Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/k8OYOHOJIhDsThhiJSw_fusUDMQ.roa
File: k8OYOHOJIhDsThhiJSw_fusUDMQ.roa (raw, json)
Hash identifier: wnxsPn0D6Ao6HgG4/WXn9zOyJb5GVGO4yrI49mGTNps=
Subject key identifier: 93:C3:98:38:73:89:22:10:EC:4E:18:62:25:2C:3F:7E:EB:14:0C:C4
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 018CC7957E82AC8470F28CA0184FBC21EE7C
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/k8OYOHOJIhDsThhiJSw_fusUDMQ.roa
Signing time: Tue 02 Jan 2024 00:31:52 +0000
ROA not before: Tue 02 Jan 2024 00:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202687
IP address blocks: 185.84.240.0/24 maxlen: 24
2a03:4bc0:1015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:7e:82:ac:84:70:f2:8c:a0:18:4f:bc:21:ee:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 2 00:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93c3983873892210ec4e1862252c3f7eeb140cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:77:ae:26:24:cb:e8:66:0e:ce:7d:b5:39:
42:5c:56:51:cc:35:32:25:f7:e4:76:1b:38:b7:89:
ef:7f:05:5b:71:5f:83:29:a6:a0:08:60:58:be:91:
94:b5:00:91:63:08:44:17:3c:85:a8:48:e2:c6:93:
6d:a6:f7:c7:4e:61:99:1b:5f:73:25:42:37:7f:9c:
8a:67:15:9c:b2:98:1a:ea:56:c0:5e:66:b1:a8:6a:
25:1a:d9:79:a0:40:21:3d:ea:0e:9c:28:4f:dd:19:
65:4b:ea:f5:88:dd:07:df:fe:89:3d:2b:69:32:3f:
22:f3:85:e0:f0:e3:f0:b3:b7:a0:25:07:ce:e9:14:
99:0b:13:cb:9f:38:e1:c4:f7:f5:14:79:27:92:bf:
a5:e5:93:dd:98:91:99:86:d4:48:61:f5:30:48:4a:
80:9c:5c:44:18:3b:0b:31:d3:52:44:67:f8:c1:b8:
0e:76:67:7e:ad:66:22:f3:4a:1c:2e:29:0f:d7:76:
22:d4:f6:a2:fe:f5:80:70:c4:9a:b6:6f:b8:e4:3b:
11:78:5b:cb:b8:9e:81:a1:ca:ad:1c:fa:f9:36:82:
32:5f:65:6f:b1:c4:47:ae:5a:23:a9:c5:ce:fd:f0:
e1:1e:09:ee:05:49:5a:74:46:9b:6f:4c:c5:80:11:
91:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C3:98:38:73:89:22:10:EC:4E:18:62:25:2C:3F:7E:EB:14:0C:C4
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/k8OYOHOJIhDsThhiJSw_fusUDMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.240.0/24
IPv6:
2a03:4bc0:1015::/48
Signature Algorithm: sha256WithRSAEncryption
0b:6d:09:6e:8a:6d:bf:53:5d:7a:67:44:59:fb:bd:67:14:b6:
f3:b0:a2:91:cc:2f:13:65:a6:63:af:47:60:6e:3e:e8:37:96:
8f:71:49:c2:40:f0:4c:53:da:a0:43:68:22:e3:94:90:19:5f:
bf:3f:3c:7c:52:89:10:ed:6a:bf:18:e2:a9:0a:e7:29:4a:c7:
89:f7:2b:fe:a9:41:a2:eb:df:94:f2:f7:13:f0:82:8f:2a:c7:
a7:ec:c2:28:90:0a:b1:6c:aa:10:1c:f7:8c:09:84:b0:9d:75:
e9:a5:e2:84:ec:fb:05:3d:8c:f8:e1:4c:29:a3:45:85:46:63:
01:3b:23:59:0c:56:09:d4:09:41:83:50:3d:1e:06:d7:d7:87:
17:f7:55:53:1f:64:ad:3b:b9:23:2f:8e:82:eb:bc:c9:95:90:
57:33:3a:51:44:e6:1e:19:d3:98:50:d5:87:f2:52:39:5a:04:
86:e0:c6:73:e7:e6:2f:09:53:c0:bc:14:bf:69:f1:a6:83:4f:
33:d0:ab:e0:21:b0:d0:26:0f:e7:0d:96:85:7a:4b:07:ec:78:
c7:4d:8a:24:1d:c5:50:cb:c6:3c:67:aa:34:56:51:e2:27:8d:
81:af:10:a2:9c:3d:66:b2:0b:a8:fb:b6:2f:44:31:c4:de:5b:
b8:38:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:22:07 2024 by rpki-client on console-ams.rpki-client.org