Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C85qZhgU9C7nzWG8WatUtjEFQX8.roa
File: C85qZhgU9C7nzWG8WatUtjEFQX8.roa (raw, json)
Hash identifier: omBIoJUdYqhZTJhWrTfAp4tthAqINC3APcxgsaeXd88=
Subject key identifier: 0B:CE:6A:66:18:14:F4:2E:E7:CD:61:BC:59:AB:54:B6:31:05:41:7F
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC50142616AEC4E2CCCEB082F11D409E8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C85qZhgU9C7nzWG8WatUtjEFQX8.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51358
IP address blocks: 84.32.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:42:61:6a:ec:4e:2c:cc:eb:08:2f:11:d4:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bce6a661814f42ee7cd61bc59ab54b63105417f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:11:9f:1c:85:a4:1f:1f:b7:40:c6:84:47:
08:84:17:e9:92:f5:52:8d:92:89:9c:cb:bd:59:49:
df:38:de:a0:90:22:2d:95:a7:22:02:66:a7:f8:99:
06:59:88:e8:1f:96:2c:cb:53:63:e3:4e:38:55:5a:
98:f8:b5:79:24:a8:b7:b1:5f:5f:a4:a1:4f:a0:59:
a8:e0:98:98:a1:74:35:df:e1:9d:15:d4:3d:0d:dc:
ba:b7:86:72:b1:dd:d3:f9:b4:9c:bb:9a:d9:ea:68:
66:18:00:c1:29:87:d5:49:fd:d3:95:5a:ec:ef:d4:
1a:74:fa:c0:a7:ff:7c:ab:ab:d9:f0:45:df:c1:c7:
27:fc:01:00:2a:23:9e:35:55:bd:86:26:bb:d6:7c:
46:92:52:16:81:52:a9:9c:46:36:1f:e5:b2:48:ef:
ef:76:c7:f7:27:01:8f:50:04:27:82:64:f0:2b:24:
ed:cf:f0:50:22:05:50:9d:d9:c3:8e:2c:db:dc:89:
e3:25:ca:70:6b:f6:21:d9:a6:de:9f:33:c7:2d:bb:
ef:c4:cf:a8:4b:87:ae:c8:ea:40:a3:f0:00:b3:25:
6a:02:1a:32:5c:44:b7:7d:24:7e:b6:ed:39:d6:12:
a7:47:35:ea:49:d2:32:80:ac:c8:56:1e:73:45:91:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:6A:66:18:14:F4:2E:E7:CD:61:BC:59:AB:54:B6:31:05:41:7F
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C85qZhgU9C7nzWG8WatUtjEFQX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.33.0/24
Signature Algorithm: sha256WithRSAEncryption
69:52:53:37:10:c8:20:b6:1c:bd:ad:11:7f:59:ae:eb:1b:95:
63:83:c0:f1:48:97:ce:2f:7b:55:5c:a7:f2:0d:18:9e:65:f2:
70:98:a3:91:7a:a9:fc:59:01:77:20:df:f9:0a:50:19:f0:2e:
ae:96:05:40:eb:ee:03:83:f9:52:3d:da:67:64:aa:4d:65:33:
fc:92:15:33:7d:75:84:a9:bb:4d:6b:27:46:fe:65:68:76:ec:
85:ad:d9:73:b4:75:43:82:e5:b7:c7:1f:0e:bb:22:3e:36:82:
ad:43:19:00:dd:70:c1:9d:05:24:8a:d7:cb:10:33:21:14:2a:
20:97:0c:2f:67:c7:14:4e:4d:6c:ed:65:d3:c4:f5:93:d5:02:
27:a3:20:43:88:1c:d9:f6:73:25:a0:28:b3:8c:23:2e:a9:08:
4d:d6:0e:70:c6:d0:1f:22:a8:40:35:4c:33:8f:3d:de:d3:c0:
2d:d0:4d:34:79:ee:c2:49:f9:02:ca:ee:4e:a5:e7:4d:d5:39:
06:2a:a5:a4:4f:9d:05:b2:c8:a4:ad:9f:a2:83:37:c1:8d:0b:
5e:37:79:8d:05:b9:a9:bc:67:54:fa:e8:4c:f9:50:f0:67:7c:
72:47:e5:c6:00:e7:68:47:08:eb:3e:bb:9c:76:26:39:7c:99:
15:5a:31:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:44 2024 by rpki-client on console-ams.rpki-client.org