Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Jz0Q4OX4mle2_Og9zqbO_7IwueU.roa
File: Jz0Q4OX4mle2_Og9zqbO_7IwueU.roa (raw, json)
Hash identifier: SCRZw7bi8x1rj8Tqmg/Fu3I0I/3ZrBANZKi7+dSFa58=
Subject key identifier: 27:3D:10:E0:E5:F8:9A:57:B6:FC:E8:3D:CE:A6:CE:FF:B2:30:B9:E5
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 01910E901CE5CECCA9BC4161765898F575A3
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Jz0Q4OX4mle2_Og9zqbO_7IwueU.roa
Signing time: Thu 01 Aug 2024 15:30:11 +0000
ROA not before: Thu 01 Aug 2024 15:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51660
IP address blocks: 84.1.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:90:1c:e5:ce:cc:a9:bc:41:61:76:58:98:f5:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Aug 1 15:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=273d10e0e5f89a57b6fce83dcea6ceffb230b9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:b3:1d:a2:6a:30:6f:9f:b0:a0:92:46:9e:
47:19:91:0a:31:52:2a:b7:8d:f1:c2:9a:79:10:cc:
c8:88:c2:b2:c6:92:c9:0c:c7:7a:73:3d:bf:f5:a1:
70:19:98:0b:84:e3:89:d5:a3:41:96:96:5a:39:b5:
3b:4a:49:38:be:de:55:c0:f0:d9:21:62:2b:04:5a:
50:8b:64:d5:88:f3:06:55:e3:71:ad:2e:5a:c8:91:
18:ff:11:c0:58:41:90:9f:30:ca:f3:1f:1c:8f:45:
39:cd:b6:89:c3:60:36:3e:6b:9a:2c:f9:25:36:66:
58:65:24:d8:b0:ae:67:85:93:e4:53:ed:7d:56:eb:
42:86:5a:67:63:ba:e9:89:c9:f4:67:18:6b:1f:4e:
6d:ab:9a:d1:68:23:50:13:9d:79:75:bf:5f:b7:4f:
f8:8a:99:ca:b7:69:d5:90:cc:8f:e7:0c:c6:c0:2f:
97:da:5c:6d:16:76:aa:37:83:dc:f4:b8:21:5a:28:
7d:49:f0:2b:a3:e7:95:85:87:5a:fc:7f:b4:62:fc:
17:1d:6b:54:f2:21:33:34:98:f7:13:57:62:29:8d:
c3:8a:f1:24:c2:cb:fd:1f:6c:74:c0:fc:57:de:77:
2b:93:e9:3c:8f:21:30:95:95:3c:e4:71:e9:02:b5:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:10:E0:E5:F8:9A:57:B6:FC:E8:3D:CE:A6:CE:FF:B2:30:B9:E5
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Jz0Q4OX4mle2_Og9zqbO_7IwueU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.44.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7d:43:9b:c6:f6:de:24:81:ea:e4:c4:42:c5:94:64:e7:0d:
2a:c7:31:f7:a8:d4:d4:63:4c:5c:f5:b0:cb:43:48:5a:b1:ea:
f0:ed:b7:9f:03:a7:d3:e6:99:b7:a8:2c:57:dc:01:75:95:71:
71:c0:7c:1b:ec:a4:71:50:0d:a9:0e:05:cb:42:56:3f:9b:28:
f6:0a:bf:80:71:b2:4f:33:eb:d1:16:65:af:ea:ba:db:b5:7d:
25:80:d5:8c:80:85:1a:aa:73:7a:e2:79:21:32:be:78:9c:42:
78:8a:49:f3:9d:f2:36:bd:15:18:7e:f0:34:8c:95:d9:97:48:
02:c4:d6:28:0c:c8:67:1c:b9:c6:53:73:50:7a:8b:aa:0e:04:
c6:dd:bf:b9:9d:00:be:e8:f0:f1:e2:96:6e:c2:b2:57:40:9f:
7e:ca:de:a8:55:29:77:64:18:bd:b2:70:d2:c0:5b:6c:55:06:
73:12:94:39:37:6a:d0:b3:16:3c:a7:95:70:b1:0a:be:49:b4:
89:f9:68:fc:5b:6c:71:51:f6:37:8f:23:60:e5:eb:7d:d0:c7:
5a:05:5e:6a:0b:4c:09:8a:38:e9:4f:5b:bf:a7:b8:a0:cd:82:
99:fd:7e:a7:70:af:f0:3e:4a:2d:ef:35:4a:d5:7f:43:f9:fa:
4a:4b:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:02 2024 by rpki-client on console-fra.rpki-client.org