Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/CL9ZB_a21bMKDSEh8ddI2x6Y7ns.roa
File: CL9ZB_a21bMKDSEh8ddI2x6Y7ns.roa (raw, json)
Hash identifier: VHPOBG5iXR9yXyXkTFoH5zsie3yZYG880vinlCDqsJY=
Subject key identifier: 08:BF:59:07:F6:B6:D5:B3:0A:0D:21:21:F1:D7:48:DB:1E:98:EE:7B
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 018CC7952D59E87D8542583E37A482852938
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/CL9ZB_a21bMKDSEh8ddI2x6Y7ns.roa
Signing time: Tue 02 Jan 2024 00:31:31 +0000
ROA not before: Tue 02 Jan 2024 00:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48438
IP address blocks: 91.210.248.0/22 maxlen: 24
194.26.164.0/22 maxlen: 24
31.43.128.0/19 maxlen: 22
2a0c:b440::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2d:59:e8:7d:85:42:58:3e:37:a4:82:85:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08bf5907f6b6d5b30a0d2121f1d748db1e98ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:e9:5f:c3:cc:86:cd:8f:38:e4:62:d2:30:
f7:71:11:e6:a1:25:ac:66:9c:89:cc:9c:3f:ce:58:
81:56:a3:5c:3d:b5:24:20:83:2f:17:57:eb:f3:8c:
09:52:8c:cb:45:ec:62:9d:d8:19:d7:1d:ac:d7:72:
94:cf:53:ae:7c:a0:ee:a3:8a:0a:d4:48:cb:74:21:
a3:54:e9:5a:80:b0:33:98:0f:7a:8e:33:45:b7:0c:
71:61:3a:10:07:0a:5d:cd:f6:e7:70:64:5d:0d:d7:
86:6f:95:96:28:5a:cd:f3:5c:64:e2:e5:1f:d9:8a:
89:71:bc:28:71:ee:40:ca:68:e1:ad:8f:9d:20:b4:
a4:27:6b:e0:7a:d0:29:29:ae:87:f1:1d:de:7c:bb:
fa:0f:bc:59:82:0a:e7:b4:2e:4c:98:1b:18:34:61:
cd:f5:3b:bf:cb:a9:45:98:5d:2e:81:90:1b:e8:69:
b0:43:25:54:82:5c:94:10:ba:74:39:f9:cb:d3:ad:
0d:e3:ce:04:0c:b1:32:af:31:7c:e0:88:1f:18:54:
8b:21:52:71:14:be:c2:55:84:62:28:8e:fb:99:c1:
ed:65:8b:fd:52:ae:8d:27:b4:8b:24:8e:76:69:62:
73:55:95:30:f9:98:35:b4:31:b0:ff:fa:6c:e6:52:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:59:07:F6:B6:D5:B3:0A:0D:21:21:F1:D7:48:DB:1E:98:EE:7B
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/CL9ZB_a21bMKDSEh8ddI2x6Y7ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.128.0/19
91.210.248.0/22
194.26.164.0/22
IPv6:
2a0c:b440::/29
Signature Algorithm: sha256WithRSAEncryption
5f:70:f3:90:73:bb:49:8e:4c:80:df:ee:28:22:aa:1f:f2:ae:
4c:06:74:af:a7:65:96:6c:d6:93:d5:ce:03:23:16:d2:d1:a4:
ba:4e:b2:3b:99:32:93:49:86:62:94:24:e1:01:05:62:cc:03:
d8:3e:39:ec:fa:14:3f:c8:5f:d4:82:e1:e0:f7:c5:93:0f:68:
4c:fd:8c:e8:cb:82:6b:57:98:a0:ff:14:20:2f:e6:b3:22:8b:
0f:25:df:7c:68:1c:d1:0e:ed:b7:d4:13:fa:0d:b0:1e:85:be:
18:49:ae:de:85:f2:f5:3a:06:e2:02:9e:be:76:f7:93:9b:6c:
de:24:8b:24:b8:69:27:57:72:df:1f:2f:95:53:20:b6:e9:ea:
4f:87:ac:53:5f:57:8d:2f:43:0a:fa:14:e3:0d:f7:b7:20:f5:
b4:7f:53:74:2e:51:e8:79:6c:05:4d:58:f6:15:40:f8:b9:17:
39:7d:28:83:27:f6:cb:39:79:86:0f:01:8f:b3:08:7a:97:13:
64:8b:94:02:1c:ed:b4:03:f2:a8:74:37:8f:b1:f3:2d:17:41:
db:8b:3e:26:41:ad:4a:a5:3c:77:30:5c:64:a1:7f:f1:b7:c0:
22:41:bf:fc:a4:e7:0d:0d:9d:e2:f1:86:01:1e:61:e7:e0:e6:
86:69:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 04:04:37 2024 by rpki-client on console-fra.rpki-client.org