Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/ofeylJjvM_FXlEtYUlLc0wqIlTc.roa
File: ofeylJjvM_FXlEtYUlLc0wqIlTc.roa (raw, json)
Hash identifier: B28tD5CfYRekU5o5vVdUmdqv/3b0S8v3eD71yfZtV2s=
Subject key identifier: A1:F7:B2:94:98:EF:33:F1:57:94:4B:58:52:52:DC:D3:0A:88:95:37
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 018CC26D7E3EAC65188751EEF729F309E223
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/ofeylJjvM_FXlEtYUlLc0wqIlTc.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212152
IP address blocks: 198.205.14.0/24 maxlen: 24
198.205.13.0/24 maxlen: 24
198.205.12.0/24 maxlen: 24
198.62.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7e:3e:ac:65:18:87:51:ee:f7:29:f3:09:e2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1f7b29498ef33f157944b585252dcd30a889537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:52:13:22:b6:2f:da:ca:ab:82:09:df:4d:
db:65:3b:0e:ac:de:21:b2:ea:42:bd:b3:18:c5:5d:
15:20:36:62:20:25:ee:ad:05:84:28:9f:d9:82:41:
a1:90:bd:b9:7d:3e:5e:1a:3b:1e:b0:92:0b:f7:86:
b7:f0:7c:c0:2c:79:c1:a5:4e:61:91:9c:e9:13:43:
55:a2:1b:76:9b:e4:a0:76:7e:0b:78:94:37:e2:dd:
a9:1d:d9:52:2a:c5:b4:54:87:8a:b1:9e:60:ae:3b:
41:59:07:ab:e2:9f:28:28:82:ae:28:e6:ab:6d:11:
c5:09:9d:f5:02:98:d4:ed:55:ee:22:96:27:3b:b4:
82:c9:91:9f:6e:ac:42:b0:d0:0a:55:93:47:f4:d5:
4f:e6:c7:ff:75:b8:87:8f:4b:40:10:c7:d0:e9:3b:
f7:16:4e:d9:40:91:86:67:8b:cd:c9:e7:fb:d8:ab:
51:b4:6e:c5:81:c8:e1:e3:1a:1a:08:4f:7e:d1:d2:
48:93:0b:4a:15:62:2f:0a:c9:b0:20:e5:81:c7:16:
c7:f6:85:b6:1d:64:2e:3c:f7:67:7f:08:63:2b:30:
46:d7:44:86:cd:a3:19:52:dc:5f:74:76:81:ab:29:
2e:04:63:e6:68:fb:bb:3b:5d:8a:d7:82:08:46:ac:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F7:B2:94:98:EF:33:F1:57:94:4B:58:52:52:DC:D3:0A:88:95:37
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/ofeylJjvM_FXlEtYUlLc0wqIlTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.62.104.0/24
198.205.12.0-198.205.14.255
Signature Algorithm: sha256WithRSAEncryption
75:28:ee:e4:cb:64:f0:d6:3a:d5:c8:e0:61:62:ec:7d:38:7f:
f7:09:6d:ef:a0:fe:11:43:f9:b0:5a:19:05:a9:01:ce:83:a0:
09:b1:69:93:be:a4:36:50:f9:29:22:7d:82:a5:23:27:b6:93:
97:61:62:5b:c2:40:9e:f7:ff:9d:ba:6f:34:25:6e:4d:47:9e:
86:0b:53:33:b7:6a:81:c8:21:32:1f:84:45:f3:eb:26:50:59:
8a:0a:d7:ba:c4:c4:34:41:c9:44:97:33:53:3f:95:94:66:e9:
04:3b:18:bf:35:25:23:60:62:53:39:50:df:61:e9:d3:ec:da:
91:75:5d:4d:d7:82:11:f2:25:b4:ae:4d:7b:60:40:58:f0:bf:
69:54:82:3d:77:22:f4:8f:3c:83:5c:83:2d:7e:5e:9b:8d:69:
f6:59:96:5e:36:47:75:a4:84:21:6d:5d:f1:00:a4:1b:d9:3a:
f7:3f:da:17:cd:40:85:d4:04:b4:d2:bf:5c:fe:ee:46:75:aa:
57:4a:59:8d:9f:9f:0b:ba:32:89:94:2b:bb:dc:e2:c7:f8:12:
39:11:d2:9d:38:a6:16:8a:9a:3e:48:7d:77:f7:b8:03:49:03:
aa:a4:79:43:ee:d8:42:94:f0:ce:8e:75:50:09:c0:3f:61:58:
2d:d2:3d:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 05:13:20 2024 by rpki-client on console-fra.rpki-client.org