Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8BOzBP-ZAqM9Ki8lFBV5R9FHaDA.roa
File: 8BOzBP-ZAqM9Ki8lFBV5R9FHaDA.roa (raw, json)
Hash identifier: h6lAVckS1HkW06NRTMt9NbP5yCwjj74J+CFJV6mqWys=
Subject key identifier: F0:13:B3:04:FF:99:02:A3:3D:2A:2F:25:14:15:79:47:D1:47:68:30
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018E4B0A8910EF01C6B61C4EB29EE79AB9E4
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8BOzBP-ZAqM9Ki8lFBV5R9FHaDA.roa
Signing time: Sun 17 Mar 2024 06:12:45 +0000
ROA not before: Sun 17 Mar 2024 06:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 84.32.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4b:0a:89:10:ef:01:c6:b6:1c:4e:b2:9e:e7:9a:b9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 17 06:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f013b304ff9902a33d2a2f2514157947d1476830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:df:c6:20:24:18:95:66:51:00:fb:af:56:08:
6c:2b:01:30:57:6d:21:48:e0:a2:2b:e9:8a:b7:c6:
2a:17:e7:4c:9c:6e:c5:df:19:a4:5b:2b:7b:c4:36:
30:b6:1a:19:1d:39:c6:af:ac:50:99:da:73:69:1d:
99:80:ff:5c:72:23:65:75:e7:ee:13:85:6b:96:0c:
48:76:29:a8:74:85:bc:3a:bc:11:16:0e:e4:ee:d1:
a1:de:eb:45:1d:0e:79:49:32:2f:0b:ea:30:1a:e4:
1e:33:15:3f:70:bf:bf:6f:7a:e9:78:7d:6c:bc:39:
52:f6:0d:c3:0a:29:2a:3a:dd:7f:c9:c1:f5:00:9c:
d0:ae:16:4c:cc:0c:35:0c:ce:9e:05:72:62:39:56:
d6:30:72:fe:c1:82:36:7c:eb:20:b0:39:ca:a4:df:
e8:32:7d:52:69:17:45:77:6f:bb:ea:0a:fe:99:0b:
80:cd:64:4e:7b:dc:ab:a8:85:de:a8:ba:97:ae:5e:
f6:b8:c4:6c:60:ce:be:a2:02:5c:d1:48:b6:85:df:
56:75:75:25:03:d0:20:2d:73:b6:51:a3:e0:3e:43:
30:9f:b2:ba:07:31:68:f8:c2:cf:a5:67:25:2e:de:
57:b7:1c:29:ec:60:34:a6:f5:38:1f:b1:25:cc:d1:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:13:B3:04:FF:99:02:A3:3D:2A:2F:25:14:15:79:47:D1:47:68:30
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/8BOzBP-ZAqM9Ki8lFBV5R9FHaDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.25.0/24
Signature Algorithm: sha256WithRSAEncryption
19:db:1e:ea:2e:40:d4:76:ad:87:e0:9f:57:97:55:e3:3b:8d:
a1:08:b3:4b:a6:06:3a:5f:0d:96:86:8c:d0:d5:6a:fc:dd:2f:
24:e1:17:73:8a:26:48:66:ce:b9:93:6f:0e:8b:aa:34:39:f1:
65:50:03:ff:e5:ae:a4:61:50:d0:90:90:77:14:1a:e5:56:04:
55:b7:28:e5:87:0e:bd:9e:d5:5f:8a:bd:75:8f:7b:81:26:cd:
4b:df:c7:75:71:46:6e:2e:61:ba:8f:4c:ee:69:37:5c:a5:13:
b2:34:89:fb:0f:df:0c:40:32:b4:bf:80:7e:7e:47:4c:84:1f:
4f:43:f2:8e:40:6a:73:50:4d:3a:ad:bb:df:22:68:60:e1:46:
c0:e9:7c:a5:6f:dc:8f:a5:9f:40:e7:c1:99:6f:4b:5d:e5:9d:
f1:eb:21:20:45:82:49:c4:6b:8a:33:73:d7:9e:4b:f4:c0:36:
52:00:6a:b6:df:c5:b4:49:e1:0d:e1:9a:70:c8:12:c1:0a:91:
76:0b:dc:60:be:b6:37:1b:6d:15:96:a5:18:9b:08:a6:d2:6e:
24:bb:78:75:76:8f:11:c0:48:a8:a7:10:14:68:a7:94:4d:90:
34:18:71:05:15:51:97:5a:1b:92:23:57:31:0c:84:76:2e:7e:
b0:6a:e0:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5LCokQ7wHGthxOsp7nmrnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwMzE3MDYxMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDEzYjMwNGZmOTkwMmEzM2QyYTJmMjUxNDE1Nzk0N2QxNDc2ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN/GICQYlWZRAPuvVghsKwEwV20h
SOCiK+mKt8YqF+dMnG7F3xmkWyt7xDYwthoZHTnGr6xQmdpzaR2ZgP9cciNldefu
E4VrlgxIdimodIW8OrwRFg7k7tGh3utFHQ55STIvC+owGuQeMxU/cL+/b3rpeH1s
vDlS9g3DCikqOt1/ycH1AJzQrhZMzAw1DM6eBXJiOVbWMHL+wYI2fOsgsDnKpN/o
Mn1SaRdFd2+76gr+mQuAzWROe9yrqIXeqLqXrl72uMRsYM6+ogJc0Ui2hd9WdXUl
A9AgLXO2UaPgPkMwn7K6BzFo+MLPpWclLt5Xtxwp7GA0pvU4H7ElzNHHBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPATswT/mQKjPSovJRQVeUfRR2gwMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvOEJPekJQLVpBcU05S2k4bEZCVjVSOUZIYURBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCAZMA0G
CSqGSIb3DQEBCwUAA4IBAQAZ2x7qLkDUdq2H4J9Xl1XjO42hCLNLpgY6Xw2WhozQ
1Wr83S8k4RdziiZIZs65k28Oi6o0OfFlUAP/5a6kYVDQkJB3FBrlVgRVtyjlhw69
ntVfir11j3uBJs1L38d1cUZuLmG6j0zuaTdcpROyNIn7D98MQDK0v4B+fkdMhB9P
Q/KOQGpzUE06rbvfImhg4UbA6Xylb9yPpZ9A58GZb0td5Z3x6yEgRYJJxGuKM3PX
nkv0wDZSAGq238W0SeEN4ZpwyBLBCpF2C9xgvrY3G20VlqUYmwim0m4ku3h1do8R
wEiopxAUaKeUTZA0GHEFFVGXWhuSI1cxDIR2Ln6wauD3
-----END CERTIFICATE-----
Generated at Tue May 7 17:21:03 2024 by rpki-client on console-ams.rpki-client.org