Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/e0v6ITCw2UAP8tMgP0lI94-7GTU.roa
File: e0v6ITCw2UAP8tMgP0lI94-7GTU.roa (raw, json)
Hash identifier: 6DvvIm6ZxZGXtbxLh0ipdNbLj5Hnpss3yRxC+q/BrNI=
Subject key identifier: 7B:4B:FA:21:30:B0:D9:40:0F:F2:D3:20:3F:49:48:F7:8F:BB:19:35
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBCE44975860DB4D4213A74DEF35F9
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/e0v6ITCw2UAP8tMgP0lI94-7GTU.roa
Signing time: Tue 02 Jan 2024 10:32:57 +0000
ROA not before: Tue 02 Jan 2024 10:32:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 195.228.11.0/24 maxlen: 24
84.1.240.0/24 maxlen: 24
84.1.240.0/21 maxlen: 21
84.1.246.0/24 maxlen: 24
84.1.44.0/22 maxlen: 22
84.1.42.0/23 maxlen: 23
84.1.44.0/24 maxlen: 24
195.228.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ce:44:97:58:60:db:4d:42:13:a7:4d:ef:35:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b4bfa2130b0d9400ff2d3203f4948f78fbb1935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:48:99:9d:44:b8:54:b5:5e:07:ff:d4:69:
0a:2e:e6:c3:cf:5c:65:97:fd:3e:96:b6:8e:20:eb:
89:74:b2:f6:84:77:6e:96:dd:b4:87:22:0a:09:2b:
41:02:e6:59:68:57:3c:8a:3c:eb:c1:a3:79:27:db:
a9:7f:a0:2f:2c:14:d6:9c:d3:77:88:33:76:51:e2:
17:45:8b:15:47:a3:91:6d:61:83:d2:a3:c7:cd:09:
34:56:a8:e3:ed:1b:89:ed:13:df:70:97:dc:95:d2:
70:fb:fe:93:6c:a3:2e:19:97:75:7e:b3:d3:6a:b1:
0a:7b:09:9e:9f:c7:29:c8:ee:87:e9:7f:df:a6:eb:
cc:59:e1:cc:02:30:e5:82:c9:04:06:ea:91:c6:88:
3e:f7:69:bf:8b:28:62:66:cf:e0:0f:bf:63:bf:d8:
11:75:62:1e:bd:db:98:d9:ec:06:73:c7:4a:32:b9:
11:fd:a6:c1:18:31:f5:91:af:ed:ad:0c:c7:dc:73:
10:6c:80:ef:3a:a8:13:f4:9d:b9:83:d9:ef:ae:46:
93:f6:63:ef:e2:87:5f:60:9d:b2:ee:f9:4b:86:0a:
d2:ac:fc:81:ff:ea:16:24:0b:eb:66:60:70:79:01:
e4:8b:05:38:a7:2e:73:10:ac:18:00:34:e3:f8:4a:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:FA:21:30:B0:D9:40:0F:F2:D3:20:3F:49:48:F7:8F:BB:19:35
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/e0v6ITCw2UAP8tMgP0lI94-7GTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.42.0-84.1.47.255
84.1.240.0/21
195.228.11.0/24
195.228.43.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ff:6e:9b:c8:aa:8a:67:08:22:bf:6e:06:1d:37:a9:98:93:
00:fd:af:1f:db:f5:93:4e:15:1e:e9:68:e1:f8:ae:e5:df:5f:
b1:ae:7b:6e:9b:d0:51:6b:6d:a7:dc:70:07:a0:3a:08:3b:3a:
f7:de:cb:be:1d:61:fe:1b:a3:01:f1:21:4b:f7:10:04:10:84:
c5:b2:c6:5a:26:97:61:d0:2e:f4:24:ff:db:91:d5:f9:1c:b1:
3d:d7:08:c4:37:93:60:f3:60:11:c5:0f:a0:49:1d:cd:48:76:
f0:41:fc:af:d4:66:b9:8b:a8:54:20:86:54:41:e4:4a:b7:b3:
24:cd:e9:df:fb:9a:d8:50:b2:9d:07:d8:7d:36:82:22:97:d6:
4f:16:ce:3e:3e:e1:03:2c:7a:15:e2:5f:3c:55:1b:aa:4d:a8:
41:ac:1d:55:02:08:73:89:49:29:17:61:f6:3f:e4:60:9b:93:
07:c4:49:cd:da:07:74:c5:10:39:ee:2b:fc:01:31:c5:84:c7:
98:67:d6:a6:50:97:2c:48:99:58:61:88:2d:e1:3c:a8:2a:12:
f3:8e:09:11:88:a5:2f:2e:48:2d:23:10:f2:7e:30:52:8e:ce:
a3:49:e9:33:6f:4d:ee:ec:37:c8:a2:4d:18:d3:0c:19:76:1d:
2f:10:11:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:23 2024 by rpki-client on console-ams.rpki-client.org