Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/fIxxtJ6NJopKOPLeFGeLC0Nu3Cg.roa
File: fIxxtJ6NJopKOPLeFGeLC0Nu3Cg.roa (raw, json)
Hash identifier: zC1yCYfezvhdSFn3Edod0iG0q2OkMJmBRSgAVjcApDc=
Subject key identifier: 7C:8C:71:B4:9E:8D:26:8A:4A:38:F2:DE:14:67:8B:0B:43:6E:DC:28
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC727742AC07A73B464FAAE7409492E03
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/fIxxtJ6NJopKOPLeFGeLC0Nu3Cg.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12724
IP address blocks: 82.179.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:74:2a:c0:7a:73:b4:64:fa:ae:74:09:49:2e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c8c71b49e8d268a4a38f2de14678b0b436edc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:cf:9a:31:49:71:0e:92:91:db:c3:5b:00:
3c:5b:d6:76:ee:df:55:61:57:7f:be:fc:9d:cf:fa:
88:27:5a:8e:99:c3:02:4a:96:1b:4f:91:cd:4b:7b:
fe:82:1d:a6:b1:30:1b:9a:08:ab:4e:a5:28:11:11:
5d:3c:4b:55:89:66:ae:13:44:f4:d6:b7:f8:dd:b4:
30:23:3a:10:a7:70:bb:d4:39:45:03:44:22:fb:f6:
50:2c:79:63:b9:8d:0f:b7:09:95:8d:04:a3:90:07:
91:8c:c4:ce:d8:e2:5e:2c:ed:ab:76:fa:c6:5b:fc:
70:da:0e:8c:89:ee:7b:3a:f4:29:08:81:e5:c9:fc:
75:b2:ae:7a:a0:0f:9e:25:d8:37:84:c5:68:aa:b4:
ee:7d:9d:75:c1:13:d9:4b:d1:1c:7e:ad:ab:18:20:
64:88:a1:a1:cd:a0:c7:da:c9:e4:a8:9d:eb:8d:f5:
01:ec:b2:cf:07:da:db:6c:06:56:39:02:5a:bb:4a:
b1:9a:9c:f3:c2:73:3e:73:c2:8e:04:5e:1f:8d:e7:
f6:50:9f:86:01:a4:b3:da:75:ea:f2:bb:d3:21:61:
c3:41:8f:f0:d6:97:21:da:d4:92:ff:02:d8:c3:bf:
88:c2:52:c9:2f:c9:6a:df:fc:9d:67:89:d2:97:da:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:71:B4:9E:8D:26:8A:4A:38:F2:DE:14:67:8B:0B:43:6E:DC:28
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/fIxxtJ6NJopKOPLeFGeLC0Nu3Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.96.0/20
Signature Algorithm: sha256WithRSAEncryption
36:8d:de:7a:07:b1:e9:ce:09:4c:be:2b:c9:58:db:1e:05:f2:
4e:d9:fd:f0:79:34:40:5e:7d:5d:73:90:91:3a:cc:c1:41:d3:
67:f0:2d:56:19:4e:53:36:58:3b:ec:63:2e:2f:9f:e0:c7:62:
5f:27:85:f5:47:2a:99:ed:29:9b:93:87:72:3e:cd:45:d3:09:
28:da:f7:1f:11:e5:64:1f:25:16:9c:7e:fe:ce:9c:fd:24:e2:
7b:5b:0f:40:39:bd:e5:0d:78:a0:20:18:d8:b4:3a:43:7d:5a:
5d:00:7c:07:f2:78:eb:20:73:f1:e4:36:23:0c:9a:0a:a2:7c:
dc:dd:59:a7:46:c2:6e:18:4b:1d:d5:1b:66:ce:66:b2:ea:9a:
a6:6b:bf:17:e2:d1:1f:f4:4a:e8:f7:8e:56:e4:f8:a0:b3:7c:
5c:f4:37:51:7c:40:6c:ba:2e:3d:07:bc:31:49:5e:cf:ad:bb:
b3:57:f9:2e:ee:18:4f:2c:01:4f:19:46:e5:f1:17:95:70:f0:
c5:3d:0b:43:f2:14:75:d1:be:ff:9b:a0:5b:d2:c0:4a:bb:6c:
01:3a:de:6c:52:59:ca:68:20:99:d1:a2:e2:89:dd:fe:08:15:
aa:66:d6:e7:79:21:35:6a:28:fa:64:97:13:9a:1d:bf:ad:e5:
85:0f:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:15 2024 by rpki-client on console-ams.rpki-client.org