Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/OHIVfyYGDx1hn5LgfA6mLomn8b8.roa
File: OHIVfyYGDx1hn5LgfA6mLomn8b8.roa (raw, json)
Hash identifier: mFm7Y28dIq97Gq7fhwe2Hd/4gVYdVYHXZNQGAGKQla0=
Subject key identifier: 38:72:15:7F:26:06:0F:1D:61:9F:92:E0:7C:0E:A6:2E:89:A7:F1:BF
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 018F2F2730C913E15448BB6292B6AFCB4F10
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/OHIVfyYGDx1hn5LgfA6mLomn8b8.roa
Signing time: Tue 30 Apr 2024 13:17:28 +0000
ROA not before: Tue 30 Apr 2024 13:17:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 192.112.151.0/24 maxlen: 24
192.112.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:27:30:c9:13:e1:54:48:bb:62:92:b6:af:cb:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Apr 30 13:17:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3872157f26060f1d619f92e07c0ea62e89a7f1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:e3:19:12:d0:e7:70:6b:8d:21:cc:94:3e:
63:d9:99:37:38:9a:ad:94:b8:0b:8f:74:db:9b:99:
03:99:01:66:dc:ea:23:d0:bc:30:df:9e:c4:d9:02:
31:2d:69:f5:f7:41:17:11:10:d1:9b:9c:2b:d1:6e:
06:28:53:f7:d8:0c:c1:8c:0b:5d:7e:44:da:b2:86:
31:fa:bd:00:c9:b8:f2:96:5f:88:e1:d1:25:5a:9d:
7c:32:35:23:9d:6a:ba:3d:45:4d:29:a3:e2:e3:7b:
ef:7c:8b:ef:61:75:44:db:51:37:a5:fa:05:eb:1f:
91:da:7e:01:0d:2e:0a:f9:06:07:54:fb:f6:75:23:
60:8a:4d:b4:6e:28:87:d2:fb:69:6d:1d:55:19:73:
12:9d:9a:2c:23:96:cb:0a:c1:27:ac:bf:49:a8:63:
92:51:3c:fb:71:e8:37:1e:f0:48:36:6b:40:d7:57:
75:2a:fd:fb:51:34:4b:a4:62:3a:34:4b:c6:a5:b0:
34:d7:b9:80:95:f5:50:19:46:61:92:64:91:3b:1e:
94:a2:47:d8:f3:63:69:eb:9c:55:74:0c:30:7c:7d:
a2:fd:5b:aa:e3:81:01:e4:e0:d3:63:80:32:04:18:
9f:f9:3c:3a:51:d5:1d:f7:3f:e2:b1:74:34:a9:cc:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:15:7F:26:06:0F:1D:61:9F:92:E0:7C:0E:A6:2E:89:A7:F1:BF
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/OHIVfyYGDx1hn5LgfA6mLomn8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.112.151.0/24
192.112.178.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9d:e9:fa:bd:b6:b3:ea:e3:52:56:07:d3:c2:fe:0e:5b:ef:
ba:21:d4:1b:89:5c:38:08:b5:24:da:2b:36:e2:37:97:6e:f4:
d2:58:7e:ed:d4:d2:6c:85:33:7f:e9:8a:34:96:ac:61:b6:69:
25:1a:72:50:51:04:8e:7c:fd:bf:80:a6:54:0c:8d:03:52:8f:
b5:13:ba:57:5c:92:bc:ac:1b:5e:d5:8c:41:0c:37:d0:85:86:
ee:03:a3:4e:16:c9:02:f3:54:f3:f5:3b:65:3c:c2:a1:31:34:
d0:96:93:f5:89:93:f3:48:af:99:8d:51:4f:92:1c:f5:cc:da:
8f:09:e2:d7:ad:15:cb:38:c0:59:0f:5d:aa:99:d3:9b:98:97:
e6:c9:68:37:16:8d:a8:ae:47:81:09:5c:38:49:a1:a8:83:0a:
41:cb:7a:bf:97:e4:54:30:c2:60:a3:df:af:8b:8a:86:a0:82:
82:dd:b5:9a:34:49:68:98:62:a1:56:7a:f9:91:f2:63:e3:5a:
67:41:00:36:4a:16:6d:5e:64:25:92:fb:d2:f9:f5:a1:cd:24:
31:2b:bd:dc:2b:ff:40:a0:63:ef:dc:d5:f6:3a:b3:d9:ac:dc:
35:c1:a3:2d:c9:b4:5a:40:97:b9:7b:28:bd:09:d0:f0:c3:4d:
26:da:86:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:54:13 2024 by rpki-client on console-ams.rpki-client.org