Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EsRnx6aNckfmRpAvFeYyHl-QUlU.roa
File: EsRnx6aNckfmRpAvFeYyHl-QUlU.roa (raw, json)
Hash identifier: O4RrLXoEwitUAA8HiABpfijSREKvtyy2kTiLg/H85dE=
Subject key identifier: 12:C4:67:C7:A6:8D:72:47:E6:46:90:2F:15:E6:32:1E:5F:90:52:55
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 01910E901C6786DCFBA62BA8B432CBE0DFC5
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EsRnx6aNckfmRpAvFeYyHl-QUlU.roa
Signing time: Thu 01 Aug 2024 15:30:11 +0000
ROA not before: Thu 01 Aug 2024 15:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 84.1.42.0/23 maxlen: 23
84.1.44.0/22 maxlen: 22
84.1.44.0/24 maxlen: 24
84.1.240.0/21 maxlen: 21
84.1.240.0/24 maxlen: 24
84.1.246.0/24 maxlen: 24
145.236.80.0/24 maxlen: 24
195.228.11.0/24 maxlen: 24
195.228.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:90:1c:67:86:dc:fb:a6:2b:a8:b4:32:cb:e0:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Aug 1 15:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12c467c7a68d7247e646902f15e6321e5f905255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:b7:f2:35:f0:0c:a9:9b:18:31:9a:5c:a3:
43:9b:1d:48:d3:df:6c:b8:84:03:61:86:2a:8e:48:
b9:c2:5b:30:ae:20:67:2f:75:2c:50:e4:37:7d:f1:
bd:f2:4b:2e:06:78:f8:4f:ad:10:45:0a:87:d0:2f:
6a:0b:7c:e6:8f:f0:7f:52:2d:3c:e9:ab:fa:37:ba:
fb:38:f7:4f:19:02:4f:65:1c:bf:4e:11:f0:33:49:
d5:ad:64:a5:3c:6e:51:44:85:41:a2:16:6c:c1:1c:
d5:bc:34:8b:0d:41:10:79:b3:50:89:04:fd:e3:dd:
0c:f8:8d:f9:81:66:4d:84:f7:07:99:73:be:a0:42:
e2:cc:68:0c:5a:ae:f7:79:a5:58:38:f8:86:b1:71:
48:0d:48:55:21:cd:bc:3f:44:3d:bf:56:88:50:c7:
94:30:fb:38:94:4b:72:4d:98:73:5b:d5:6b:71:f3:
24:cb:1b:80:5f:eb:99:64:ac:e8:f5:65:fa:60:f1:
b4:3b:5c:0e:49:31:db:59:2a:13:44:e2:b0:de:15:
b0:13:bb:f7:73:43:6b:a9:1b:b7:94:f9:ac:03:35:
6c:33:aa:eb:7c:1f:1b:75:9f:c2:76:d7:da:e3:d9:
a9:af:99:87:b0:10:35:b8:cb:09:df:56:99:50:55:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:67:C7:A6:8D:72:47:E6:46:90:2F:15:E6:32:1E:5F:90:52:55
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/EsRnx6aNckfmRpAvFeYyHl-QUlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.42.0-84.1.47.255
84.1.240.0/21
145.236.80.0/24
195.228.11.0/24
195.228.43.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2c:4a:58:d6:41:bb:72:b4:e5:d8:7d:76:a8:a7:c7:e4:af:
61:b8:43:c2:bf:9e:05:c1:6c:a8:d9:2b:e5:37:56:41:4c:f9:
e8:dc:ef:48:ab:01:74:5f:d3:40:a5:c9:55:52:1b:0f:f4:bf:
45:57:4e:b4:07:2a:40:bc:22:76:3f:fa:d8:6c:1d:5a:33:61:
32:fa:90:4a:04:25:51:a4:44:15:90:fb:13:f6:13:d8:b7:89:
70:99:53:89:9f:e4:7f:88:6e:04:9a:68:60:ad:fa:00:0b:2c:
a2:cc:81:63:3e:ae:1e:b2:c1:67:50:90:8b:ad:bd:50:01:41:
23:a7:39:fc:bb:76:43:a8:df:ad:82:cf:d4:7f:d7:d0:c2:17:
b9:44:f6:25:ab:75:4a:20:76:64:08:8f:6b:65:04:21:e7:ed:
59:34:fd:a9:f4:04:ce:e3:b0:50:e1:26:9a:0b:85:84:ec:55:
9a:1d:1c:20:0c:9b:96:06:8d:69:f6:5b:09:ee:01:40:66:40:
48:38:2d:a2:46:fd:9c:4b:13:78:30:20:bb:06:a3:c9:6c:8f:
92:3a:fd:02:40:1f:43:2e:83:45:f8:db:bf:cb:87:6f:eb:39:
86:ee:cd:1a:95:95:2f:ee:e3:d2:43:71:6a:61:0f:38:79:7e:
49:17:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:27 2024 by rpki-client on console-fra.rpki-client.org