Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/sadR4tZAnWyi2ER95-BTZOrCbgE.roa
File: sadR4tZAnWyi2ER95-BTZOrCbgE.roa (raw, json)
Hash identifier: K/sOdEF89ZZ2HmEDtY5qyeH6e5LoK7XIJS7ghMQ7BaY=
Subject key identifier: B1:A7:51:E2:D6:40:9D:6C:A2:D8:44:7D:E7:E0:53:64:EA:C2:6E:01
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 018CC9BCEEEAFD628E7E5D137334F383A7E3
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/sadR4tZAnWyi2ER95-BTZOrCbgE.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201383
IP address blocks: 84.47.185.0/24 maxlen: 24
84.47.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ee:ea:fd:62:8e:7e:5d:13:73:34:f3:83:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1a751e2d6409d6ca2d8447de7e05364eac26e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:33:40:61:27:27:6f:a7:9b:35:ad:0a:9c:
0a:f0:99:45:a5:bc:cb:fd:28:49:53:46:c7:cd:1e:
d4:9e:74:5c:a8:53:f3:9f:8f:a7:e7:f4:e0:f1:4a:
fc:70:0b:ea:c8:86:b7:91:50:8c:10:a4:71:50:cf:
f6:e6:2a:82:3b:56:5c:fe:67:65:65:d9:93:56:de:
4f:d0:53:ff:c7:cb:0f:f8:26:31:0d:1a:9b:38:fb:
bf:77:95:97:10:4a:7b:f6:09:5f:fd:b5:ef:55:0b:
64:5b:bc:62:fe:ca:e2:fe:c8:fc:51:d1:c0:27:98:
5b:99:c5:3a:6d:f2:2e:c9:8d:90:aa:c6:aa:87:f4:
89:f9:23:bb:73:9a:fa:fc:83:53:e8:f6:bd:5f:26:
e4:41:3f:1f:b7:73:cf:bc:dc:d1:85:f8:f2:8a:be:
05:47:4b:79:df:3d:fc:87:81:79:cb:5c:de:71:b6:
5a:06:1e:45:99:a5:ac:29:b2:08:65:cb:6b:41:45:
b1:2d:a0:ef:1e:fa:4d:77:a4:bb:fc:a3:9c:fc:88:
f3:e5:03:bf:9e:16:db:c9:a1:87:36:79:97:db:99:
4e:47:35:a6:82:9f:1e:bb:ef:0b:83:1d:e1:2b:04:
9f:4f:44:26:7b:4a:0c:9a:4b:45:9d:61:3a:75:da:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:51:E2:D6:40:9D:6C:A2:D8:44:7D:E7:E0:53:64:EA:C2:6E:01
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/sadR4tZAnWyi2ER95-BTZOrCbgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.184.0/23
Signature Algorithm: sha256WithRSAEncryption
83:20:97:f5:25:04:8c:0c:0b:69:f7:f0:11:9a:62:e8:a8:ea:
e4:80:e0:16:39:4e:f8:fd:7c:ec:2a:82:58:62:0a:e0:18:3c:
bd:a9:d6:02:8b:f3:88:62:64:5a:1d:2b:73:4b:b4:9c:ca:e7:
e9:68:14:c8:22:b3:25:05:be:2c:77:83:30:ba:6f:f2:63:10:
0d:4f:d0:e3:ff:9c:d9:a0:20:3e:bf:50:29:77:9b:d2:24:27:
c7:eb:d5:25:6d:26:a5:e6:81:eb:ed:d3:23:56:3e:a9:85:da:
27:96:bc:da:b4:ff:49:b5:49:14:64:fe:5a:e1:de:32:35:b4:
1e:43:15:a8:a1:64:00:c4:fe:4b:9b:23:0f:72:60:d5:9b:db:
09:54:44:b0:81:1c:5c:98:ef:7a:d9:9f:4f:de:4e:4d:94:fb:
e2:9b:14:2a:b2:cf:06:80:01:af:8e:fa:ba:3a:e1:c1:72:e5:
51:31:dc:07:a7:54:b0:f1:8e:98:4f:e5:a3:71:47:a0:31:4c:
05:bf:b3:ff:d7:54:6f:8f:93:c8:81:03:f6:46:9a:7b:bf:13:
ea:59:3a:3f:19:ac:fd:2a:4f:1c:5f:8e:d5:bc:2e:8c:88:2b:
54:e5:ea:0a:52:80:d2:1e:9b:18:8d:a4:56:96:26:a8:05:b3:
9c:a9:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:03:16 2024 by rpki-client on console-ams.rpki-client.org