Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/s6Hs0cVNuOlRg9nx4pbL5yINay0.roa
File: s6Hs0cVNuOlRg9nx4pbL5yINay0.roa (raw, json)
Hash identifier: /CLpimpYHP9ouf7ZQ7gkZhALPqtMtxLd+eqX+E4/C/E=
Subject key identifier: B3:A1:EC:D1:C5:4D:B8:E9:51:83:D9:F1:E2:96:CB:E7:22:0D:6B:2D
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019351948CFEE10BE0D5C8EF1068261CB89A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/s6Hs0cVNuOlRg9nx4pbL5yINay0.roa
Signing time: Fri 22 Nov 2024 01:55:10 +0000
ROA not before: Fri 22 Nov 2024 01:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.70.0/24 maxlen: 24
84.32.95.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:94:8c:fe:e1:0b:e0:d5:c8:ef:10:68:26:1c:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 22 01:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3a1ecd1c54db8e95183d9f1e296cbe7220d6b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:d6:16:d4:b0:21:26:10:7c:60:e9:e1:d4:
7c:a3:cd:1b:b1:dd:ab:11:fc:96:f9:f1:fd:b7:e0:
76:47:20:f4:11:51:dc:24:0f:f0:1b:ce:bd:27:b0:
77:67:d4:bb:0e:3f:39:fe:66:8c:27:c6:a0:c1:95:
40:c7:89:f7:ce:04:6f:f4:1b:b9:6e:75:c7:9f:dc:
f0:7f:1e:78:ca:90:dd:6a:53:32:e3:af:ed:d4:d5:
8d:ed:ab:1d:70:2b:98:89:d9:03:7e:4a:ed:cf:3b:
e9:94:07:10:e2:30:95:02:42:c2:7c:8c:c5:f2:83:
64:de:b0:b9:ee:67:54:2d:23:4f:2d:28:7a:f3:ff:
e4:d7:98:51:35:70:73:af:50:33:d7:83:7c:b4:d7:
c8:11:60:9b:ae:0a:37:ff:12:88:ec:1c:35:87:25:
90:15:c1:0f:7e:b0:9a:10:5e:7c:20:38:b7:b3:4f:
4e:de:f8:21:f7:53:c2:98:b5:ce:98:8e:27:08:23:
8d:ba:32:80:04:6d:5f:db:e9:f2:a7:17:41:a4:50:
87:84:aa:ee:66:ab:a2:74:bd:62:c7:ab:69:3c:0b:
e2:36:f4:ab:42:1c:96:53:d4:7a:f9:b3:38:46:f8:
a5:f8:d9:e9:80:e3:a5:cf:4b:89:e3:f5:35:6b:da:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:EC:D1:C5:4D:B8:E9:51:83:D9:F1:E2:96:CB:E7:22:0D:6B:2D
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/s6Hs0cVNuOlRg9nx4pbL5yINay0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.70.0/24
84.32.95.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.93.0/24
88.216.130.0/23
88.216.134.0/23
88.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
36:12:c9:3f:2b:37:3d:01:05:62:eb:46:b8:79:b9:59:e0:1b:
ae:a4:34:9f:a0:de:09:f2:04:c1:4f:ac:b4:d1:8c:eb:75:a3:
54:05:cf:11:3f:80:8a:72:1c:55:f8:c6:74:8b:8a:57:00:e2:
de:21:8a:5c:57:05:42:53:15:ac:1f:eb:ec:ff:c6:5b:d0:f1:
f9:6e:da:3f:1e:97:79:04:fd:f0:82:3d:91:10:35:72:8a:9d:
4e:50:2c:2d:fe:85:00:3d:ae:52:46:26:07:9d:68:f6:c6:82:
a5:1f:f3:9d:23:63:ed:54:97:2b:bb:b4:a4:e1:57:a7:03:fe:
f8:3f:7e:29:58:66:99:e4:e5:51:06:97:ba:f3:49:f0:c1:06:
f9:7a:40:fa:3a:bb:11:3e:08:84:b4:7d:df:06:ff:28:1a:9b:
c9:2d:a9:42:dc:7b:d6:b9:ac:47:b9:c4:e3:6c:7f:72:42:a8:
bf:0c:86:62:a8:5a:87:a9:51:28:f7:66:da:13:7a:4b:a8:bf:
fc:9a:a2:b3:99:41:1b:3a:4f:04:57:23:7a:fc:b7:2a:5d:a1:
9f:d8:4f:89:9e:59:ab:0f:a1:6c:ef:6c:74:97:f1:92:41:82:
e1:7b:33:8f:07:38:a6:d4:66:76:7f:e8:cd:56:97:e3:32:9c:
57:db:61:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:24:26 2024 by rpki-client on console-ams.rpki-client.org