Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/rtaG6J30XkQFOPmcKeF4v2NhzNM.roa
File: rtaG6J30XkQFOPmcKeF4v2NhzNM.roa (raw, json)
Hash identifier: g6CvH+gMJlaFTgHEknJF1D1T2mjlfE1O/Zu6XehZZoU=
Subject key identifier: AE:D6:86:E8:9D:F4:5E:44:05:38:F9:9C:29:E1:78:BF:63:61:CC:D3
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E89561CBE74B573D7F5C861DA63B5
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/rtaG6J30XkQFOPmcKeF4v2NhzNM.roa
Signing time: Mon 01 Jan 2024 14:30:04 +0000
ROA not before: Mon 01 Jan 2024 14:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35831
IP address blocks: 84.207.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:89:56:1c:be:74:b5:73:d7:f5:c8:61:da:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aed686e89df45e440538f99c29e178bf6361ccd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:a8:20:5c:8d:f0:ab:b1:93:5f:1b:f8:7f:
f6:9d:ca:23:47:d2:ab:13:95:35:21:ec:f4:26:6a:
c8:2f:41:6d:21:a5:8f:0e:42:69:93:d5:c4:0e:6b:
54:86:1b:5c:43:fa:d4:b6:12:c6:91:d4:12:eb:1b:
31:24:f1:f4:9a:c3:c0:95:3d:24:b0:6a:ed:82:88:
4b:e9:95:0e:a7:fa:7a:46:92:d4:f1:34:ef:d3:c4:
eb:14:a5:65:9e:08:46:ca:35:9c:3c:dd:46:d3:93:
72:16:2e:39:b0:b1:7f:db:f7:4c:0d:bf:fd:73:25:
cc:9f:74:18:d2:50:2d:5f:39:14:df:1b:75:2a:76:
84:3a:f7:df:9c:30:f0:de:76:f9:fe:eb:fe:a8:66:
17:b5:49:57:ca:b7:70:a2:33:a2:10:e7:ab:36:47:
95:b3:a5:49:2d:a5:2c:d0:1b:c1:b2:e4:22:84:de:
c8:0c:ee:18:1b:3f:0f:51:91:6f:ab:3c:18:c7:b5:
3a:c4:c8:9a:9e:6b:fe:44:a8:07:f4:22:d4:2f:8e:
5a:72:4b:f4:e4:92:a1:24:5e:a2:78:b6:2c:a7:de:
be:42:56:e8:ef:ac:e9:de:35:62:db:3e:5e:7a:f7:
cd:ab:5b:2e:33:8f:84:0c:45:1a:42:cb:69:f6:a8:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:86:E8:9D:F4:5E:44:05:38:F9:9C:29:E1:78:BF:63:61:CC:D3
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/rtaG6J30XkQFOPmcKeF4v2NhzNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.207.248.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:14:32:57:3b:06:3a:d7:0b:33:e9:4e:32:57:9b:9c:2a:3d:
25:2e:03:99:d3:2e:24:23:6c:fa:21:8a:af:21:33:eb:da:7f:
54:cf:7c:66:af:70:bc:2c:94:4a:70:ad:09:0a:17:78:4e:0a:
f1:10:13:58:94:96:1f:df:66:b2:d6:5f:ff:bf:47:b8:ee:10:
be:31:c5:f8:cf:64:d4:4a:eb:c3:26:35:34:0f:aa:b2:c6:be:
2e:6c:b2:19:13:5b:6f:15:7c:49:b1:2f:7d:4a:51:4f:89:05:
19:55:a4:ca:53:39:69:7c:83:01:a6:d5:00:cf:ba:5e:c6:ff:
86:a7:4a:eb:24:75:30:65:77:37:2f:9e:0f:a6:42:fe:47:59:
a2:c5:3a:75:9d:6a:2a:cf:7a:43:1f:1b:64:4d:7a:1f:33:f4:
95:98:42:f8:bf:83:56:6c:c0:38:79:b9:2d:a1:c4:8f:6a:a1:
c6:f9:09:eb:89:d8:bc:17:bb:a2:00:79:f8:ca:12:28:3d:a8:
e1:c9:04:2c:7c:80:35:82:51:57:75:24:1f:61:30:9a:fb:25:
e2:bb:98:eb:0d:a3:a6:eb:e0:c7:43:53:2d:a1:6b:92:9d:b8:
36:ce:b2:f9:cb:97:94:a3:17:42:92:ca:ae:73:90:9c:c6:1e:
66:cb:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:09:56 2024 by rpki-client on console-ams.rpki-client.org