Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/O2Si-maoDhbA700hr7J4xPyht0I.roa
File: O2Si-maoDhbA700hr7J4xPyht0I.roa (raw, json)
Hash identifier: cKoLuPKvA9gH7EprttyM/nNWA4zQjqRgTiDsHyMh054=
Subject key identifier: 3B:64:A2:FA:66:A8:0E:16:C0:EF:4D:21:AF:B2:78:C4:FC:A1:B7:42
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 018CCA99AC275C18B341694630606FE95FD3
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/O2Si-maoDhbA700hr7J4xPyht0I.roa
Signing time: Tue 02 Jan 2024 14:35:17 +0000
ROA not before: Tue 02 Jan 2024 14:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24429
IP address blocks: 79.133.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:ac:27:5c:18:b3:41:69:46:30:60:6f:e9:5f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jan 2 14:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b64a2fa66a80e16c0ef4d21afb278c4fca1b742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:14:8b:f8:c4:bd:e0:87:f6:9e:30:a5:94:
1f:b9:5b:3c:32:b9:6e:6c:4a:4f:1f:23:b3:57:cc:
43:fe:e6:24:7e:59:cb:80:5f:a3:bb:ad:af:c3:d0:
40:b8:47:0b:48:09:65:61:e0:ef:85:2a:55:6e:12:
a6:8f:8e:84:15:36:3e:dd:ae:ec:72:56:9f:e9:b0:
f2:d2:0d:dc:50:35:48:d6:01:fc:69:bd:6c:6a:6d:
78:4a:fa:34:f7:fc:10:44:72:ba:8b:3d:ac:51:4c:
0f:0b:42:82:1e:38:7b:ec:f6:c2:72:a2:64:1b:e8:
4f:c4:50:90:4f:3b:ef:36:c7:95:63:3f:69:16:fb:
6f:dc:be:be:67:ed:b8:c8:b5:2f:42:55:35:14:03:
9b:5e:9e:ad:e4:12:ab:bc:fd:b6:09:c8:5d:ae:e5:
0f:8a:87:b3:86:c3:84:65:d2:85:84:43:4c:5f:63:
62:45:a6:11:6a:31:11:31:ba:5e:0c:86:d2:2d:8c:
61:0a:0e:0b:ec:51:f4:9c:60:bc:e8:ce:46:61:d1:
74:0e:e0:cc:28:01:6f:78:b1:86:7f:0b:c0:4d:18:
91:1a:c7:33:38:4a:5c:bb:74:56:2b:72:3c:78:bf:
4c:54:e2:eb:e5:21:e0:ce:29:f4:71:12:fa:c9:57:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:A2:FA:66:A8:0E:16:C0:EF:4D:21:AF:B2:78:C4:FC:A1:B7:42
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/O2Si-maoDhbA700hr7J4xPyht0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.176.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:68:3c:fc:19:ef:49:8c:ca:13:2c:c3:2c:3d:56:c6:ba:1a:
e4:7f:e0:84:3c:a6:e4:06:6f:5c:2e:92:8c:da:c6:ea:b4:9c:
e2:fc:a0:29:72:98:65:d9:36:f4:08:65:90:46:37:3b:79:0a:
09:ca:cb:00:e0:07:91:4e:e2:63:ef:07:f7:92:a2:73:52:d7:
bf:32:a2:d5:49:3b:3d:d6:85:e8:e9:a0:00:97:d0:dd:75:ae:
3a:ac:5f:fb:00:e1:15:66:64:9e:60:b9:f7:3b:3f:56:45:25:
bc:d3:49:6e:2c:bc:9e:bf:0b:83:20:71:fa:cc:3a:cc:74:7a:
7d:bb:eb:bb:14:8c:02:5c:ad:2a:0b:1a:18:31:de:b0:c6:da:
5d:7f:d3:50:d3:4f:0d:b5:a0:52:52:ee:5a:b6:a9:26:72:4a:
d8:67:13:7e:32:6e:1e:a5:35:ed:0f:f1:00:b3:95:73:28:fd:
28:37:f5:f9:1d:7e:44:1b:ca:88:94:db:80:b2:62:4a:57:5d:
7d:06:70:d7:b5:3d:72:aa:4e:9c:7c:b4:1b:c3:5b:00:ef:85:
1f:de:75:d0:89:78:92:18:c2:f8:62:ef:0d:9d:6c:6f:40:8f:
dd:61:01:e1:62:0f:a7:15:58:eb:f7:82:dd:80:a4:3e:d3:c1:
c0:9b:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 11:49:40 2024 by rpki-client on console-fra.rpki-client.org