Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ts8Qlsgq9cqOhvPrqS6MRJvelAE.roa
File: ts8Qlsgq9cqOhvPrqS6MRJvelAE.roa (raw, json)
Hash identifier: 81QsxiEzmt+FYpXsxm96zlrmsgw1wJejPMbE6VDnZ7I=
Subject key identifier: B6:CF:10:96:C8:2A:F5:CA:8E:86:F3:EB:A9:2E:8C:44:9B:DE:94:01
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01921E364FD7CBC07762E0430089A4A087E0
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ts8Qlsgq9cqOhvPrqS6MRJvelAE.roa
Signing time: Mon 23 Sep 2024 09:28:48 +0000
ROA not before: Mon 23 Sep 2024 09:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210423
IP address blocks: 84.232.35.0/24 maxlen: 24
84.232.88.0/23 maxlen: 24
84.236.226.0/23 maxlen: 24
84.236.234.0/23 maxlen: 23
94.24.46.0/23 maxlen: 23
95.178.112.0/22 maxlen: 22
95.178.112.0/23 maxlen: 23
95.178.114.0/23 maxlen: 23
217.61.80.0/24 maxlen: 24
217.61.81.0/24 maxlen: 24
217.61.82.0/24 maxlen: 24
217.61.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1e:36:4f:d7:cb:c0:77:62:e0:43:00:89:a4:a0:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Sep 23 09:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6cf1096c82af5ca8e86f3eba92e8c449bde9401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:54:44:2c:bd:dc:d2:9d:cb:52:3e:55:e0:
d9:5b:59:3f:1f:b3:fc:bd:4a:a2:25:0a:28:96:b3:
3c:b3:d0:1e:1b:ed:e8:51:a7:2e:2b:4e:45:85:09:
96:d6:32:9f:0f:9c:75:c2:14:43:0d:ba:b1:6a:4d:
97:17:26:8b:be:00:2c:73:34:c7:21:56:c6:26:7d:
78:40:f5:11:c6:05:08:c7:3f:f0:71:fd:2e:eb:d7:
f6:ae:fb:c1:8f:c9:1f:38:6c:aa:4b:9d:88:e2:2b:
19:ce:10:df:07:89:36:4a:25:e5:f4:84:f2:68:ff:
1a:9c:d3:27:01:80:7e:a9:ed:0b:bb:d7:86:98:7a:
e5:f3:3f:3f:63:9b:fe:e1:39:a3:4b:fb:a7:91:b5:
79:67:cc:fe:64:23:a4:7b:94:a4:fd:af:ba:fe:cd:
a7:96:55:cb:a6:81:eb:07:02:c7:1d:c9:25:03:29:
45:6a:9a:87:44:38:09:f7:4b:77:77:98:b7:1c:66:
ce:a0:91:c3:69:78:82:72:f5:09:f9:7b:e5:60:a7:
d3:f2:00:dd:c1:f9:3c:dd:47:d0:77:0d:de:8f:3a:
25:9f:05:a0:8c:24:a4:ab:da:a3:ef:ad:8b:f7:b3:
b9:57:1e:4a:d6:c5:8b:4e:3c:89:b7:4e:e1:13:31:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CF:10:96:C8:2A:F5:CA:8E:86:F3:EB:A9:2E:8C:44:9B:DE:94:01
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/ts8Qlsgq9cqOhvPrqS6MRJvelAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.35.0/24
84.232.88.0/23
84.236.226.0/23
84.236.234.0/23
94.24.46.0/23
95.178.112.0/22
217.61.80.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:03:23:2a:c9:5e:2c:9e:29:ef:59:64:d3:80:7c:10:f6:50:
a7:57:e1:13:b4:04:50:92:f8:5a:15:71:48:76:07:60:74:df:
62:4d:ba:f0:d2:5b:b1:42:f7:53:8f:7d:be:30:73:6a:87:49:
0b:2f:04:2e:07:b1:02:c3:34:7d:2c:71:a1:ad:86:32:2f:39:
3e:c5:6a:95:a5:ad:5a:d4:ee:b0:2d:71:d0:5c:47:41:fc:26:
90:eb:48:8b:87:1b:e5:cd:ef:83:b6:45:73:86:7a:69:e4:d8:
23:7a:f2:fe:b8:be:4b:e2:8b:98:4c:2e:0b:59:8b:cd:8b:2b:
44:c7:d6:08:f9:32:c5:da:88:c4:ff:66:13:53:27:71:d0:44:
a5:ef:5a:4d:10:e4:68:5c:c0:3e:ba:82:33:08:18:52:7e:95:
da:45:62:ae:22:5d:b1:bf:8d:04:60:fe:a0:33:69:df:94:4e:
b8:09:6b:65:64:79:f7:54:e7:0c:c0:36:71:7f:8e:bc:8f:0d:
98:70:ce:a9:fb:71:ff:84:7f:86:9b:b6:70:44:44:a1:66:40:
ca:b3:9f:de:a4:6d:17:53:20:63:43:85:50:ea:72:41:dd:3d:
0f:5f:e9:e2:46:de:5b:db:e2:a2:31:68:74:8f:c2:fe:e7:82:
20:a5:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:58 2024 by rpki-client on console-ams.rpki-client.org