b:19:ab:85:
3d:86:2b:14:db:a5:40:1b:7a:f4:2c:db:63:54:6e:19:c5:fd:
cd:e8:f3:8f:53:f4:cf:db:85:64:d7:f5:92:d5:91:17:c9:65:
09:26:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 13:04:19 2024 by rpki-client on console-ams.rpki-client.org