Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/CfmtsQotv40c9YQ5u2UxZvkb0hI.roa
File: CfmtsQotv40c9YQ5u2UxZvkb0hI.roa (raw, json)
Hash identifier: EzOLCXDPpJhbZioZbWSvLvNRP6HuNk04YbxczTd29bU=
Subject key identifier: 09:F9:AD:B1:0A:2D:BF:8D:1C:F5:84:39:BB:65:31:66:F9:1B:D2:12
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 0191702BC62CB2F349FF1F99D0C319FF5169
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/CfmtsQotv40c9YQ5u2UxZvkb0hI.roa
Signing time: Tue 20 Aug 2024 14:23:22 +0000
ROA not before: Tue 20 Aug 2024 14:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57822
IP address blocks: 94.247.106.0/24 maxlen: 24
94.247.107.0/24 maxlen: 24
94.247.108.0/24 maxlen: 24
94.247.109.0/24 maxlen: 24
185.54.245.0/24 maxlen: 24
185.54.246.0/24 maxlen: 24
185.54.247.0/24 maxlen: 24
2a02:47a0:3::/48 maxlen: 48
2a02:47a0:4::/48 maxlen: 48
2a02:47a0:201::/48 maxlen: 48
2a02:47a0:202::/48 maxlen: 48
2a02:47a0:203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:2b:c6:2c:b2:f3:49:ff:1f:99:d0:c3:19:ff:51:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Aug 20 14:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09f9adb10a2dbf8d1cf58439bb653166f91bd212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:a8:80:ab:bf:0f:88:8c:7d:2a:48:0a:cf:
05:bc:25:83:66:90:17:46:a0:8a:9c:9c:a3:9f:e9:
a5:9f:6f:d8:7c:3a:85:03:c5:e0:db:e4:6f:02:ac:
dc:52:18:24:80:cd:86:f9:f0:88:f7:6f:e2:97:36:
59:18:18:be:7c:98:4b:b4:a9:f3:b3:5f:73:ca:0b:
04:9a:1a:b7:0f:d3:89:ed:cf:e0:9f:df:64:8a:44:
ba:58:16:ee:dc:6b:b8:f9:ee:be:b7:c5:de:6a:54:
de:68:0a:ce:5b:47:84:f9:36:51:8c:e0:68:c0:ad:
02:61:b1:24:11:90:ab:3a:f6:6b:1f:56:13:0a:4a:
c3:be:d2:cb:bc:9c:f3:91:14:7c:31:4a:bb:19:70:
d5:05:ea:bc:f1:5f:c6:90:f4:f4:79:6d:ba:cb:c9:
ff:da:e0:b5:f4:c6:8e:7f:53:33:9a:08:00:13:3d:
15:0e:dd:88:30:f9:d1:f4:c1:2b:af:fd:fa:67:72:
8a:f3:1f:16:c7:c2:f1:bf:f2:a7:d3:6c:85:c1:36:
1e:11:d3:7a:fd:1e:c0:1b:8f:04:00:c9:ea:e7:16:
6c:9d:9f:31:a1:e4:e8:56:e4:2f:37:7a:b6:05:53:
6f:76:d1:c4:0d:4b:53:f0:73:75:75:50:c3:9f:67:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F9:AD:B1:0A:2D:BF:8D:1C:F5:84:39:BB:65:31:66:F9:1B:D2:12
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/CfmtsQotv40c9YQ5u2UxZvkb0hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.106.0-94.247.109.255
185.54.245.0-185.54.247.255
IPv6:
2a02:47a0:3::-2a02:47a0:4:ffff:ffff:ffff:ffff:ffff
2a02:47a0:201::-2a02:47a0:203:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:e5:ac:04:f2:2e:50:a3:a5:d2:c2:52:17:8c:a3:03:8c:94:
a6:7b:ec:0c:51:d8:a5:8b:d0:85:e7:0e:35:70:0e:62:46:95:
03:14:2f:9e:26:ac:2f:c5:15:6d:a6:7d:00:64:8f:9c:90:87:
91:84:24:61:72:17:72:63:fe:e8:d0:bb:0c:4b:8f:bf:e1:0b:
ec:be:f6:9c:1c:9c:cb:ca:59:cd:96:0a:da:70:d8:ba:61:ce:
c0:14:2c:a5:dc:c5:75:7e:48:8f:05:78:f2:0b:7f:d9:d0:31:
bc:c3:b2:11:c4:f0:0e:8a:51:44:97:10:21:cd:75:d5:34:78:
7f:08:82:0f:e0:5f:fb:f3:d7:c1:d9:c6:f7:1a:1c:ee:b3:41:
c3:35:77:18:99:1b:ba:43:98:36:3b:38:a4:e6:04:af:db:64:
9b:69:2d:7f:04:1f:bb:23:2a:7c:64:00:18:9d:82:f4:94:b2:
d7:08:6e:f3:d8:ba:63:6f:c3:53:66:82:6c:c1:ba:9e:34:36:
79:1e:16:17:a3:ec:6d:a6:d8:07:4b:76:13:de:42:fa:74:c3:
95:40:7e:51:af:33:71:86:57:50:f7:aa:14:52:09:ca:3b:dd:
8d:73:4f:37:7e:89:0a:cd:45:75:25:84:70:44:fb:ec:a1:7a:
65:ff:8b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:48 2024 by rpki-client on console-ams.rpki-client.org