Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/OsCc-phdzWXyIW6nhlWs-TxKhfo.roa
File: OsCc-phdzWXyIW6nhlWs-TxKhfo.roa (raw, json)
Hash identifier: S5lCEc2z6phnADhuOqPxell5aAmXLH6RcEDSOA80Xn4=
Subject key identifier: 3A:C0:9C:FA:98:5D:CD:65:F2:21:6E:A7:86:55:AC:F9:3C:4A:85:FA
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 01914FF0B099E54D8B73BA6CDF341FF03698
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/OsCc-phdzWXyIW6nhlWs-TxKhfo.roa
Signing time: Wed 14 Aug 2024 08:10:59 +0000
ROA not before: Wed 14 Aug 2024 08:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21914
IP address blocks: 84.46.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4f:f0:b0:99:e5:4d:8b:73:ba:6c:df:34:1f:f0:36:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Aug 14 08:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ac09cfa985dcd65f2216ea78655acf93c4a85fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:ae:10:52:2e:cb:55:8f:63:45:bb:a5:80:
8b:98:ef:21:75:1c:3c:db:0d:57:73:8d:fd:b3:d3:
13:01:78:45:39:9b:64:d3:b6:be:3f:82:b8:95:77:
53:66:63:26:7c:07:93:da:66:40:09:14:74:9b:af:
de:cb:de:21:f1:f4:e9:6b:5d:2b:82:ee:92:9f:ba:
17:61:bd:b7:e8:1b:5b:88:f9:28:be:13:06:45:d4:
db:bd:56:04:ab:00:05:db:a2:a3:c5:fa:11:9d:5d:
42:52:34:5d:96:5c:e4:83:74:01:ed:ca:fa:ca:f1:
de:2e:a7:cc:50:c9:17:d5:7e:7c:e9:4b:43:7d:1b:
f4:37:0d:c1:b1:5b:15:87:ac:3b:be:58:59:e0:df:
99:31:25:4c:43:4b:7f:06:80:62:ad:fc:93:4f:f2:
e1:59:2e:e3:01:7a:50:82:df:77:1c:61:31:68:6c:
95:ff:b3:28:3d:e3:e7:19:c3:d9:31:18:9f:76:70:
2a:2f:39:ae:48:96:1a:23:b6:bc:85:02:d2:9d:8c:
7f:31:81:44:c6:5f:55:fc:18:dc:1e:c0:55:38:b3:
4f:82:a3:b5:d9:7c:f1:5b:db:ac:16:7d:0e:df:d1:
03:4d:0b:8e:7f:5c:1e:22:1a:f5:b6:a2:3d:ce:f6:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:9C:FA:98:5D:CD:65:F2:21:6E:A7:86:55:AC:F9:3C:4A:85:FA
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/OsCc-phdzWXyIW6nhlWs-TxKhfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.222.0/24
Signature Algorithm: sha256WithRSAEncryption
99:31:41:53:c1:5b:7e:50:e6:f6:7c:51:60:a6:37:bc:86:70:
b0:55:b7:63:96:44:b3:0c:50:fc:b8:6d:72:00:f4:d5:79:b9:
9b:96:fc:24:c2:4a:fa:ac:fb:46:26:04:e6:30:06:a8:09:a9:
bc:0f:47:b7:b9:e6:46:8b:63:73:a8:4a:97:c0:f8:08:20:1e:
c9:43:65:12:9a:09:72:1a:f0:51:d2:d6:03:0f:62:a8:7f:c8:
0c:1e:66:9d:24:3c:41:d8:d9:6f:51:8e:64:61:4f:fe:ba:a9:
03:ed:f5:55:77:ef:d9:ae:bb:62:6b:e7:8f:21:33:ab:e9:d4:
8d:be:7e:c7:65:85:77:12:23:5b:29:cb:0c:83:a0:ff:5f:81:
03:a8:71:fc:d4:84:38:47:ff:c7:fd:76:67:c9:39:6b:00:5d:
c4:db:3d:e1:ad:ac:c7:99:55:dd:29:e2:fe:75:fe:c1:62:f6:
78:91:b0:90:1c:d5:7a:c7:92:d1:d9:7a:99:b2:b1:60:28:98:
ce:ed:16:ff:51:c5:fe:dd:c3:ee:84:2d:d8:03:11:47:36:b1:
1d:56:4a:60:6e:64:b8:76:77:de:e0:30:67:a3:0d:f5:22:9c:
52:5a:16:ba:9d:47:99:bb:d9:d7:fa:0b:0c:b4:40:c9:df:98:
c9:d1:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:22 2024 by rpki-client on console-fra.rpki-client.org