Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/Rapv8oCkiDRtH_h9Ss1tfbRjUvg.roa
File: Rapv8oCkiDRtH_h9Ss1tfbRjUvg.roa (raw, json)
Hash identifier: IzBQld8JMnGyI4rxxzrE34KAbJeFjebN0f3ZJWV0VDM=
Subject key identifier: 45:AA:6F:F2:80:A4:88:34:6D:1F:F8:7D:4A:CD:6D:7D:B4:63:52:F8
Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial: 018CC6B785B9C3B8B835477CB555F2DF14B5
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/Rapv8oCkiDRtH_h9Ss1tfbRjUvg.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39007
IP address blocks: 86.100.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:85:b9:c3:b8:b8:35:47:7c:b5:55:f2:df:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45aa6ff280a488346d1ff87d4acd6d7db46352f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:26:d9:5d:50:fb:c8:80:36:20:05:00:e1:
43:8f:4e:a4:bf:17:d6:f7:90:84:19:f1:38:d9:da:
9b:7b:d4:7c:ac:78:39:fe:97:d0:37:fd:21:3f:8f:
a1:c5:77:ff:0e:90:2b:a9:76:e4:e0:6a:15:c4:b9:
af:29:70:d9:0d:49:74:60:f5:9a:3e:db:80:3a:7c:
13:44:ed:29:b0:2a:76:13:13:bb:a1:dc:13:c2:4e:
82:30:8c:33:61:21:d0:53:85:e3:20:cc:bb:f2:8f:
a7:2b:c1:95:45:ad:95:c5:d8:55:b4:8b:89:bc:c1:
2b:df:29:58:9c:9c:7f:d0:14:d5:c6:ca:6f:5a:5e:
05:91:d8:4f:40:42:4d:7c:03:f5:db:89:c2:64:80:
d5:19:af:cd:d9:be:ac:49:58:57:d9:ad:63:55:b7:
62:73:91:81:94:2f:61:a8:32:c5:78:55:f6:6f:43:
2e:b4:b7:be:10:fe:5e:68:06:ac:78:07:50:c8:82:
6c:98:cd:80:02:90:28:21:52:88:9e:f4:9c:c4:27:
34:ba:46:f9:f8:9a:25:11:0e:5b:a6:af:98:00:46:
a6:8b:99:cf:f5:e0:61:7a:b8:a4:4b:73:9d:9b:64:
d9:50:92:78:c8:70:42:11:1d:c9:1e:4e:02:4e:f5:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:6F:F2:80:A4:88:34:6D:1F:F8:7D:4A:CD:6D:7D:B4:63:52:F8
X509v3 Authority Key Identifier:
keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/Rapv8oCkiDRtH_h9Ss1tfbRjUvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:0b:43:8f:e2:bd:4f:0c:a7:06:75:ee:4a:a7:26:d9:fa:5b:
eb:a5:1b:b8:31:d0:b3:f3:d5:a8:b8:83:20:8e:cc:ef:dc:88:
79:c1:47:4b:65:9f:a5:3b:61:7e:fb:51:97:fd:81:ba:5c:e7:
a5:25:e7:09:22:a7:21:61:00:2d:f5:49:3e:bd:40:40:f9:94:
b7:04:a0:ac:e1:7f:5f:15:bf:97:b6:75:5d:f5:21:f1:33:81:
a9:11:4b:26:20:8a:6f:cf:f5:ea:81:8f:e4:c6:49:a5:17:0d:
ea:8a:2e:74:c8:9d:d8:0f:55:2f:8c:12:67:42:f9:66:e4:d0:
f8:29:24:cf:d1:f0:13:10:1c:4d:8d:2a:9f:5e:9f:00:d9:3a:
4a:69:33:c5:5e:70:58:9f:96:d1:77:e5:52:f5:40:fa:bc:09:
0f:29:5c:4e:78:37:74:e6:18:20:c0:88:d1:70:02:d3:63:d3:
e3:de:4e:74:28:cf:48:bc:3f:ca:0b:10:4d:f8:b4:e9:93:45:
c8:81:11:60:06:98:94:e0:08:97:87:70:1a:38:36:36:a9:b0:
ab:2f:8b:1c:9e:96:42:e6:43:1c:95:c2:ce:6e:4d:dd:f9:5e:
23:39:f9:98:36:27:c7:99:aa:94:77:d0:26:54:6b:be:4a:fe:
28:b4:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:38 2024 by rpki-client on console-fra.rpki-client.org