Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/ovyiGyUE9NJCyHpjy3osG405CDg.roa
File: ovyiGyUE9NJCyHpjy3osG405CDg.roa (raw, json)
Hash identifier: NDWmil8aNTXJBsVc8NaTPkV4/TUsSJ9Kv/kUr13aR1g=
Subject key identifier: A2:FC:A2:1B:25:04:F4:D2:42:C8:7A:63:CB:7A:2C:1B:8D:39:08:38
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019256A640780418CB47FB9117D4CC905795
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/ovyiGyUE9NJCyHpjy3osG405CDg.roa
Signing time: Fri 04 Oct 2024 08:29:48 +0000
ROA not before: Fri 04 Oct 2024 08:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59562
IP address blocks: 185.240.204.0/22 maxlen: 22
2a0c:8980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:a6:40:78:04:18:cb:47:fb:91:17:d4:cc:90:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Oct 4 08:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2fca21b2504f4d242c87a63cb7a2c1b8d390838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:be:5a:e1:f7:a6:28:c5:d6:a7:a6:96:4b:
22:7c:be:4b:4e:92:00:a8:66:ab:36:d8:cc:e0:00:
f9:d4:af:f0:9b:df:61:38:72:5b:01:00:89:f3:30:
1a:f9:51:11:fb:86:9b:9e:c8:47:42:99:20:e5:c4:
0c:7f:87:0f:32:a7:65:04:5a:95:5b:fc:0b:ab:15:
37:32:36:93:29:ae:9b:1c:f0:75:8b:dc:52:b5:5b:
bc:d7:72:7c:01:e2:50:84:9b:28:e2:16:d4:7a:57:
3e:40:d5:68:13:cb:6a:78:0c:f0:a8:5a:90:03:82:
ed:f2:30:d3:1d:61:47:59:53:19:43:bc:a0:a5:86:
a0:90:a8:ab:3e:73:f0:2a:df:30:f3:66:a4:31:c3:
c1:44:c0:8c:cb:dd:cc:75:77:5f:a3:51:4e:c1:5d:
b8:cd:bf:e3:44:dc:0b:1f:97:6d:8e:06:53:93:e6:
04:46:d6:2c:bd:e7:8d:22:f4:b6:f9:c5:8b:f6:21:
97:a2:5d:28:0a:a2:f5:35:72:ba:27:ce:63:e9:43:
19:dc:03:ab:b0:b8:42:b8:aa:a0:b5:6f:74:ea:fb:
09:d1:ae:70:91:41:ac:47:55:8f:b3:44:05:b5:e8:
b2:70:97:50:b9:91:b0:b0:4b:37:fc:0f:13:33:da:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:A2:1B:25:04:F4:D2:42:C8:7A:63:CB:7A:2C:1B:8D:39:08:38
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/ovyiGyUE9NJCyHpjy3osG405CDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.204.0/22
IPv6:
2a0c:8980::/29
Signature Algorithm: sha256WithRSAEncryption
99:b1:95:86:d1:73:c0:b1:cc:02:ac:97:0f:76:4f:4c:c2:dc:
8b:a6:f9:4f:dd:83:9e:66:8b:6c:55:c9:06:34:60:0f:8d:bd:
de:bc:88:18:97:24:45:9a:64:98:68:fd:33:52:58:80:55:af:
54:90:2d:e8:10:ea:fb:d3:e8:83:4f:0d:47:c6:1a:75:ed:85:
f2:fa:47:de:3c:cd:b2:4c:ef:2a:d3:43:29:d9:70:13:81:29:
26:97:ba:c4:ea:20:e0:85:53:ed:d2:ab:17:b5:81:8b:56:35:
86:9a:69:f8:62:61:1a:85:a9:df:79:02:f1:4a:cd:9f:bd:ec:
26:f9:55:2c:56:73:68:fa:b8:40:69:ba:5f:59:58:8f:b6:ab:
31:68:89:96:c0:9d:ff:d7:62:9d:77:c3:e2:4a:34:dc:79:f1:
67:b5:30:56:83:08:69:08:28:98:9c:bc:de:49:8b:54:9b:57:
e4:77:9b:f0:fb:ea:62:ab:6e:b4:b7:ab:d0:bf:44:82:53:6e:
58:0f:63:26:37:c9:2e:60:73:0a:ce:4c:75:f0:30:fc:f1:b2:
ed:3b:6a:2b:04:a5:df:d6:de:cc:c7:0d:9f:58:61:df:47:d6:
b7:c1:7b:15:fa:6a:89:17:e3:a8:82:13:82:06:fe:4a:58:0f:
4c:fa:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:47 2024 by rpki-client on console-ams.rpki-client.org