Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2EeEFbjsFwiGs9iWhzWpGrnmMfQ.roa
File: 2EeEFbjsFwiGs9iWhzWpGrnmMfQ.roa (raw, json)
Hash identifier: rqtug0/AuUQXTO9diMs9SXJO/8sZuRUhNHgSbqERoYU=
Subject key identifier: D8:47:84:15:B8:EC:17:08:86:B3:D8:96:87:35:A9:1A:B9:E6:31:F4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D243480AAE6497863A5F517FAC82A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2EeEFbjsFwiGs9iWhzWpGrnmMfQ.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47427
IP address blocks: 86.105.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:24:34:80:aa:e6:49:78:63:a5:f5:17:fa:c8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8478415b8ec170886b3d8968735a91ab9e631f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:89:33:56:a8:91:3a:56:0a:89:29:30:fa:98:
e9:7a:c1:f3:0d:a3:4a:3a:f0:5f:77:26:51:3b:9b:
1a:15:6d:6d:b8:51:c3:3f:c3:46:7f:17:fc:fe:aa:
00:78:10:38:79:b7:56:65:f4:6e:88:fe:01:c3:32:
45:9f:62:cc:bd:ed:d4:78:76:e6:32:a2:d8:ff:7e:
9d:6a:be:ce:ae:29:c3:c3:af:fd:bf:19:a1:23:5a:
95:2d:80:0c:ce:e4:40:dd:d7:0d:cb:12:16:39:0c:
08:62:ee:81:42:17:00:ae:11:90:17:49:47:44:69:
28:22:68:96:20:fc:b4:8c:9a:54:f5:9f:27:ef:76:
e6:58:a7:64:d2:a8:37:0e:81:13:31:71:e8:27:d2:
11:dd:67:d1:5f:c1:7a:fa:33:f9:00:e4:4d:27:8d:
f2:8d:23:a6:f1:d5:db:61:54:19:d8:dc:ef:9f:fb:
0e:62:34:64:4a:41:53:14:82:53:35:72:a7:71:c0:
07:2d:a8:f5:44:d9:eb:35:fd:0c:d1:eb:f4:a2:12:
8d:98:91:e9:35:35:88:87:81:05:4a:12:fb:2e:df:
d6:e7:58:9e:89:a2:a4:3e:53:08:c4:0a:dd:87:d7:
e3:65:67:61:aa:9d:45:84:64:06:2e:3c:82:62:27:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:47:84:15:B8:EC:17:08:86:B3:D8:96:87:35:A9:1A:B9:E6:31:F4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2EeEFbjsFwiGs9iWhzWpGrnmMfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.32.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:63:eb:74:54:34:92:e4:4c:17:e9:67:1e:f1:7c:62:6d:68:
0c:54:eb:bf:53:8a:1f:ee:e5:30:92:e4:7d:c1:32:1b:49:35:
06:44:73:2f:bc:2a:32:9b:a9:15:da:a7:e0:27:ef:92:4f:fc:
a0:9a:a2:60:d3:1b:b5:28:d6:dc:44:1a:3b:78:22:0e:e5:4e:
78:cc:b6:51:24:45:b3:08:d6:2e:50:9a:2b:e9:16:11:a8:59:
60:b7:af:9e:9a:3f:b4:0a:49:bd:7d:43:b6:b8:40:c5:ee:a5:
d8:89:74:6a:4e:aa:9c:42:32:1b:2f:01:0d:fd:69:02:24:e7:
25:fb:e1:82:4f:31:d8:b6:99:d1:2c:f4:60:82:e3:b8:df:79:
7a:16:d5:51:43:2e:39:a8:2e:b5:cc:53:5a:58:df:e6:c9:70:
f4:e0:3b:7b:e2:c9:76:7e:51:b0:d0:6a:5a:67:31:5b:72:a3:
81:e4:74:1e:ce:dd:83:b5:28:17:93:fd:22:af:e9:d4:ca:9d:
5e:03:61:3c:28:55:8f:69:a4:fe:38:e3:5b:27:f4:21:43:b8:
c4:81:e5:f4:9a:13:c3:a0:af:82:a4:40:26:6d:1a:fc:06:a9:
53:4a:cd:95:f8:2b:41:11:fe:98:9f:59:79:58:62:c9:bd:19:
53:81:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:50 2024 by rpki-client on console-fra.rpki-client.org