Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/jZt11Epan4vhqyQKq6T5EqHIvyw.roa
File: jZt11Epan4vhqyQKq6T5EqHIvyw.roa (raw, json)
Hash identifier: sEZNgg70dP1Wb6Mn94B40gXFHXkvbMh7oETkpkKxUFA=
Subject key identifier: 8D:9B:75:D4:4A:5A:9F:8B:E1:AB:24:0A:AB:A4:F9:12:A1:C8:BF:2C
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 018CC49351533F0B5C97BC356331637B6207
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/jZt11Epan4vhqyQKq6T5EqHIvyw.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42855
IP address blocks: 84.54.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:51:53:3f:0b:5c:97:bc:35:63:31:63:7b:62:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d9b75d44a5a9f8be1ab240aaba4f912a1c8bf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:62:97:76:38:f1:48:49:70:8a:5d:68:cf:
a1:cc:ba:af:48:64:01:29:98:96:67:4c:e5:96:7c:
68:8d:fa:2c:72:bc:74:c9:33:90:74:f7:ef:c9:5e:
b7:e5:a5:c5:2d:26:4d:ed:b5:f3:73:96:39:b4:8f:
69:c1:0d:cd:eb:bb:82:98:c8:2e:6a:05:ef:e3:bd:
e9:f4:66:5f:a2:a1:49:72:cb:e7:f7:24:ae:e0:72:
d4:6d:85:28:7b:7d:e9:5e:ce:c7:d4:00:b2:88:5c:
6b:47:81:d9:ac:af:0e:f8:f6:f3:0d:4d:da:d2:32:
dc:96:be:af:a2:e4:d2:cf:c3:9a:12:ef:a7:b4:d6:
6f:10:94:02:42:81:7c:c2:c7:58:a8:ec:d6:db:de:
29:84:3b:85:86:c0:7d:b3:d7:31:52:d1:a8:87:b8:
1e:64:f1:c8:40:b2:44:ce:46:52:78:2b:7b:7e:cf:
aa:f8:55:7c:18:7b:d9:30:a4:24:53:4e:59:be:3c:
d0:43:33:6f:62:23:55:86:f0:86:fe:d7:f0:b1:4d:
56:7c:76:ca:fc:fe:4c:20:cd:62:ea:11:77:05:45:
4d:7f:58:f8:e3:d0:65:63:85:09:19:f4:c6:a6:3c:
aa:69:7f:b4:27:4c:a3:e2:88:a9:0c:3f:6c:03:50:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:75:D4:4A:5A:9F:8B:E1:AB:24:0A:AB:A4:F9:12:A1:C8:BF:2C
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/jZt11Epan4vhqyQKq6T5EqHIvyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.184.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9a:7e:3c:19:1e:91:5e:a1:0a:de:17:8a:73:a6:4b:1b:e3:
91:c2:ad:dd:c8:4d:09:20:da:bf:84:e4:f7:8b:9d:ea:aa:e8:
cb:15:83:62:14:b4:75:e3:84:b1:43:02:ba:ac:8a:82:8a:72:
77:de:a6:00:d5:44:e9:3c:82:d7:f2:c7:9c:a2:cd:67:8a:a5:
a9:ad:86:77:f7:0e:83:88:68:a1:18:76:ab:58:59:4c:21:38:
4d:7a:1f:a5:15:4f:7b:00:56:e8:d2:ce:18:1e:f7:8f:49:9c:
35:9e:b8:53:b6:4e:7e:33:fe:72:ee:87:cb:6e:fb:d8:2a:6b:
64:ba:5c:61:2a:ff:a6:79:b2:e2:fe:bf:ab:4c:c0:8a:1c:53:
86:16:fa:a2:c3:4e:20:e1:21:2d:c9:fd:70:0c:7b:b8:42:6c:
b6:17:e2:cb:b3:83:c8:6f:ab:4e:69:3a:35:53:b5:c7:31:96:
8f:e6:bc:bf:aa:cb:01:74:b7:b5:30:db:4a:28:56:8c:77:d7:
d5:c7:52:07:6e:35:3c:62:4a:b6:4b:b4:25:d3:44:0d:47:46:
e4:a7:2d:d4:6c:e5:88:41:fe:92:5a:57:63:41:8e:9b:c6:97:
d0:6e:b2:65:ad:81:6a:7d:21:72:5b:c7:58:e7:c4:05:d9:31:
b3:5e:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:23:28 2024 by rpki-client on console-ams.rpki-client.org