Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/AimmUuuiRmnYNq9BoxTIc-4oHQI.roa
File: AimmUuuiRmnYNq9BoxTIc-4oHQI.roa (raw, json)
Hash identifier: r2sfOvpw5l/lU4CfwBxOhbP2IGUMf996HYj/YdegMiQ=
Subject key identifier: 02:29:A6:52:EB:A2:46:69:D8:36:AF:41:A3:14:C8:73:EE:28:1D:02
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CC26D52404EF2077E7AB470E1A6AF2551
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/AimmUuuiRmnYNq9BoxTIc-4oHQI.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 84.54.38.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:52:40:4e:f2:07:7e:7a:b4:70:e1:a6:af:25:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0229a652eba24669d836af41a314c873ee281d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:21:af:e7:66:5e:4b:cc:0d:11:45:aa:b7:
98:dc:ee:ef:ff:03:7d:c8:ef:8c:1a:60:61:1c:ef:
b1:e9:06:ab:08:09:4c:dd:95:19:83:ab:4e:18:a9:
7d:5e:aa:c1:fc:11:52:88:e5:ed:60:55:8c:07:95:
a9:46:1a:63:e6:53:6f:48:d1:19:6e:de:46:56:be:
9f:11:e9:85:b3:c2:a7:3b:4f:41:77:95:6e:ed:c0:
4c:c0:b0:e7:2d:3f:98:f6:9f:1e:61:e6:e0:7e:35:
de:c0:05:2b:f8:1f:df:2b:50:7e:67:e3:9b:64:9e:
3c:3e:96:b0:2a:d3:96:8b:9d:2a:aa:c3:0f:5e:2c:
67:e8:23:cf:3e:d5:92:e5:67:26:95:9f:ea:02:80:
5c:8c:f0:ed:8e:92:94:74:31:56:c8:1b:d0:aa:43:
3e:ed:7d:81:65:43:d2:c4:fa:e5:18:4b:0b:2a:f0:
bd:d7:81:fa:00:df:cc:fd:73:6c:85:3a:bf:b0:a6:
c5:34:3f:6e:c4:be:0e:4d:bb:b6:06:e5:8f:b0:d4:
ac:5b:dd:8a:c4:1c:92:b2:5b:de:b0:7e:17:55:92:
04:8f:14:82:97:0f:01:d9:37:47:fd:4f:1b:e3:f4:
9f:34:03:a5:5a:c4:02:f8:ca:2c:20:e2:46:39:c3:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:29:A6:52:EB:A2:46:69:D8:36:AF:41:A3:14:C8:73:EE:28:1D:02
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/AimmUuuiRmnYNq9BoxTIc-4oHQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.241.0-83.171.243.255
84.54.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0f:da:10:15:27:98:c8:eb:4e:18:1e:71:66:d8:d6:0d:c7:
a4:a7:3d:bd:4a:c2:c8:00:ff:92:50:d8:c2:6a:1d:d9:11:c2:
27:c6:4b:10:41:56:26:fe:9a:1d:d2:ee:af:2a:90:d5:72:f3:
59:2b:1c:8c:85:67:d3:69:10:78:0a:18:80:96:a4:1c:23:a9:
9c:68:77:8f:d7:54:4f:5a:32:4d:7f:8f:c3:84:24:72:0e:cd:
7f:bc:dd:9b:2a:1a:62:f3:d3:b6:df:6a:1b:79:97:d7:cc:f9:
b8:56:6c:52:e5:ff:d5:25:09:d5:be:05:0f:a5:5b:91:98:e6:
90:f1:9d:ee:d9:b9:08:ab:86:d3:53:f1:ee:85:15:e1:c6:6b:
0d:9c:45:64:f8:d3:03:5c:15:4e:c0:46:ff:e2:51:98:14:5b:
85:0f:cd:e9:7c:bc:82:92:1e:fe:27:3a:2a:98:2b:a9:f3:65:
51:b6:a0:e2:cd:b8:2d:8f:1d:fa:04:1d:55:19:57:4c:f1:bb:
e1:4b:14:90:b8:bd:aa:ee:94:7b:a5:f4:66:64:92:a0:d0:3f:
cb:f9:da:ce:94:39:9e:95:c6:3c:27:d0:af:15:c3:a5:bf:3f:
e7:64:18:6f:46:da:5e:6b:4d:51:1a:84:b6:2c:b6:72:21:56:
d1:72:c1:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 5 10:09:14 2024 by rpki-client on console-ams.rpki-client.org