Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ACOmjdtMZ-9RU7sQQQr-Kn_iEEw.roa
File: ACOmjdtMZ-9RU7sQQQr-Kn_iEEw.roa (raw, json)
Hash identifier: 7ATwL0pJHiCTS2eoC1gBAJkM3Y43HT9IKLQEmdwWUwE=
Subject key identifier: 00:23:A6:8D:DB:4C:67:EF:51:53:BB:10:41:0A:FE:2A:7F:E2:10:4C
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018F2E5CC4FFA287BBBD4C1BE8F151F33F66
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ACOmjdtMZ-9RU7sQQQr-Kn_iEEw.roa
Signing time: Tue 30 Apr 2024 09:36:22 +0000
ROA not before: Tue 30 Apr 2024 09:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142561
IP address blocks: 80.246.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:5c:c4:ff:a2:87:bb:bd:4c:1b:e8:f1:51:f3:3f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Apr 30 09:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0023a68ddb4c67ef5153bb10410afe2a7fe2104c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:8a:18:0d:c7:b5:98:5a:09:44:7b:cb:a6:
73:ef:b2:76:46:f0:1a:e4:2d:86:2e:5f:c0:58:30:
dc:c1:d2:51:ed:e6:70:34:e6:ca:83:b6:57:5a:4e:
5f:54:cb:f0:80:da:39:03:cd:c6:1d:eb:3c:ed:a6:
ae:74:28:42:24:91:22:f5:16:f0:62:e5:bc:bd:c9:
63:2b:55:e3:2e:be:5b:74:0a:5f:d4:45:ab:f1:77:
c7:04:d7:f6:49:0e:a5:45:24:a3:68:f8:07:c9:7a:
da:08:6d:92:9a:45:53:49:62:44:f0:59:7c:dd:d5:
d3:d3:e8:1c:e7:d3:cd:4c:7e:50:e1:ed:f7:7b:91:
68:95:a6:f5:17:be:ce:38:8d:33:25:28:8b:b8:9e:
93:3a:47:97:f0:ca:5f:a9:2b:c7:71:d2:01:eb:82:
5f:7f:16:8c:3d:33:d8:83:a9:d5:c6:6d:e4:2c:b3:
51:a5:ec:1b:92:f6:59:f3:0c:c9:19:a2:a8:0d:52:
77:eb:08:ec:4f:25:47:bf:b6:26:83:d8:a2:14:92:
b0:dc:f3:84:ff:cb:f4:b2:a0:9a:6c:63:21:13:2c:
5a:05:f5:32:31:df:15:73:ce:67:2f:6e:1c:59:6a:
8e:a0:c9:30:8a:30:7e:84:b2:02:8d:e0:b3:aa:92:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:A6:8D:DB:4C:67:EF:51:53:BB:10:41:0A:FE:2A:7F:E2:10:4C
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ACOmjdtMZ-9RU7sQQQr-Kn_iEEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:86:9e:95:94:ac:39:e4:6d:3f:6d:51:aa:7b:c0:bc:d7:e9:
d8:33:0f:18:9d:33:37:d5:bc:27:d7:e6:a6:d3:3c:ed:e8:64:
f3:89:bc:60:af:95:50:40:5a:bf:a8:9b:a1:40:fd:b2:3a:81:
a4:5b:bd:c4:d8:8a:01:aa:6a:bf:13:b0:75:24:8d:d0:70:0e:
5d:06:d6:dc:35:42:ca:42:b3:76:b5:6a:a8:3d:a5:e8:b8:58:
f7:7d:2c:8a:81:40:0f:2c:09:44:32:c6:27:a9:d1:d0:e1:53:
c8:19:8e:e9:fe:b0:c1:b8:e7:b1:ea:8f:c9:44:63:25:ae:b7:
1c:9a:30:d0:c3:f2:96:c2:c8:44:99:6f:44:66:73:ad:81:c4:
2c:e9:8e:9e:ff:5a:a5:5a:49:61:37:78:63:f2:df:4c:0d:e2:
49:78:56:9e:f0:db:70:30:30:83:53:6b:37:4a:92:83:1b:9a:
c1:36:70:6b:50:bc:ed:d5:9d:9a:d8:a0:1e:63:f8:18:73:75:
50:83:fe:23:53:06:c8:c1:f9:11:7c:ff:33:50:11:61:f9:ff:
52:76:fc:38:04:6c:c3:9f:2e:e6:a8:2b:19:91:9a:c9:76:18:
6f:e0:11:e7:c7:2a:23:c0:59:01:b7:18:3c:d5:80:b7:59:98:
65:26:4e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 09:58:22 2024 by rpki-client on console-fra.rpki-client.org