Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/nYzkymfOADhGlk9Y7IraP9lzJ1k.roa
File: nYzkymfOADhGlk9Y7IraP9lzJ1k.roa (raw, json)
Hash identifier: POROf+OfE6w8ZjY/Scz/YwPrtTJ6yEwmrs880Te+kvQ=
Subject key identifier: 9D:8C:E4:CA:67:CE:00:38:46:96:4F:58:EC:8A:DA:3F:D9:73:27:59
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 018CC3B6A1A4A2000408265655C1F8D8D100
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/nYzkymfOADhGlk9Y7IraP9lzJ1k.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48137
IP address blocks: 84.11.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a1:a4:a2:00:04:08:26:56:55:c1:f8:d8:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d8ce4ca67ce003846964f58ec8ada3fd9732759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:07:08:9e:25:0a:a6:43:81:27:f6:ee:ac:
ba:fb:00:2f:99:19:f0:f9:3f:03:ba:df:7a:45:0e:
20:7f:8c:3c:eb:16:79:bd:43:e6:e1:e4:20:42:67:
4f:2c:e9:32:85:fc:ae:b6:cd:e4:9c:af:7d:4c:be:
39:4a:05:19:90:73:cb:f9:03:6e:c3:ee:5d:c0:9a:
ae:32:40:45:a7:bd:34:b5:db:e0:be:00:9f:b4:51:
89:32:73:df:2a:97:73:eb:96:77:13:22:da:45:2d:
58:47:36:56:26:a0:06:80:f9:a8:d1:7d:e9:87:61:
66:89:16:d7:32:50:c0:4a:43:7e:32:f1:7e:77:f9:
20:9f:5d:14:d1:13:39:1d:dc:26:a4:16:3c:cf:6c:
bc:4d:23:ca:64:e1:c8:cd:09:04:86:f5:ec:51:d3:
11:57:d8:aa:1c:54:a2:db:69:e8:b0:47:ed:90:e2:
a4:fc:2b:96:19:2d:ef:e2:76:eb:fe:29:23:da:52:
2e:33:7a:f4:00:58:fc:ed:2c:4c:2e:74:cb:83:cf:
48:66:8e:26:d2:6f:9b:4c:2c:0a:f8:06:ff:51:ec:
47:fa:56:a3:92:0f:27:29:16:11:3a:ca:dc:d8:65:
67:78:66:7a:93:58:87:d1:06:44:da:13:0a:e7:82:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:E4:CA:67:CE:00:38:46:96:4F:58:EC:8A:DA:3F:D9:73:27:59
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/nYzkymfOADhGlk9Y7IraP9lzJ1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.11.248.0/24
Signature Algorithm: sha256WithRSAEncryption
57:92:db:51:5c:1f:81:38:16:ab:c9:f6:30:3c:89:df:8a:5f:
4b:3a:c1:97:dc:af:e0:87:65:09:d4:55:04:f5:c0:10:33:73:
de:81:ce:a7:12:48:8f:46:fa:60:b0:0f:52:90:e4:19:34:9e:
18:e2:df:0b:50:06:e0:71:9a:42:c3:9a:9c:77:79:5c:f5:9d:
6b:2a:4e:32:18:bb:ee:d5:fd:68:cf:68:61:f0:34:af:5f:f5:
8c:1c:ca:67:9f:a2:63:73:14:e3:29:02:ec:96:ff:2a:5d:b8:
c5:a9:2a:a5:5e:15:ae:04:0d:e9:fd:92:4d:08:a8:8d:14:7d:
6d:90:ba:fb:1e:92:9f:92:39:ee:34:88:7c:b4:d5:3d:c7:e1:
48:22:c6:d1:71:bf:c8:c2:f3:4a:e9:81:f0:52:ab:f5:f7:c9:
19:77:74:18:16:90:80:aa:d6:35:e6:45:ff:3e:a2:d6:b5:49:
c9:97:4c:2a:d6:be:3f:84:29:e6:e2:f4:b0:9f:3e:5a:88:9b:
27:71:3c:40:c3:04:bc:e5:fc:79:5e:ab:66:a5:c2:80:a2:d4:
bc:59:8b:50:e7:02:33:52:92:81:f8:8a:7c:1f:98:2a:1e:6f:
fa:93:ae:d2:38:96:23:9a:25:00:0e:bf:13:02:d5:37:95:af:
4f:c0:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:50 2024 by rpki-client on console-fra.rpki-client.org