Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/vYXX-oWIGhItr3vcaQTHz1P13d4.roa
File: vYXX-oWIGhItr3vcaQTHz1P13d4.roa (raw, json)
Hash identifier: GLP+UdwrRfCldL1taCULSAKi6D0B1aHXEjpAz3C8MlU=
Subject key identifier: BD:85:D7:FA:85:88:1A:12:2D:AF:7B:DC:69:04:C7:CF:53:F5:DD:DE
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018CC2DB29BD257641A070D73C3594A032F1
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/vYXX-oWIGhItr3vcaQTHz1P13d4.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60509
IP address blocks: 84.247.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:29:bd:25:76:41:a0:70:d7:3c:35:94:a0:32:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd85d7fa85881a122daf7bdc6904c7cf53f5ddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:d2:dc:0f:55:de:fa:d0:69:4b:95:ff:83:
ad:b6:8a:f0:d6:bd:99:37:a2:a2:7e:60:9c:7f:a0:
06:03:12:34:71:c5:53:9a:1a:55:e0:c9:72:d2:d4:
98:19:37:d6:40:ef:25:da:ec:2b:b5:68:1f:68:68:
5d:0d:eb:bd:be:c8:45:60:e5:57:f0:d4:0a:a2:bd:
0a:d8:2e:c7:e1:8e:82:c4:f6:9a:9c:dd:2f:30:25:
52:e4:84:3b:05:38:3e:86:51:69:5e:ab:cd:14:5e:
12:f7:83:5e:31:e9:39:7c:54:66:ba:9e:ee:94:ff:
6b:b7:06:d5:2b:cf:5c:79:f3:d1:8f:6d:5e:77:e4:
3e:c5:89:eb:c1:3c:93:a0:12:bc:23:2f:64:bf:93:
6d:56:df:68:d2:85:54:0a:f9:0c:3a:84:6a:bf:df:
ff:19:b3:b7:ed:3b:6c:5b:a8:40:cb:40:4b:d7:2d:
33:cf:15:e1:45:10:00:c0:f0:ce:6d:f3:e8:1c:e1:
b9:29:13:6d:86:af:2f:69:8a:e6:b4:20:31:db:1a:
5c:ff:fa:ac:e6:d4:1d:63:ac:53:be:7c:56:76:44:
ac:ea:c5:4c:2d:72:9f:de:9d:fb:f1:da:c6:4b:23:
a4:da:94:6b:81:31:ee:84:c7:b6:58:3a:8d:74:16:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:D7:FA:85:88:1A:12:2D:AF:7B:DC:69:04:C7:CF:53:F5:DD:DE
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/vYXX-oWIGhItr3vcaQTHz1P13d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b9:be:b9:d4:2e:27:03:bf:a1:7d:02:0c:8a:3a:2b:27:22:
33:53:11:53:37:62:72:5e:b2:59:be:20:e9:32:fa:64:df:9f:
c4:3b:47:5e:84:84:c7:53:40:97:a4:9c:67:03:e4:3a:03:e0:
b7:30:70:57:d3:a7:37:7e:8e:33:45:d1:94:4e:43:93:48:66:
24:05:54:f8:f0:ab:27:8d:0e:d6:89:ff:4f:5f:f1:41:39:86:
46:d7:27:3e:b5:88:41:b6:68:ef:ce:ad:34:1d:31:f3:b3:69:
99:c4:63:2a:ab:c9:78:b7:a6:5b:70:09:d7:4f:5f:b6:f0:82:
5b:a6:fa:aa:7a:95:cb:b0:be:18:cc:d9:0f:58:13:11:7a:96:
bb:60:f5:a8:14:3c:c7:53:92:4b:95:99:b0:fe:bb:dd:2f:c2:
1c:3f:b2:8f:24:ce:f1:ac:91:8b:41:fe:19:22:db:d0:a4:1b:
ec:65:69:c9:8b:a9:5c:27:6e:05:a0:a2:8b:05:e0:00:0b:b9:
c7:e9:0f:8a:c4:8f:32:b2:a4:7e:27:f9:ab:26:e8:dd:eb:0c:
5b:da:ee:4f:4d:a9:08:d9:72:e3:a6:ac:4b:d9:22:3c:a0:de:
75:8e:e4:c9:c0:f2:08:0a:51:50:f4:7a:1f:66:2e:42:a1:15:
63:23:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:26 2024 by rpki-client on console-ams.rpki-client.org