Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/efCeB-5g5z3RLLZOnhkCO1QG_So.roa
File: efCeB-5g5z3RLLZOnhkCO1QG_So.roa (raw, json)
Hash identifier: OV13gRfkRGbzGLZoQHoYIYXGp9npg/EtYJCBoqj0hIA=
Subject key identifier: 79:F0:9E:07:EE:60:E7:3D:D1:2C:B6:4E:9E:19:02:3B:54:06:FD:2A
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B7282D1750CB9DE44509AC2D21466A
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/efCeB-5g5z3RLLZOnhkCO1QG_So.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2285
IP address blocks: 90.84.250.0/24 maxlen: 24
90.84.249.0/24 maxlen: 24
90.84.248.0/24 maxlen: 24
2a01:c9c0:8010::/48 maxlen: 64
2a01:c9c0:8018::/48 maxlen: 64
2a01:c9c0:8030::/48 maxlen: 64
2a01:c9c0:8016::/48 maxlen: 64
2a01:c9c0:801e::/48 maxlen: 64
2a01:c9c0:8014::/48 maxlen: 64
2a01:c9c0:801c::/48 maxlen: 64
2a01:c9c0:8012::/48 maxlen: 64
2a01:c9c0:801a::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:28:2d:17:50:cb:9d:e4:45:09:ac:2d:21:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79f09e07ee60e73dd12cb64e9e19023b5406fd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:a9:d6:d1:34:29:02:aa:29:5c:88:d0:3f:
92:6f:2b:56:83:3b:0f:5e:41:7b:01:02:bf:a3:3a:
a0:60:b5:f5:8b:39:9f:2b:a4:66:58:43:cb:d7:6d:
e0:d6:bb:4e:b8:e7:ba:c3:02:f0:19:2e:3b:39:33:
f7:98:eb:65:38:06:68:43:63:4f:fd:06:29:69:aa:
28:df:d2:2e:f8:15:0e:61:cc:06:2a:3c:c2:bc:82:
d2:15:2c:08:f4:35:ce:22:17:ca:26:50:2d:68:d7:
01:a0:43:ea:b4:a4:4c:09:ae:7f:64:fe:ee:ab:b2:
07:48:28:37:a9:bb:39:7f:33:da:5b:61:23:db:5a:
3a:dc:e1:d8:eb:fd:ec:69:ce:88:6a:aa:60:a7:57:
f8:44:8b:66:35:77:10:b3:74:65:24:1c:94:76:67:
3a:2e:24:6d:93:ad:9e:fd:c4:3b:e5:ca:42:ed:3d:
8d:af:05:47:0c:a7:d9:c5:3b:8a:45:54:44:83:a4:
e0:5c:81:78:5e:a0:ee:d1:0a:dc:55:9e:15:54:71:
af:e0:f2:12:36:e1:a9:d3:38:6a:d6:30:9d:d8:77:
e1:5f:2e:67:97:17:83:94:8b:69:13:72:6b:94:d9:
ea:7e:cb:b7:8d:c9:55:70:d7:85:7d:f3:2a:53:48:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:9E:07:EE:60:E7:3D:D1:2C:B6:4E:9E:19:02:3B:54:06:FD:2A
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/efCeB-5g5z3RLLZOnhkCO1QG_So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.248.0-90.84.250.255
IPv6:
2a01:c9c0:8010::/48
2a01:c9c0:8012::/48
2a01:c9c0:8014::/48
2a01:c9c0:8016::/48
2a01:c9c0:8018::/48
2a01:c9c0:801a::/48
2a01:c9c0:801c::/48
2a01:c9c0:801e::/48
2a01:c9c0:8030::/48
Signature Algorithm: sha256WithRSAEncryption
02:9a:78:21:20:d5:a5:a0:dc:7d:27:71:f6:fb:78:19:c4:25:
f3:36:ca:4e:f0:90:e2:e2:c0:57:15:65:70:00:b7:bc:61:61:
ac:80:65:f9:67:22:d8:85:65:1b:91:9f:97:21:bf:4b:48:b9:
e4:6b:7a:3d:86:23:f1:f4:4f:6a:89:28:95:de:95:e1:95:bf:
2d:2a:55:97:2d:10:65:61:9b:a3:c4:82:75:f0:ea:e6:b8:b8:
7b:aa:a6:1f:82:ae:8c:c4:b5:af:d6:7f:ab:5c:a1:9d:67:64:
ef:5b:64:9d:33:05:9d:df:72:67:38:cc:7d:d6:97:ef:77:9d:
05:1b:dc:d6:aa:7a:66:09:c2:7d:2d:cc:70:d8:2b:8c:06:46:
3e:02:e9:db:03:d0:d8:b6:6e:1a:71:8e:2e:ad:9c:a3:6c:29:
c4:0a:84:cc:ed:ba:9f:c2:26:4b:f7:68:06:29:1e:8c:75:3d:
35:d0:02:b6:39:0c:7d:3b:ad:2b:bb:a4:23:bf:b9:bf:fa:f8:
68:e8:40:41:79:1a:17:67:85:7f:49:d9:1f:69:d9:de:c3:3e:
25:71:ee:57:c5:eb:f2:50:83:c1:99:b3:cb:1d:ec:3b:d6:e6:
93:6f:4c:02:c0:c2:be:66:af:9f:8c:66:d6:2d:2b:2c:5e:43:
9e:62:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:17:40 2024 by rpki-client on console-ams.rpki-client.org