Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/1liVah_xN7DJ-l_fjqhIwlRDG5o.roa
File: 1liVah_xN7DJ-l_fjqhIwlRDG5o.roa (raw, json)
Hash identifier: gPBR7ZtepQjWl0ja9VcOIh3mLpeFuEz6BJtbsCC2bVY=
Subject key identifier: D6:58:95:6A:1F:F1:37:B0:C9:FA:5F:DF:8E:A8:48:C2:54:43:1B:9A
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 018CCA2A14D19A2DFC7104FCC1D541CB1E7F
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/1liVah_xN7DJ-l_fjqhIwlRDG5o.roa
Signing time: Tue 02 Jan 2024 12:33:24 +0000
ROA not before: Tue 02 Jan 2024 12:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39848
IP address blocks: 84.234.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:14:d1:9a:2d:fc:71:04:fc:c1:d5:41:cb:1e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Jan 2 12:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d658956a1ff137b0c9fa5fdf8ea848c254431b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:62:c5:a8:0b:af:c5:c1:c5:a4:62:44:98:
d2:80:12:86:80:ad:30:99:fe:86:f9:8f:83:f4:85:
00:f7:74:01:b4:55:de:cf:98:47:42:a5:d2:0f:54:
d3:29:17:11:3b:57:10:05:2a:f3:9b:e2:f3:75:c6:
cf:1a:d4:d0:63:6d:9c:a4:8c:08:23:ea:07:90:37:
8e:81:7c:2a:bb:89:36:d0:e4:e7:4e:da:0d:dd:38:
f8:13:7f:a1:73:0a:59:99:6e:76:6a:e2:1e:41:64:
b5:64:d5:6b:f2:6d:35:68:74:44:8f:f8:4f:6b:a9:
f8:95:3a:4d:b1:ab:64:42:13:05:6f:1c:3b:25:72:
90:3b:1d:55:db:94:8d:5a:27:21:ec:cd:83:07:a8:
09:bd:12:0a:5b:c6:6b:23:7d:eb:ff:ca:25:c7:e9:
6b:7c:36:4e:29:c5:91:f5:aa:35:f4:de:d6:7a:2c:
c8:b8:88:e4:e6:39:ac:97:52:67:15:0d:8d:96:45:
06:09:79:d5:0d:d3:4d:2c:a6:7e:75:2d:ca:62:87:
df:02:14:95:80:84:c4:f0:71:56:17:14:b1:23:5d:
d2:e5:bb:61:c6:7b:d0:5b:a7:b4:85:0c:1e:ad:f3:
18:9a:73:84:cc:4a:4f:91:63:cb:fe:98:0f:10:50:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:95:6A:1F:F1:37:B0:C9:FA:5F:DF:8E:A8:48:C2:54:43:1B:9A
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/1liVah_xN7DJ-l_fjqhIwlRDG5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:10:d5:4b:6b:3d:8f:08:b5:ab:a2:ef:c8:36:07:f4:f9:11:
8d:58:6e:f3:f0:36:1c:e2:c3:6b:9a:02:d0:9f:ca:1c:5f:8c:
b1:5e:d9:da:6d:6f:ab:89:3b:2c:dd:d3:54:f1:23:db:eb:f2:
91:ee:96:a3:a1:ef:eb:38:e0:a7:75:cc:d0:15:60:3b:88:ab:
d3:22:bf:3f:a3:bc:8b:5c:b6:14:c8:82:80:85:e2:fd:d8:3b:
6c:36:6d:81:ae:44:76:f9:38:8d:85:8b:ca:1d:79:3f:23:87:
aa:7d:34:1b:eb:54:c4:ad:06:d6:76:8f:c5:1c:6b:67:73:36:
fb:1d:e5:28:c8:66:52:5a:c7:12:8e:11:d6:2d:c3:35:90:cd:
fa:85:bd:46:38:66:c4:9a:e9:89:27:dc:52:c4:bb:31:33:62:
1b:f6:9b:cb:34:39:06:26:69:6c:eb:35:a3:75:03:c8:37:26:
99:be:bb:75:ca:e3:8a:e8:57:51:a1:4a:79:55:92:bb:d2:70:
31:26:de:41:4b:50:c9:f3:01:d1:a8:62:a2:fa:76:85:78:68:
1d:47:2b:ca:e1:e6:8c:77:81:57:44:6b:c6:93:d5:f8:fc:3f:
3a:d5:90:5b:48:de:10:42:ac:e6:7c:8d:5e:1e:27:c1:1f:b0:
f2:25:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:43:09 2024 by rpki-client on console-ams.rpki-client.org