Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/cAnn0PCC7qWrKQdHMKi0CGQMeMM.roa
File: cAnn0PCC7qWrKQdHMKi0CGQMeMM.roa (raw, json)
Hash identifier: Z/vMHa163YH7cbgiQ8QiVQtRDp+AgkmwpI9SSGTwSXs=
Subject key identifier: 70:09:E7:D0:F0:82:EE:A5:AB:29:07:47:30:A8:B4:08:64:0C:78:C3
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 01931AA7C03DD0D7D9B5D7127F0E4CA2A35C
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/cAnn0PCC7qWrKQdHMKi0CGQMeMM.roa
Signing time: Mon 11 Nov 2024 09:57:01 +0000
ROA not before: Mon 11 Nov 2024 09:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 84.247.113.0/24 maxlen: 24
89.149.17.0/24 maxlen: 24
89.149.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:a7:c0:3d:d0:d7:d9:b5:d7:12:7f:0e:4c:a2:a3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Nov 11 09:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7009e7d0f082eea5ab29074730a8b408640c78c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:5f:c4:2a:73:8f:a0:96:e6:dc:3e:9d:8f:
99:b6:bb:16:81:4e:62:5d:22:7b:9a:41:d1:16:88:
fd:90:db:86:51:9d:00:c4:cb:89:f2:45:de:18:04:
7f:0c:ff:08:df:75:82:ba:19:d8:24:80:5a:70:57:
14:56:0c:4e:c6:2c:61:38:ab:f8:7f:db:fd:10:a8:
cc:24:d6:49:81:86:3a:1d:60:4e:84:d7:4d:79:0a:
77:69:d2:3a:3f:6b:6e:59:7b:ac:94:25:5b:74:e1:
fa:2d:53:c0:83:a5:ff:2f:f5:c5:6c:b4:d0:fa:b8:
a7:fa:d7:d3:2c:21:82:e9:55:88:10:44:e3:3b:2c:
1a:7e:62:7e:08:5a:42:2c:6e:9e:7f:7d:cb:91:36:
24:2a:40:77:0a:f2:a9:e9:84:38:fb:ea:cd:b0:36:
37:2c:82:a5:ee:8f:65:78:01:f6:20:03:c2:26:40:
de:2f:c4:0a:f7:4b:03:30:ff:3a:09:92:49:84:16:
8f:fd:b6:46:1d:30:6c:3b:57:a0:f3:fb:7f:3d:a7:
13:63:a7:1f:57:00:6a:f2:11:ec:9a:44:d9:fc:d7:
93:a3:88:cd:f6:0c:32:0d:b5:94:39:f9:4d:c3:e3:
52:23:ca:fc:0f:de:e5:9b:60:2e:64:3e:cf:2e:96:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:E7:D0:F0:82:EE:A5:AB:29:07:47:30:A8:B4:08:64:0C:78:C3
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/cAnn0PCC7qWrKQdHMKi0CGQMeMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.113.0/24
89.149.17.0-89.149.18.255
Signature Algorithm: sha256WithRSAEncryption
30:c9:a4:5e:a6:b3:36:94:3f:a8:20:bc:4c:ad:22:0c:8b:a6:
27:38:66:fd:a2:57:e6:86:08:cd:91:da:19:c0:3b:56:c1:ea:
9a:64:a1:e2:6e:b3:de:f5:4c:48:b4:7d:fd:b0:ba:99:c8:aa:
66:ab:06:f1:71:8a:26:a6:ef:f6:b3:e0:1d:df:e6:22:80:5c:
e6:e3:88:2f:9c:0a:03:76:09:15:c3:ab:40:c7:9b:89:d2:33:
0c:c7:fd:9b:33:9d:3d:a9:56:7a:ae:b7:2e:72:73:31:eb:15:
4a:01:db:13:28:5d:2d:27:06:0a:25:e2:1a:b8:12:ae:7d:0e:
52:f6:25:ea:b6:5d:e1:bd:ce:ee:dc:00:4c:75:62:9f:d8:95:
ed:85:c6:69:6b:9a:e9:fb:5e:4c:86:d4:6a:cf:be:ab:3a:a8:
67:c7:e4:3d:68:db:ea:29:fc:ec:2a:77:5e:48:d0:96:42:0f:
07:e9:38:8d:c8:7d:da:06:41:1e:15:32:44:ce:7c:6b:24:ae:
b1:58:e9:f7:e5:c2:fc:be:22:12:b4:84:c2:5a:e9:60:c5:d4:
de:4e:d5:20:f9:ab:45:5b:aa:bd:33:11:36:ce:e7:01:96:80:
26:91:83:cd:e6:e7:3f:ef:07:68:65:31:81:14:89:d5:5e:e0:
a6:8f:18:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:37:40 2024 by rpki-client on console-fra.rpki-client.org