Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/elWvTMuw-BqwCwvD_F4WMwleSeI.roa
File: elWvTMuw-BqwCwvD_F4WMwleSeI.roa (raw, json)
Hash identifier: YbPGjIHWW1F3AKQLNXIZMQ+AYq1oGfwWyLtjhDFOqU0=
Subject key identifier: 7A:55:AF:4C:CB:B0:F8:1A:B0:0B:0B:C3:FC:5E:16:33:09:5E:49:E2
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC501383023974422F15D7E609268DD9B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/elWvTMuw-BqwCwvD_F4WMwleSeI.roa
Signing time: Mon 01 Jan 2024 12:30:40 +0000
ROA not before: Mon 01 Jan 2024 12:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 84.32.67.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
88.216.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:38:30:23:97:44:22:f1:5d:7e:60:92:68:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a55af4ccbb0f81ab00b0bc3fc5e1633095e49e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:3b:a7:92:9c:5c:31:b6:32:ad:11:5f:ff:
03:54:58:13:77:8f:42:b3:e1:52:0d:4b:fa:dc:b4:
79:18:aa:e2:df:1b:a7:d1:f7:7b:13:b6:85:5c:2f:
e5:95:b8:2e:b3:5c:b4:fd:05:c1:19:83:27:bf:00:
6c:a8:03:75:0d:9b:f8:ed:89:aa:0b:28:89:b6:ef:
86:c0:bb:91:f4:fe:6e:75:29:d5:93:ff:0c:ee:a5:
0d:68:79:01:97:b1:73:a6:16:39:c5:83:10:9c:a7:
36:b8:97:1e:b9:07:72:ad:b3:91:e0:f0:09:e0:69:
11:75:cb:68:11:52:48:f3:d9:5f:b6:63:72:aa:07:
8b:93:13:2d:3a:49:36:8c:92:0a:69:98:44:c4:4e:
e4:c3:71:d1:04:95:c5:d5:b4:5b:66:84:00:a2:89:
7b:9f:1e:d7:f9:fb:56:16:52:a4:4d:87:6d:7c:60:
50:59:6e:9b:cf:c7:39:a4:fc:77:5c:dc:12:1f:d9:
0c:0f:61:5c:23:7e:73:98:18:a0:a1:37:65:a6:29:
2a:5c:05:08:87:07:16:95:33:df:73:a5:dd:36:3a:
d9:75:63:71:07:77:66:80:55:9b:87:92:ad:7b:6a:
cf:ac:74:db:bb:b8:ff:9c:f8:f6:58:25:af:8a:cf:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:AF:4C:CB:B0:F8:1A:B0:0B:0B:C3:FC:5E:16:33:09:5E:49:E2
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/elWvTMuw-BqwCwvD_F4WMwleSeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.67.0/24
84.32.225.0/24
88.216.240.0/21
Signature Algorithm: sha256WithRSAEncryption
01:de:50:1d:70:d9:b8:8a:8d:f2:7b:7d:35:15:eb:b8:5e:9c:
0c:23:53:11:ee:07:f2:8c:23:85:71:04:f1:1f:53:f1:b9:ce:
45:91:30:ac:ef:86:b1:e4:4b:5a:45:84:df:2c:46:82:a7:d0:
74:aa:56:d6:0e:db:2e:2c:3a:7e:1e:61:6d:c9:46:cd:15:ef:
a5:53:bc:cf:c1:7e:b6:e9:24:6b:25:5e:6f:d3:15:5c:48:c1:
28:c8:35:32:f9:fb:f2:83:2c:d8:18:98:25:58:b3:2d:8f:25:
4d:e3:fb:e6:21:b0:ee:62:21:8b:dc:5a:7f:bb:67:50:34:95:
d3:d2:45:6f:f2:67:fa:9d:93:77:f7:ac:6a:69:95:91:6f:49:
69:53:64:43:99:48:af:c8:df:5f:4e:84:4f:39:09:d4:55:32:
94:44:cb:59:a5:3c:97:69:84:76:09:b5:dc:f1:ae:73:81:57:
42:e7:a2:86:ac:0a:86:29:89:99:28:b8:50:41:fc:a2:5c:d7:
df:22:2d:5c:80:de:20:a5:fa:c5:17:a1:be:eb:8f:7f:93:18:
fd:de:fa:ee:09:aa:15:d7:d0:91:6e:c7:40:45:20:52:a2:d0:
7f:84:8c:1d:ba:20:24:b7:20:3f:95:c3:0a:d8:c4:aa:f6:d4:
82:08:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:43:00 2024 by rpki-client on console-fra.rpki-client.org