Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/0cnaMwGI7haCZzg1cZbbzDGuw_A.roa
File: 0cnaMwGI7haCZzg1cZbbzDGuw_A.roa (raw, json)
Hash identifier: g88IbSDm0RX7fF8gohRsbiaq13IjbfsScF+DZ1Fn7eM=
Subject key identifier: D1:C9:DA:33:01:88:EE:16:82:67:38:35:71:96:DB:CC:31:AE:C3:F0
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 018FDDC94ACF34FD7893251C3EE2F9C9A7CE
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/0cnaMwGI7haCZzg1cZbbzDGuw_A.roa
Signing time: Mon 03 Jun 2024 11:08:27 +0000
ROA not before: Mon 03 Jun 2024 11:08:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44334
IP address blocks: 92.61.160.0/20 maxlen: 24
2a03:4600::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dd:c9:4a:cf:34:fd:78:93:25:1c:3e:e2:f9:c9:a7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Jun 3 11:08:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1c9da330188ee16826738357196dbcc31aec3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:3e:38:b1:9b:c8:57:a7:ea:3e:fb:37:6a:
9b:b4:24:4a:2a:36:8d:b8:59:a5:7f:27:27:3b:37:
7a:68:6e:a6:68:84:df:d7:83:58:20:96:bc:49:5d:
9a:02:1c:1a:12:64:62:75:50:40:2a:4a:64:72:08:
2c:47:4c:9a:50:49:31:09:be:a3:43:f7:1c:7e:f7:
df:17:86:ae:a1:c5:aa:8a:8d:a1:57:9d:62:d5:83:
47:4a:39:6d:74:d6:9e:41:b0:04:83:7e:94:52:7a:
f4:fc:53:db:19:0a:40:01:41:46:21:b6:20:25:8b:
92:d8:41:c3:92:18:d3:b5:2b:98:27:52:d5:57:28:
cd:77:0c:c1:fd:7a:18:34:26:c9:17:87:ab:a4:f2:
14:d0:82:91:14:a8:c8:01:58:84:70:e6:91:02:2b:
5a:1b:c3:fe:6f:72:0f:47:49:d5:41:25:98:94:5f:
36:65:35:21:fe:d2:75:0f:36:e0:82:e3:ae:2f:25:
6e:c4:45:35:8f:54:d1:29:7a:06:32:08:ac:85:50:
a8:ba:6a:73:4c:94:c9:ff:5b:95:e2:fc:d5:1a:5d:
6f:47:11:38:15:b3:b9:51:43:8b:e5:5f:87:7e:7c:
af:d1:33:82:79:96:13:b6:d4:82:d0:60:03:a6:d8:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:DA:33:01:88:EE:16:82:67:38:35:71:96:DB:CC:31:AE:C3:F0
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/0cnaMwGI7haCZzg1cZbbzDGuw_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.160.0/20
IPv6:
2a03:4600::/29
Signature Algorithm: sha256WithRSAEncryption
7f:21:df:fd:9d:0b:d9:8b:e7:7d:d3:d3:ee:e9:61:b4:c7:fd:
d4:bd:06:11:44:06:f1:56:bb:57:dd:5c:77:93:97:1a:95:02:
08:8d:dd:81:68:eb:6d:15:4c:45:c2:8b:d0:35:01:67:25:2d:
11:bc:24:8a:6b:b7:bd:22:60:80:af:88:41:42:9c:43:12:86:
50:03:fd:4d:3f:8c:90:77:e5:f0:e7:fe:81:61:7f:5d:8e:f0:
04:3b:1e:00:ca:e7:96:2d:04:09:04:bc:24:6e:97:27:9a:ec:
2e:b7:d4:c8:f5:d5:f7:f4:ba:ad:f4:f8:4a:ef:14:3a:17:26:
c3:e1:22:18:30:96:11:c9:45:b2:c0:6a:22:8e:20:12:20:e1:
12:58:14:6a:99:db:ec:11:9e:68:07:0c:d4:a9:f2:a2:80:6b:
91:c8:b9:04:ff:87:08:2c:b5:7d:05:dd:7d:fd:ab:65:b6:b7:
78:cf:bc:41:6e:f6:56:d5:f5:1f:14:d9:99:8d:60:86:68:c8:
90:5c:a1:9e:e2:4f:16:40:92:af:9f:e0:fe:97:d0:ab:79:5c:
48:a2:14:94:70:5e:ce:d3:cd:eb:4d:65:92:e1:42:a2:ff:9f:
76:cd:8c:8d:d9:fa:c2:37:7c:9c:5f:8b:85:86:b0:f6:3e:dc:
63:49:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:55 2024 by rpki-client on console-fra.rpki-client.org