Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_Oc2ICeoWFmGdWZcpOn2AsnL8EM.roa
File: _Oc2ICeoWFmGdWZcpOn2AsnL8EM.roa (raw, json)
Hash identifier: 1Iz5uvPT0ESGjQQqggJOsYLSO31c2tY4nlplDo2ecOg=
Subject key identifier: FC:E7:36:20:27:A8:58:59:86:75:66:5C:A4:E9:F6:02:C9:CB:F0:43
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB333C4799B3123F1EBD556C855EA
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_Oc2ICeoWFmGdWZcpOn2AsnL8EM.roa
Signing time: Tue 02 Jan 2024 08:32:41 +0000
ROA not before: Tue 02 Jan 2024 08:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201343
IP address blocks: 89.46.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b3:33:c4:79:9b:31:23:f1:eb:d5:56:c8:55:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fce7362027a858598675665ca4e9f602c9cbf043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:45:b1:7a:30:df:e8:b1:4f:3f:a6:2e:ce:
7b:ee:72:8f:83:84:b2:5d:e6:2e:f2:3b:f8:fe:71:
dc:23:58:fb:33:7a:95:95:34:0e:0d:6a:10:d9:60:
11:a8:a4:50:c7:a5:9d:cb:a0:4d:21:51:47:5c:c2:
f5:c1:3f:5e:6a:b3:35:77:87:b8:cd:bc:24:01:19:
69:c2:a9:b8:fd:17:f8:7e:8e:a1:0c:70:49:07:43:
3b:75:17:0e:f0:2d:b2:50:a3:2b:71:da:a9:73:df:
06:f6:8d:01:28:f4:c5:80:6e:c9:e5:f8:31:ae:b5:
0f:63:b3:47:27:42:70:bf:ca:f1:60:76:96:e5:4e:
9a:ca:d8:ae:8a:d8:11:b0:37:b6:25:50:93:f1:db:
79:54:98:aa:7f:a0:12:0d:dc:37:86:9c:76:9e:f3:
c2:23:c1:d3:a4:7c:c5:ef:fb:a8:b3:ab:88:b3:01:
ba:70:87:4b:c9:06:5f:75:c8:7f:82:97:1d:d3:ed:
e4:25:85:92:9a:ab:8b:48:42:22:e7:d9:89:d0:a6:
01:43:93:a9:c5:d6:a9:13:aa:7e:db:a6:13:8e:d9:
84:9c:47:76:82:dd:6b:ce:b9:34:58:e8:cc:4e:74:
90:62:c3:15:65:cb:36:1a:6e:ce:89:e2:2e:1e:ad:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E7:36:20:27:A8:58:59:86:75:66:5C:A4:E9:F6:02:C9:CB:F0:43
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/_Oc2ICeoWFmGdWZcpOn2AsnL8EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.136.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:6d:cc:6d:4a:2b:ca:f0:69:c8:a1:32:76:82:26:aa:af:c7:
59:fa:dc:72:0b:3c:0f:c6:d7:9d:c2:02:54:21:71:86:0e:30:
e2:07:0c:9b:9d:f5:31:57:86:ef:f6:fa:e7:41:5f:d1:04:e4:
da:2f:72:41:4d:fd:5d:38:33:24:a6:b8:84:9c:04:5a:b1:49:
b8:2a:93:7f:e2:ab:d3:f7:c1:c7:47:7f:c1:75:75:44:c0:fd:
21:40:0f:d7:2d:b4:4c:3a:af:0a:71:7e:ae:f8:73:69:9e:67:
d1:d1:c6:41:ba:95:7a:94:d4:7f:8b:a1:a1:23:ec:68:8d:20:
f4:07:18:d0:c1:5e:c8:75:6d:ea:60:f2:12:d2:8b:9c:21:05:
97:bd:9a:58:81:b0:82:26:d7:01:3e:71:38:26:c3:bb:0b:d6:
ee:f3:31:82:54:d7:5f:59:6a:2a:fe:95:99:a3:39:24:57:cc:
29:1b:b0:db:0e:57:85:e7:0e:e0:db:27:2c:96:12:2b:a9:6b:
1f:fc:d0:46:1b:76:b5:66:8c:40:c2:f4:de:95:9b:16:ff:95:
5e:7b:a0:93:fd:63:e5:cd:76:86:9d:64:93:7b:30:ba:51:3f:
99:eb:92:5b:38:ee:8a:f2:eb:0d:1c:35:ee:d5:e9:fe:ea:94:
f6:17:9f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:07:58 2024 by rpki-client on console-ams.rpki-client.org