Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/01AlNY_XP9rzm5hE-wSuk3pb_fA.roa
File: 01AlNY_XP9rzm5hE-wSuk3pb_fA.roa (raw, json)
Hash identifier: l8uGECr/Sb97rO4llMONhvCKi0T0wEGo4DbNH/LOOAA=
Subject key identifier: D3:50:25:35:8F:D7:3F:DA:F3:9B:98:44:FB:04:AE:93:7A:5B:FD:F0
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 018CC9BCEE106382FA5A3728F987F7512EED
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/01AlNY_XP9rzm5hE-wSuk3pb_fA.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15695
IP address blocks: 84.47.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ee:10:63:82:fa:5a:37:28:f9:87:f7:51:2e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d35025358fd73fdaf39b9844fb04ae937a5bfdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:f8:41:76:e1:00:8a:14:b6:d9:27:04:a9:
8b:e3:c9:0e:84:5d:50:fc:8d:f7:a7:35:53:8f:4d:
ba:d9:50:e1:d5:6a:98:f5:b8:f3:06:11:5f:49:c7:
80:10:32:57:3e:03:2b:b2:5e:2e:d5:73:27:94:33:
25:1c:5e:49:7c:a3:e3:cb:a1:73:39:77:c9:ff:c8:
47:c3:f1:0f:3b:ca:a0:06:f3:ad:41:6b:b2:c5:01:
c8:b1:52:d8:7b:c5:4f:d3:ee:41:21:8f:73:0b:c6:
29:5a:22:a1:3a:3b:ca:c6:3f:a8:ac:3c:97:33:35:
79:07:be:a2:93:6b:8f:3c:ce:03:1a:12:92:ee:8e:
88:b9:ea:a0:7e:81:cd:90:49:84:c3:a4:ec:7c:d8:
36:67:3f:5d:e4:b3:18:f8:c0:c3:c0:39:a9:ee:57:
f9:ce:a2:62:c0:cd:75:51:25:9c:15:4b:1f:3c:63:
37:ae:b8:d4:ec:6f:4b:bd:90:37:38:87:11:34:19:
35:3a:80:fd:77:4a:b7:59:b5:23:7d:5f:32:13:19:
d3:4d:99:30:be:f5:a3:51:b8:55:ad:fe:83:0b:67:
4e:d1:85:a7:79:b3:0a:b8:08:b1:2f:80:77:c9:47:
34:df:f1:4c:92:70:1a:0b:f8:d2:65:47:63:36:94:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:25:35:8F:D7:3F:DA:F3:9B:98:44:FB:04:AE:93:7A:5B:FD:F0
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/01AlNY_XP9rzm5hE-wSuk3pb_fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.184.0/24
Signature Algorithm: sha256WithRSAEncryption
22:66:59:8f:f4:70:0c:6f:70:15:20:5e:7e:33:49:2c:4f:5b:
6d:4e:4f:18:90:04:19:34:2a:47:d7:50:65:e2:2a:10:77:bc:
56:13:e1:74:b3:24:71:b9:6e:84:7c:5a:b6:e7:25:05:b8:7c:
c3:e0:c0:e7:d5:3a:55:d8:56:e9:92:f8:41:60:c0:50:04:1e:
74:0f:e5:b8:5e:f8:43:ce:c3:81:48:52:bf:24:92:56:4f:a2:
08:04:20:6b:71:73:ee:56:c1:62:87:90:4c:02:aa:48:ae:5e:
2a:fc:89:56:2c:9b:ac:f8:c3:7d:f5:eb:85:d2:e9:7b:5c:13:
39:ea:81:22:9e:03:c9:34:de:e1:0e:8d:89:29:93:63:b7:b9:
0c:19:d7:a8:79:a4:c4:5b:58:4e:64:cb:e1:8e:f4:30:ec:9a:
1c:4b:3d:5d:0c:84:62:90:a0:a2:cb:13:c5:4a:c3:7a:ab:2e:
13:00:69:6b:55:36:da:23:fa:36:ba:38:d8:c1:ed:01:9b:3a:
5e:aa:8a:95:b1:72:90:13:ad:06:66:b2:7e:c5:1f:f1:e6:9d:
07:c1:84:c4:bf:e7:96:06:00:4e:7c:8d:52:61:02:59:97:db:
97:32:09:e4:48:a3:bf:68:9e:e1:da:99:27:ec:d4:24:f6:5e:
aa:f9:df:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:24:13 2024 by rpki-client on console-ams.rpki-client.org