Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/jcOGnCpKhd2HGL9_3cLTa1qX-tI.roa
File: jcOGnCpKhd2HGL9_3cLTa1qX-tI.roa (raw, json)
Hash identifier: mzd2ZBj+PsIc2JXiZX5w7ZgkMSw3Ku6mIQ18jXw7+/E=
Subject key identifier: 8D:C3:86:9C:2A:4A:85:DD:87:18:BF:7F:DD:C2:D3:6B:5A:97:FA:D2
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 018CC801258BC3AE97CE3E15DC870AF82F30
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/jcOGnCpKhd2HGL9_3cLTa1qX-tI.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205984
IP address blocks: 84.246.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:25:8b:c3:ae:97:ce:3e:15:dc:87:0a:f8:2f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dc3869c2a4a85dd8718bf7fddc2d36b5a97fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:ec:7f:8a:9c:c1:c2:a8:bc:0a:d2:f6:4c:
ac:31:76:d0:55:2d:55:fa:c9:df:e2:b6:64:5a:08:
93:b9:de:6b:70:dc:21:e3:16:e0:60:75:01:a2:87:
19:d6:61:48:d7:df:fa:6e:cf:1f:a5:4c:05:3a:5f:
eb:ff:63:c7:f0:a8:bd:02:2e:3e:a8:85:c8:6b:03:
26:93:ff:ca:8f:8d:dc:4b:45:e9:05:1a:33:da:bd:
8f:f8:58:18:3d:5b:1f:96:6c:b6:eb:dc:e3:b4:c8:
9f:44:e7:74:cc:32:79:5c:fe:39:97:c5:10:25:92:
cc:f9:87:a0:ff:38:1b:6b:4a:5d:8d:ef:e6:e1:51:
43:a7:1e:52:0c:46:27:ac:d0:22:82:89:fd:a6:c1:
4a:59:63:26:b4:f3:16:07:46:b5:2d:4d:23:aa:21:
0c:8c:56:f2:ee:19:1c:1d:bd:e7:7c:63:8c:45:8e:
bd:90:d6:96:7c:50:f3:d6:f5:57:f8:da:58:89:67:
b9:48:cf:d8:f8:ed:d8:84:dc:21:75:66:46:c9:db:
d2:36:47:c9:a1:30:7e:0f:eb:e3:27:0d:01:e3:84:
c2:b8:82:6c:c1:4f:10:9a:ea:34:0e:5d:3b:81:32:
61:b7:ca:64:d7:2a:a3:ab:28:d5:2a:97:a9:ee:36:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C3:86:9C:2A:4A:85:DD:87:18:BF:7F:DD:C2:D3:6B:5A:97:FA:D2
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/jcOGnCpKhd2HGL9_3cLTa1qX-tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.243.0/24
Signature Algorithm: sha256WithRSAEncryption
05:65:3a:17:7d:eb:3b:b6:7a:0f:cd:88:c0:b0:52:97:bf:6f:
43:db:e7:6e:a6:16:41:f3:b7:cf:a1:95:24:24:03:32:63:0c:
ee:4f:03:90:5d:cb:6a:27:f6:94:7c:36:5a:35:06:b2:08:9a:
f2:5c:63:e4:3e:1d:e8:28:0b:6f:f2:bf:cb:6d:b6:8f:3d:56:
89:eb:64:97:7b:46:34:84:8d:77:99:04:ed:50:39:05:16:7c:
e2:3e:ea:5a:6d:d3:83:03:67:57:f4:3e:5f:5c:a2:f2:91:95:
9c:eb:83:f8:fb:e7:ec:5d:db:07:b9:71:e9:00:c8:e9:95:72:
62:16:50:92:09:de:f6:72:71:8c:d6:60:17:e6:6a:7c:2b:d0:
db:18:f5:f3:e7:f1:aa:8a:fe:a5:36:a9:bc:3c:63:57:7f:1d:
fd:f7:2b:53:d8:23:8c:1e:09:3b:d5:08:5a:73:1a:02:df:44:
12:3e:6f:85:55:8f:77:67:57:bc:03:2a:bb:a3:4e:af:4f:88:
37:76:9e:e5:22:d6:81:5f:1f:5d:3e:7a:fe:37:f0:9d:c6:18:
67:25:84:f8:6c:ee:e7:fd:2b:8b:4e:32:15:3a:b7:45:08:5d:
2a:a6:49:c6:b6:6d:23:18:2d:96:56:5d:c0:40:4e:0a:23:f8:
e6:4b:80:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIASWLw66Xzj4V3IcK+C8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZGNmMWU4OTdlNTk4ZWMzZjFhYjYwYmQ0NDMzMjg3MjZk
ZWRhZTQwHhcNMjQwMTAyMDIyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGMzODY5YzJhNGE4NWRkODcxOGJmN2ZkZGMyZDM2YjVhOTdmYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsrsf4qcwcKovArS9kysMXbQVS1V
+snf4rZkWgiTud5rcNwh4xbgYHUBoocZ1mFI19/6bs8fpUwFOl/r/2PH8Ki9Ai4+
qIXIawMmk//Kj43cS0XpBRoz2r2P+FgYPVsflmy269zjtMifROd0zDJ5XP45l8UQ
JZLM+Yeg/zgba0pdje/m4VFDpx5SDEYnrNAigon9psFKWWMmtPMWB0a1LU0jqiEM
jFby7hkcHb3nfGOMRY69kNaWfFDz1vVX+NpYiWe5SM/Y+O3YhNwhdWZGydvSNkfJ
oTB+D+vjJw0B44TCuIJswU8Qmuo0Dl07gTJht8pk1yqjqyjVKpep7ja8bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI3DhpwqSoXdhxi/f93C02tal/rSMB8GA1UdIwQY
MBaAFAnc8eiX5ZjsPxq2C9RDMocm3trkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUt
NjIzZTE5OWZkYmU5LzEvamNPR25DcEtoZDJIR0w5XzNjTFRhMXFYLXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUtNjIzZTE5OWZkYmU5
LzEvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPbzMA0G
CSqGSIb3DQEBCwUAA4IBAQAFZToXfes7tnoPzYjAsFKXv29D2+duphZB87fPoZUk
JAMyYwzuTwOQXctqJ/aUfDZaNQayCJryXGPkPh3oKAtv8r/LbbaPPVaJ62SXe0Y0
hI13mQTtUDkFFnziPupabdODA2dX9D5fXKLykZWc64P4++fsXdsHuXHpAMjplXJi
FlCSCd72cnGM1mAX5mp8K9DbGPXz5/Gqiv6lNqm8PGNXfx399ytT2COMHgk71Qha
cxoC30QSPm+FVY93Z1e8Ayq7o06vT4g3dp7lItaBXx9dPnr+N/CdxhhnJYT4bO7n
/SuLTjIVOrdFCF0qpknGtm0jGC2WVl3AQE4KI/jmS4Ca
-----END CERTIFICATE-----
Generated at Mon May 27 13:09:12 2024 by rpki-client on console-fra.rpki-client.org