Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/c8xodrd9AnJ1Q1LTZBHuJwGeRgk.roa
File: c8xodrd9AnJ1Q1LTZBHuJwGeRgk.roa (raw, json)
Hash identifier: UFY+22wwM/Wr2ITxyrvkg6+Zb/RvP21dZrRLOQn8U4c=
Subject key identifier: 73:CC:68:76:B7:7D:02:72:75:43:52:D3:64:11:EE:27:01:9E:46:09
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 018CC348F4477B1FD45300725A2454D5501A
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/c8xodrd9AnJ1Q1LTZBHuJwGeRgk.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 87.237.84.0/24 maxlen: 24
87.237.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f4:47:7b:1f:d4:53:00:72:5a:24:54:d5:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73cc6876b77d0272754352d36411ee27019e4609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:eb:d6:f2:c0:2f:7a:d0:92:8a:9f:d1:d5:
a9:81:47:79:2d:71:01:c8:79:97:ec:2d:1d:c5:9c:
59:37:ea:03:f0:13:34:33:40:a5:0f:13:45:99:c6:
8e:0a:21:2a:d0:f3:38:8d:13:54:cf:33:01:34:50:
97:e4:44:90:84:eb:e9:78:0b:49:93:59:16:a3:6a:
8b:13:e0:1b:d1:80:f4:45:51:03:53:99:73:fe:72:
46:2d:75:8f:a9:3f:cf:e9:40:f1:a2:fd:7b:d5:a6:
36:67:b2:ec:58:02:3d:7a:cc:3c:b8:13:a3:53:e8:
7d:88:dc:18:87:c8:56:24:4f:52:a0:8c:b3:6a:cb:
70:a8:60:5b:47:48:92:cc:bc:8f:de:c8:f4:b3:f3:
da:36:23:25:da:5b:39:f3:f7:ca:d4:6c:b2:3a:af:
62:ce:da:11:e3:82:86:a8:d4:7b:da:53:bd:2e:a6:
67:76:12:a0:d1:7d:d1:cf:40:9c:4f:2f:ee:ec:db:
bf:a2:2b:34:2b:00:75:ee:c2:98:50:86:69:61:5e:
5a:25:16:e7:a0:6d:0b:b3:dd:60:d5:41:ff:2f:73:
54:29:85:b5:1b:16:5c:18:c2:4a:a8:99:ae:6d:b2:
2c:46:2a:03:9c:52:ae:81:ad:4b:80:0a:34:3f:ff:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CC:68:76:B7:7D:02:72:75:43:52:D3:64:11:EE:27:01:9E:46:09
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/c8xodrd9AnJ1Q1LTZBHuJwGeRgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.84.0/24
87.237.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b1:94:dc:11:90:48:74:a7:4d:bc:fd:eb:22:13:6b:b0:dd:
78:ab:7d:06:4c:66:9b:49:46:64:11:66:53:7a:c9:81:b2:43:
53:f1:b6:d3:38:d0:e0:b2:ef:08:67:fe:e0:33:ed:a7:51:e5:
c7:27:06:21:db:a9:de:c1:c7:2d:15:59:82:29:bc:bb:27:dd:
0b:3d:1e:c9:2c:e9:a3:81:30:69:9b:c7:d2:c2:fe:65:31:27:
75:25:35:26:e1:51:53:bf:fa:c6:b4:87:45:47:e2:50:dd:bb:
7f:73:73:b4:77:8d:61:21:04:0a:d6:18:f8:f2:10:04:6b:99:
bc:13:1b:fd:fe:7c:e3:f1:0b:8c:d5:b3:c7:06:a5:97:c3:cf:
03:cb:74:09:0e:82:b1:88:4a:b4:5a:ac:63:5f:ad:4b:b1:ec:
a8:1d:22:11:8f:c6:31:dc:fc:b6:ad:81:d6:58:c1:3d:7a:be:
d6:43:1f:aa:03:ea:ea:c7:92:b9:04:3b:8a:49:ab:3a:90:e5:
79:b2:22:8d:42:d1:06:f9:07:0f:d7:8a:0f:70:e5:2b:f1:cd:
2e:c7:9f:20:d3:e2:ac:6f:d9:3b:52:d9:09:ba:c8:ed:08:b6:
a3:fa:a6:c9:aa:cd:3b:4f:cc:57:cc:9f:7d:ff:eb:56:b3:3c:
88:c0:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:37:12 2024 by rpki-client on console-fra.rpki-client.org