Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/cOwBMiCO_xIK-B6paxrHVGj3YBw.roa
File: cOwBMiCO_xIK-B6paxrHVGj3YBw.roa (raw, json)
Hash identifier: FoxvSfJyrnolbEF9JMujTEGxhcgKr+7V2j8UOaAiWR8=
Subject key identifier: 70:EC:01:32:20:8E:FF:12:0A:F8:1E:A9:6B:1A:C7:54:68:F7:60:1C
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018CC725A10284B5EA6218AA7DEB546839A7
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/cOwBMiCO_xIK-B6paxrHVGj3YBw.roa
Signing time: Mon 01 Jan 2024 22:29:41 +0000
ROA not before: Mon 01 Jan 2024 22:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47645
IP address blocks: 94.137.64.0/21 maxlen: 21
94.137.80.0/22 maxlen: 22
94.137.84.0/22 maxlen: 22
94.137.88.0/24 maxlen: 24
2a05:c440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:a1:02:84:b5:ea:62:18:aa:7d:eb:54:68:39:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 1 22:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70ec0132208eff120af81ea96b1ac75468f7601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:24:86:15:79:49:83:af:72:71:b6:dd:49:
9c:b5:79:7f:e3:25:85:7d:84:3d:cd:a0:30:8a:e6:
bc:b4:63:15:a0:11:38:04:b9:bc:a5:3a:36:8b:b2:
c4:82:82:56:e9:c3:49:dd:d5:9b:b4:72:65:6c:31:
77:38:1c:b1:34:bc:2c:05:45:83:1e:53:96:d8:55:
0a:c7:ec:77:fe:6c:c5:ee:f5:b7:22:8d:23:83:94:
fb:af:e2:a5:8d:36:7e:64:66:3f:f3:8c:d9:d2:ca:
c3:f0:ab:79:f2:5b:dd:b2:f5:26:0f:6c:f4:be:b5:
9e:4b:bf:44:63:8d:47:5a:43:d4:29:cc:f6:f0:9a:
ee:cb:2f:5a:a1:76:47:3a:36:9b:63:7f:eb:d9:90:
8a:44:fe:47:22:90:e4:dc:3c:78:8e:eb:83:2b:c7:
1f:09:ec:fc:51:47:04:17:c0:33:72:ab:f4:37:33:
cb:76:fc:d9:e9:db:35:44:fe:8f:58:bc:b4:88:ac:
c0:62:1a:46:83:5d:d6:19:34:e5:02:85:fe:7b:a0:
84:ce:bc:80:de:31:d3:8a:74:d9:f3:51:a7:af:e7:
25:6b:3a:03:e8:9c:43:af:5f:82:05:a3:55:2e:f4:
b9:31:c6:0f:8a:ad:99:c2:d9:08:3e:82:b8:07:48:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:01:32:20:8E:FF:12:0A:F8:1E:A9:6B:1A:C7:54:68:F7:60:1C
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/cOwBMiCO_xIK-B6paxrHVGj3YBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.64.0/21
94.137.80.0-94.137.88.255
IPv6:
2a05:c440::/48
Signature Algorithm: sha256WithRSAEncryption
a7:bb:c0:10:1a:0a:4c:e4:78:61:1d:89:74:8c:16:1c:fe:56:
c7:08:c1:a2:f8:a8:73:cb:2c:a7:58:79:6f:8d:75:dc:99:1e:
f7:1e:c8:99:c7:4a:1a:ef:69:bc:01:f2:33:00:e6:ee:f1:46:
6b:3d:eb:96:74:10:c7:5c:19:7f:b4:69:4e:01:84:92:22:f7:
82:b8:87:29:d7:dc:0a:64:26:69:0e:5c:f0:2d:05:5c:71:74:
d8:aa:6e:b4:3c:0c:76:76:08:43:c1:47:66:62:55:5f:eb:98:
48:91:31:65:c7:3b:5c:d8:24:73:5e:78:ca:70:09:fb:1f:50:
b4:f5:3a:67:cf:e7:17:35:89:88:ce:ba:9e:3b:29:bc:0c:1a:
22:24:80:87:de:c9:f9:d4:03:c4:c7:d8:d7:f2:0e:27:b7:c5:
9a:54:93:77:87:46:6f:c3:d8:d9:ad:ef:da:83:b7:17:72:5b:
cd:c3:59:e3:94:bb:89:3e:ba:3b:3c:5f:d8:e9:71:bc:2f:f7:
9a:8b:8a:a6:47:d1:c3:9d:0b:a7:3c:66:49:c8:51:e2:14:6f:
ba:bf:23:2d:e1:d6:df:b7:60:73:ab:b4:0e:03:42:7e:0c:8f:
9b:f1:ba:80:2b:20:0e:04:12:75:dd:85:2a:b8:c5:72:8a:b1:
1e:ae:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:53 2024 by rpki-client on console-ams.rpki-client.org