Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o8M3CmABUJ4hEa3V8IMVNnePxxE.roa
File: o8M3CmABUJ4hEa3V8IMVNnePxxE.roa (raw, json)
Hash identifier: UDzKV3KGckces7+bvI0s/cbUL9K+CUistKZLS13CUK0=
Subject key identifier: A3:C3:37:0A:60:01:50:9E:21:11:AD:D5:F0:83:15:36:77:8F:C7:11
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC501451270EDE26CDBEE1BF3F2005366
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o8M3CmABUJ4hEa3V8IMVNnePxxE.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:45:12:70:ed:e2:6c:db:ee:1b:f3:f2:00:53:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3c3370a6001509e2111add5f0831536778fc711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:74:cc:1b:0d:5a:08:e5:f7:15:5e:74:8c:
a9:21:dd:19:a6:2e:5b:f5:10:3e:29:ef:78:7a:d5:
74:0d:e1:9a:e6:c6:64:eb:c1:3a:72:cb:08:43:68:
94:32:44:77:f8:f4:2a:57:a9:ec:d1:27:90:79:88:
0b:c2:18:c9:99:a2:d9:b6:1c:34:20:07:ef:e3:a8:
0d:89:98:de:db:5a:0d:47:a4:a7:cd:05:e9:be:0a:
3b:e9:36:82:26:7c:ac:8f:8c:eb:63:80:eb:04:f0:
94:24:0f:f1:29:5e:c5:ef:cd:a4:12:54:ef:69:6b:
88:b5:38:b8:31:ea:89:7f:0e:19:61:52:27:bc:e2:
c2:6d:9b:c3:f2:bf:9a:41:3e:06:9c:99:53:18:8e:
e6:fb:28:0e:91:d3:ec:ed:b5:f4:a5:2b:66:0a:ad:
4a:c2:2a:8d:dd:e7:31:a5:bc:20:74:64:66:04:53:
8b:80:0f:2d:6f:e6:71:7e:2f:d8:47:88:7a:a3:1d:
28:a4:46:7e:b5:83:e4:e0:52:c9:e6:8e:71:0c:27:
00:c4:70:27:84:a1:20:11:fa:61:bb:86:0f:3e:ee:
92:dd:13:ed:6a:bf:3e:9a:c9:68:eb:01:b5:3a:13:
19:9d:74:23:b3:77:c4:4c:09:53:bc:8a:86:df:a8:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C3:37:0A:60:01:50:9E:21:11:AD:D5:F0:83:15:36:77:8F:C7:11
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o8M3CmABUJ4hEa3V8IMVNnePxxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:0d:cb:00:9e:77:a6:86:73:f8:92:37:20:a7:17:b2:49:7d:
21:5d:fc:49:ca:a3:24:ca:45:7f:46:e1:e8:d4:43:bc:14:45:
1c:56:3e:0a:d9:e0:9d:77:4b:ec:a6:17:b8:2e:6d:4f:0e:1c:
f4:41:c4:fd:d3:c7:25:b4:8c:f6:e1:27:a8:e4:45:fa:83:84:
01:3a:c6:dd:b6:5b:82:3a:64:8d:2e:86:4a:82:61:68:0b:05:
2e:67:0d:61:26:60:f9:d3:17:3f:f7:cd:95:77:ac:c9:9a:6e:
c9:a8:a4:c1:c4:aa:c0:b9:8c:5d:b1:16:ab:30:43:78:b1:35:
d1:ee:1c:95:f7:b6:01:4e:b7:17:4d:b7:a4:0c:17:15:72:30:
26:8d:a2:56:aa:26:2f:b3:48:50:c8:bd:01:b2:64:ca:1d:b0:
1d:5e:80:0c:56:4f:fe:ea:82:58:c5:08:cc:99:ff:95:54:63:
23:ad:90:83:68:d9:ed:d7:7a:2e:cf:5f:fb:8e:c5:c1:80:39:
ea:db:c8:e8:a2:4a:0f:17:83:16:d3:a3:2f:bd:1d:4a:2a:d8:
33:96:34:a4:75:80:c8:f1:ed:37:4c:3e:df:7e:d7:d5:59:d4:
b8:5a:55:d9:94:ed:2d:a0:4d:39:27:9a:12:e7:d3:fc:9a:14:
de:69:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:55:43 2024 by rpki-client on console-fra.rpki-client.org