Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/oDmUniGoNWpyyde7d_Dib0BgH8Y.roa
File: oDmUniGoNWpyyde7d_Dib0BgH8Y.roa (raw, json)
Hash identifier: ctv+haOcbfhD9S/hLDHh7x097RI6wstyMrk/f1HuhB0=
Subject key identifier: A0:39:94:9E:21:A8:35:6A:72:C9:D7:BB:77:F0:E2:6F:40:60:1F:C6
Certificate issuer: /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Certificate serial: 018CC3B71F46F467D166DE29DBD550FF71FB
Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/oDmUniGoNWpyyde7d_Dib0BgH8Y.roa
Signing time: Mon 01 Jan 2024 06:30:07 +0000
ROA not before: Mon 01 Jan 2024 06:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210958
IP address blocks: 93.190.56.0/21 maxlen: 21
46.254.64.0/21 maxlen: 21
2a02:a28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1f:46:f4:67:d1:66:de:29:db:d5:50:ff:71:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a039949e21a8356a72c9d7bb77f0e26f40601fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:24:50:79:27:09:48:67:08:d3:1e:e8:42:
9f:d1:a3:c7:9b:69:ac:e6:bd:d0:b8:0d:2b:75:a5:
9c:08:6a:89:34:d1:85:4d:c3:8f:20:d0:f2:a4:dc:
08:82:5e:b8:82:ae:fa:2f:98:05:71:35:25:14:68:
d8:e4:37:25:45:91:f6:f0:91:a7:3d:99:db:ef:6d:
8b:e2:cb:71:bc:0e:1a:59:32:15:95:7d:99:52:8c:
58:f8:07:f4:49:f2:d3:14:57:2b:bf:b0:aa:45:99:
a1:4f:f6:c4:2d:e5:3e:dc:88:c1:b8:b6:12:56:b6:
b9:04:99:a0:e9:9c:57:8a:58:ac:05:c2:29:92:c5:
86:cc:4d:19:ce:f3:0e:b5:6f:26:88:15:db:ad:f1:
f7:c3:0c:4d:0e:27:10:6d:50:35:2f:61:15:e2:68:
78:95:a5:59:b2:75:ea:34:24:1c:7a:ac:55:d3:44:
b2:46:f3:d2:4a:6e:ff:63:b2:5d:9b:1a:85:11:5d:
b8:cc:97:a7:76:09:90:4d:9e:cb:d8:78:04:80:51:
c0:6e:52:bb:a7:a2:9c:bc:2f:0d:eb:99:4e:d5:b2:
b0:59:50:82:92:d3:c7:db:37:57:d8:89:39:67:5f:
18:35:fc:46:b7:29:a6:e5:78:a9:56:1e:ff:08:e1:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:94:9E:21:A8:35:6A:72:C9:D7:BB:77:F0:E2:6F:40:60:1F:C6
X509v3 Authority Key Identifier:
keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/oDmUniGoNWpyyde7d_Dib0BgH8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.64.0/21
93.190.56.0/21
IPv6:
2a02:a28::/32
Signature Algorithm: sha256WithRSAEncryption
9a:fc:00:84:b8:9c:41:df:8e:f4:14:e7:53:ca:5f:f4:58:3f:
85:5b:17:98:e8:3e:61:d7:0b:e8:42:02:a6:00:7a:ea:9c:e2:
ce:52:1d:fa:52:81:b1:51:8d:98:cb:22:19:cc:c7:c5:e1:a8:
57:46:70:72:59:ce:e6:69:d2:b6:ca:9d:95:65:6c:47:c8:74:
27:07:64:fc:2e:eb:06:04:bc:c8:fe:ff:7b:44:9c:0b:62:47:
05:8d:aa:3c:19:a1:8c:87:05:68:ea:ea:19:0c:d6:72:75:98:
2f:5c:ef:6e:79:6e:c8:64:9e:56:6c:de:84:bd:55:b0:bc:8f:
f9:28:18:d3:2c:5e:81:27:01:6a:21:44:24:91:0d:d3:b0:b3:
e9:63:03:92:f6:f4:8d:ac:f8:6a:36:68:46:5e:db:01:26:08:
44:c4:61:8a:5c:3f:2a:6a:af:72:39:94:57:57:0b:28:ba:dd:
ec:55:e3:6b:d4:cf:7d:7b:fb:ac:fc:5a:b8:76:de:24:07:71:
a1:6b:43:ab:6b:74:58:ac:c0:00:5b:16:68:c8:ad:8a:92:1e:
3d:40:12:8f:d1:3c:e6:a4:5d:e2:b8:0a:b9:4b:d2:84:38:95:
32:5a:3e:f8:77:a1:0f:b8:70:f0:a8:20:59:95:46:d5:ed:34:
a9:45:95:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:14:24 2024 by rpki-client on console-fra.rpki-client.org