Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/w8V-PUXayXn4_kI4QHAr91FE0xk.roa
File: w8V-PUXayXn4_kI4QHAr91FE0xk.roa (raw, json)
Hash identifier: eGOoJbk7JEHHJyJTyq5Yr1uWNbk7xlMkIMVScgDY3Fg=
Subject key identifier: C3:C5:7E:3D:45:DA:C9:79:F8:FE:42:38:40:70:2B:F7:51:44:D3:19
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018CC801AA5135E7EAD778CE616F690F67C5
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/w8V-PUXayXn4_kI4QHAr91FE0xk.roa
Signing time: Tue 02 Jan 2024 02:30:01 +0000
ROA not before: Tue 02 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207433
IP address blocks: 84.47.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:aa:51:35:e7:ea:d7:78:ce:61:6f:69:0f:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3c57e3d45dac979f8fe423840702bf75144d319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2e:58:cd:e6:08:45:4a:ac:af:30:62:6b:e8:
f9:e9:1d:61:2a:bb:4a:b6:12:70:39:76:ce:80:df:
98:ef:da:fd:54:85:4b:1e:51:82:09:e8:45:d2:93:
c3:d9:39:9d:7d:68:95:3a:47:40:ba:eb:c7:95:f2:
11:b8:56:2c:79:61:c6:97:d2:a0:57:bd:93:e8:7b:
5f:3b:93:c0:6a:d8:ef:32:3a:76:c0:52:4e:0a:69:
82:49:12:23:f1:47:7b:56:57:31:b3:f7:fd:06:97:
c5:06:b9:fe:8c:59:42:a2:ed:e9:ed:c3:0b:b6:0f:
60:ad:e7:f1:41:07:55:fa:49:d2:3f:4f:bd:df:b2:
51:18:22:26:48:ad:a2:89:61:68:a0:d3:d9:7c:e4:
80:39:5c:c3:d6:23:0c:95:23:6e:ca:99:01:37:32:
a4:2c:37:24:6b:49:2c:55:44:62:65:b3:83:58:d9:
a1:d4:b0:bf:7d:dd:1c:b5:b3:77:3c:76:99:b9:f0:
39:2b:5e:24:9b:51:c5:6b:7c:f1:c1:73:17:52:16:
3e:46:f3:7e:d6:a6:a4:fe:c2:e1:7d:ba:5c:1e:96:
40:7c:84:2c:5e:7e:00:02:ac:34:2b:d7:f6:60:6c:
7b:be:95:03:3b:6b:fe:a4:55:f0:f5:51:29:5b:0b:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C5:7E:3D:45:DA:C9:79:F8:FE:42:38:40:70:2B:F7:51:44:D3:19
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/w8V-PUXayXn4_kI4QHAr91FE0xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.163.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ba:dc:14:d6:42:06:b7:e8:6e:c9:9a:e6:67:c0:04:e7:47:
60:c6:f4:38:e6:a7:01:d2:4c:80:d6:45:4d:a7:b5:0e:0a:fe:
d3:b3:55:06:3d:b4:e0:9d:c1:cc:48:d8:d8:74:29:43:71:40:
6b:6a:40:95:de:58:b2:64:76:ba:c5:d6:f3:b5:c7:1a:00:9d:
95:63:9f:db:e0:19:ef:00:42:4d:f1:77:09:86:55:6a:07:e9:
d4:40:73:95:63:39:fa:a6:6c:f3:33:e1:bd:96:1d:60:0d:0a:
12:a5:27:99:4e:1d:b8:50:18:14:e6:05:62:57:da:d2:31:82:
84:ff:89:7f:5c:b3:54:c3:66:e2:cb:6e:cd:54:ae:b4:b6:ae:
96:4a:2c:c3:aa:ab:33:0a:2b:c1:f7:6a:1f:22:d8:f0:b2:18:
f1:f9:88:94:c5:80:5b:0f:4b:6c:65:61:9d:28:0d:02:46:52:
09:62:05:1c:09:55:f7:88:b9:ac:b8:68:45:90:dd:b8:7c:96:
6b:bf:ca:93:83:0d:c4:c1:e0:9b:8f:31:94:1d:f3:ec:2c:e6:
1c:e0:7e:5e:7d:b9:b6:8d:45:55:ef:ca:19:9b:00:3d:85:41:
02:80:54:26:9a:3a:79:d9:3b:82:81:72:07:44:0e:91:39:a7:
6e:b7:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:02:25 2024 by rpki-client on console-fra.rpki-client.org