Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mW_oFV_h91-PoTgrC-Xy7b1UVTI.roa
File: mW_oFV_h91-PoTgrC-Xy7b1UVTI.roa (raw, json)
Hash identifier: vpcnUP/8WIVTzjtKeZHf9U29Bcl/HZT2qbzV6Rc+Ha0=
Subject key identifier: 99:6F:E8:15:5F:E1:F7:5F:8F:A1:38:2B:0B:E5:F2:ED:BD:54:55:32
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018EF659D445F96745143A02D7716C7F3C00
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mW_oFV_h91-PoTgrC-Xy7b1UVTI.roa
Signing time: Fri 19 Apr 2024 12:34:25 +0000
ROA not before: Fri 19 Apr 2024 12:34:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51388
IP address blocks: 84.32.144.0/22 maxlen: 22
88.216.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:59:d4:45:f9:67:45:14:3a:02:d7:71:6c:7f:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 19 12:34:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996fe8155fe1f75f8fa1382b0be5f2edbd545532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:32:c9:1f:e9:fb:8d:b0:00:2f:ec:f4:95:
2c:f9:e9:57:7b:7b:05:f4:79:0e:17:c4:ad:70:8d:
07:58:01:92:69:b6:f5:67:8c:4e:77:9d:58:64:2f:
cd:47:2b:7c:14:b4:23:9e:77:53:4c:58:d0:4f:42:
f0:4b:09:07:da:6f:46:30:c9:02:e0:58:e7:4d:18:
7f:dc:49:1c:db:51:3a:14:21:40:dd:19:52:44:c5:
61:bf:0d:cc:25:b6:5e:57:7e:85:c5:f7:42:13:46:
00:35:f2:72:91:7f:bc:b6:88:a7:11:33:3d:8d:dd:
eb:e7:d9:7d:db:16:40:d3:44:f3:33:a6:c3:e1:0e:
a9:d3:32:fd:34:ec:aa:17:fb:eb:60:ad:6f:42:e8:
bd:be:51:14:28:07:f4:52:e4:b1:85:71:d9:cf:13:
f8:11:9d:0b:e3:18:7a:2c:b7:aa:77:06:74:86:03:
32:dc:e5:65:24:dc:bc:53:7b:3f:02:86:27:84:19:
47:7e:e9:30:9d:da:9b:31:6b:fe:c8:d3:67:d0:bc:
17:7f:6e:2f:9a:c8:ed:a7:49:27:03:7a:6d:2a:2f:
c8:d2:3b:f8:63:62:41:81:c3:34:35:3d:5a:a4:50:
b9:a9:a5:5a:4e:59:49:df:bd:15:44:76:89:82:92:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:E8:15:5F:E1:F7:5F:8F:A1:38:2B:0B:E5:F2:ED:BD:54:55:32
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/mW_oFV_h91-PoTgrC-Xy7b1UVTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.144.0/22
88.216.48.0/21
Signature Algorithm: sha256WithRSAEncryption
35:c8:d1:fd:41:11:30:2a:9f:ef:ba:c4:17:b0:1c:ac:84:49:
3d:d1:c1:85:f9:2a:b6:04:b5:52:0a:db:6e:ab:74:74:46:26:
ee:cc:84:d8:da:ce:71:e1:86:8f:52:d1:a1:5a:b8:b8:af:8b:
65:4b:27:9b:e8:7f:8a:e8:26:97:2a:91:d7:a4:57:ae:1f:95:
79:85:32:c8:05:d9:84:7c:7b:b8:95:af:66:2c:52:78:68:e4:
a8:59:2e:ba:61:4d:7c:e8:b1:a5:dd:2d:d3:99:b7:0f:4c:c3:
01:44:d0:88:98:93:5b:a1:e0:42:f3:dd:a2:b4:ce:8c:fa:1e:
2f:fc:f7:a1:23:35:61:b8:12:d2:8b:ab:4b:0a:68:85:24:14:
de:e0:a7:87:3c:77:de:a8:66:c5:8c:0c:b4:39:71:9e:33:b5:
45:9c:0b:54:a2:c1:ae:1b:97:d9:9f:9c:fc:ef:af:88:74:98:
87:16:48:0c:bc:4d:65:fd:a4:a2:ce:44:ed:0b:5c:c1:c3:14:
5d:c3:26:89:07:cd:75:44:ed:dc:c9:cb:31:88:66:31:db:c4:
c0:d5:7d:e0:ff:db:72:4a:b2:74:4c:7f:94:cb:0e:de:c0:09:
8c:0e:b0:7c:61:d2:00:47:35:d4:ad:63:78:df:9b:7b:ea:ff:
0b:99:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:35:47 2024 by rpki-client on console-fra.rpki-client.org