Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/cAl4D2GodRbOoL6NCgsXMLjFTJk.roa
File: cAl4D2GodRbOoL6NCgsXMLjFTJk.roa (raw, json)
Hash identifier: jJlzeScVJUvJgFOkoX3dOTAm329ynvp8pJ3va/As/KY=
Subject key identifier: 70:09:78:0F:61:A8:75:16:CE:A0:BE:8D:0A:0B:17:30:B8:C5:4C:99
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 019136683498B21F12C045B0C99A2FCB316F
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/cAl4D2GodRbOoL6NCgsXMLjFTJk.roa
Signing time: Fri 09 Aug 2024 09:11:24 +0000
ROA not before: Fri 09 Aug 2024 09:11:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57173
IP address blocks: 87.247.224.0/24 maxlen: 24
87.247.226.0/24 maxlen: 24
87.247.230.0/23 maxlen: 23
87.247.230.0/24 maxlen: 24
87.247.231.0/24 maxlen: 24
185.197.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:68:34:98:b2:1f:12:c0:45:b0:c9:9a:2f:cb:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Aug 9 09:11:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7009780f61a87516cea0be8d0a0b1730b8c54c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:1a:96:21:f6:54:59:3c:3b:93:9f:cc:7a:
96:61:4e:5b:85:39:f8:ab:ea:1b:74:35:b3:61:78:
b5:05:39:58:99:91:39:3a:e8:c4:fa:5d:6c:f5:e0:
50:d1:ee:ed:59:db:cd:a7:95:b1:b5:3a:dc:3f:59:
44:7c:01:db:26:b1:d2:96:50:20:1f:f0:da:98:cc:
39:1e:a6:76:5a:04:e4:48:9f:62:86:95:09:ab:f2:
42:10:08:09:c8:d3:b8:d7:6d:b2:3c:a8:98:1a:ed:
c7:bf:8d:bd:6f:d5:32:4d:bb:c2:fb:91:1f:19:c2:
55:4c:1e:51:f9:91:e4:14:1c:34:75:6d:45:2a:46:
85:a8:f1:c3:cf:60:11:43:39:ca:b6:4d:e6:d5:3c:
28:c3:30:7b:01:ce:07:c9:3f:5a:38:dd:ff:b4:64:
60:be:16:8b:82:2e:b4:55:55:65:54:37:35:d0:4a:
5c:5d:c4:c3:3e:dd:0a:b8:35:a9:3c:c2:51:99:64:
f3:dd:88:69:38:2b:cf:83:56:77:89:8d:80:86:04:
36:ad:bc:a6:80:3a:98:4b:d2:3b:ce:91:33:a9:21:
d8:3d:53:70:b9:9f:d6:6a:f6:e4:c9:d9:26:0a:96:
5c:af:03:cf:df:c5:4e:a0:da:7c:48:61:67:29:c2:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:78:0F:61:A8:75:16:CE:A0:BE:8D:0A:0B:17:30:B8:C5:4C:99
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/cAl4D2GodRbOoL6NCgsXMLjFTJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.224.0/24
87.247.226.0/24
87.247.230.0/23
185.197.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3d:a7:95:16:8e:e9:67:0a:43:54:23:4b:7b:f0:bf:1d:7e:
7a:cc:aa:52:94:39:99:39:77:78:2a:ea:6d:ec:5f:3f:ef:54:
e6:98:cd:ce:e8:fc:f2:05:e3:b9:55:e8:d3:00:e0:85:cd:3e:
19:86:86:bf:9d:b7:7f:dd:dd:3e:9d:0f:99:48:5b:2a:c4:79:
b0:6d:26:57:37:09:db:42:3f:99:2e:ac:44:e9:66:80:4c:90:
f5:47:1f:01:87:06:da:71:b8:a2:9f:e8:2b:84:96:32:e2:e1:
23:fb:97:19:2e:53:55:4c:c3:a7:10:5a:a3:0e:a7:de:da:c9:
0c:4c:77:6a:21:51:08:d4:12:59:59:58:ab:66:60:53:3d:72:
3b:b4:65:aa:95:b1:79:d8:9a:ea:f0:ea:ea:c7:44:73:ac:ee:
ba:cd:68:40:32:e8:1f:b1:fe:fa:6f:47:8e:d7:3a:03:4c:c6:
bd:43:93:4d:22:00:9d:ea:5b:86:3a:43:79:1d:25:2c:99:a5:
a4:1b:c4:b6:69:f3:70:d5:e9:13:6a:66:d3:47:da:d3:1a:2c:
c9:c6:49:d8:8e:20:1d:95:52:95:9b:62:cd:89:4e:a3:90:7e:
cb:f5:5d:cf:c9:27:35:11:0e:31:fd:b2:6a:2b:68:99:da:10:
7a:d1:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:19 2024 by rpki-client on console-ams.rpki-client.org