Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/OY_afztFDoJIoyvIwd2e6Rlt28w.roa
File: OY_afztFDoJIoyvIwd2e6Rlt28w.roa (raw, json)
Hash identifier: pyetmdCEH/DcgIYZbnYHLV7HyAteA6Rlgs9FUzs7/Mc=
Subject key identifier: 39:8F:DA:7F:3B:45:0E:82:48:A3:2B:C8:C1:DD:9E:E9:19:6D:DB:CC
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 018CC4931DA17B85F7F49185CC8DE46679B5
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/OY_afztFDoJIoyvIwd2e6Rlt28w.roa
Signing time: Mon 01 Jan 2024 10:30:24 +0000
ROA not before: Mon 01 Jan 2024 10:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59628
IP address blocks: 46.100.144.0/21 maxlen: 21
91.92.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1d:a1:7b:85:f7:f4:91:85:cc:8d:e4:66:79:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 1 10:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=398fda7f3b450e8248a32bc8c1dd9ee9196ddbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:16:0d:e1:63:9c:07:7f:8d:9a:89:95:18:
e0:8a:b9:ac:e8:a8:45:ae:cb:17:91:13:e8:94:b9:
b0:d3:ac:0e:21:d5:05:16:b3:52:f8:42:64:16:77:
9d:ec:76:15:5e:ad:44:b8:10:9f:76:ea:cf:41:a1:
51:65:4b:6f:d9:a3:a9:c3:a3:a8:b4:40:18:7c:fb:
36:f0:4b:1b:89:e2:93:1e:9f:77:69:a5:54:b9:23:
e0:01:24:0c:b5:b0:cc:7a:b8:14:00:41:66:a3:be:
4b:f7:ec:bb:36:ad:1f:bb:2f:1d:fb:a0:2b:36:cd:
78:07:ca:03:6a:57:44:24:b3:2d:c7:28:d6:9a:b5:
0d:80:05:a4:f1:0e:40:a6:03:b9:10:68:2d:b6:b5:
9e:7b:6b:a7:c1:50:0f:8a:e6:43:04:1c:25:31:0b:
c0:80:d2:fe:d5:b7:f1:fe:7b:d8:ea:c3:cd:a9:f6:
3d:bc:28:f7:22:52:ec:a8:b8:6b:de:a2:03:b2:73:
f1:db:d7:92:7a:12:bf:b2:de:52:32:3a:4d:cd:0d:
7b:55:fc:4d:6e:94:87:09:bc:1f:d6:c5:16:4e:da:
da:fb:a3:8c:a4:73:8f:d2:be:fc:fe:22:34:43:34:
6c:e2:d4:73:22:80:c3:a3:83:74:5f:a7:09:02:8d:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:DA:7F:3B:45:0E:82:48:A3:2B:C8:C1:DD:9E:E9:19:6D:DB:CC
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/OY_afztFDoJIoyvIwd2e6Rlt28w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.100.144.0/21
91.92.172.0/22
Signature Algorithm: sha256WithRSAEncryption
59:45:9b:35:eb:d4:e9:41:20:74:cc:67:07:11:9f:8b:ac:9c:
da:5b:d1:32:7e:7e:8f:c2:b4:a9:81:d5:0d:d1:26:e4:f6:84:
ae:1f:b1:93:71:bd:7c:7c:40:8c:c1:26:a9:8a:f9:2e:15:35:
b5:ff:ee:4a:c4:57:dd:3d:63:c9:72:3c:14:fa:59:c3:d6:98:
94:8f:9c:ac:5f:e9:ad:95:3b:da:5b:60:3b:12:2e:6a:22:00:
14:b5:56:da:49:92:fc:11:49:a8:a2:56:22:43:0e:81:8c:6c:
dc:e7:cb:d6:fa:e8:73:07:94:4b:de:2a:2e:da:51:f8:fc:a6:
df:b9:64:3d:ba:e7:e3:ab:61:1b:51:01:03:3e:cb:2b:27:e8:
1d:aa:ef:71:ed:85:c5:7a:7c:fc:c1:dd:bc:e4:60:41:c9:7c:
3a:f7:92:e7:9d:b4:d9:f0:5e:6e:53:d3:af:a9:3d:59:b4:00:
f5:b0:22:9d:18:1c:de:ac:e6:12:db:43:ef:af:49:09:d4:1d:
30:16:c0:41:7c:ff:3e:d6:98:39:50:22:bb:a4:29:c0:be:42:
28:93:04:95:62:fc:55:71:3f:72:38:94:cb:a6:50:b8:c2:8e:
55:3c:8c:9d:93:55:a7:f7:85:fa:bb:4e:fc:a7:27:f0:c0:a2:
81:c4:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:12:50 2024 by rpki-client on console-ams.rpki-client.org