Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/dyGCNgBBhjarCwIihF_85ElN74w.roa
File: dyGCNgBBhjarCwIihF_85ElN74w.roa (raw, json)
Hash identifier: LJxSHkamHC9r63ekQHCbsdEBGqKSAj7+fMRtoIipt3o=
Subject key identifier: 77:21:82:36:00:41:86:36:AB:0B:02:22:84:5F:FC:E4:49:4D:EF:8C
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D58E8FFD11297286CBEDFB0159584
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/dyGCNgBBhjarCwIihF_85ElN74w.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44586
IP address blocks: 213.91.173.0/24 maxlen: 24
213.91.191.0/24 maxlen: 24
83.228.89.0/24 maxlen: 24
2a01:5a8:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:58:e8:ff:d1:12:97:28:6c:be:df:b0:15:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7721823600418636ab0b0222845ffce4494def8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:71:1e:af:49:c9:9a:5f:70:4a:a5:ef:18:d1:
f3:85:fb:1a:bc:3c:fb:d5:57:e3:38:43:2c:b9:64:
39:6b:8b:dc:ee:81:e6:1e:f4:5d:b8:4e:ed:5a:f7:
54:a8:82:96:9b:af:81:57:46:e5:29:e3:0c:63:f3:
11:ed:74:2d:18:e6:f0:6d:7f:95:1a:a3:5d:95:5f:
0d:15:30:d6:bb:db:7f:7a:de:6e:1a:f4:ca:59:10:
8b:f6:3c:1e:3c:24:e8:be:69:60:d2:f2:c1:91:ab:
4a:f9:7b:da:0f:86:ae:9e:f3:86:df:3d:eb:58:3c:
5e:6d:ea:24:56:67:a3:d5:25:c7:19:d6:52:7c:94:
9d:c0:a2:91:a4:65:73:e8:3b:83:cd:7e:63:b9:0d:
90:d8:c2:9e:ee:4d:1c:7d:e4:99:82:64:f3:41:4a:
6c:c8:f7:a2:19:d9:a9:c7:6e:55:58:de:30:22:94:
8d:5b:85:d3:2b:3b:02:e9:bd:9c:ad:a0:bc:39:46:
16:51:2a:68:b9:45:e4:dd:71:15:6d:c2:da:09:4d:
7d:c6:34:6e:d2:a6:30:d5:05:36:a4:13:08:4b:1b:
fe:29:3e:90:e5:1e:d2:aa:c8:05:1f:47:cf:ae:77:
ae:63:8c:de:68:f3:5d:c4:00:7b:a4:dd:35:bc:32:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:82:36:00:41:86:36:AB:0B:02:22:84:5F:FC:E4:49:4D:EF:8C
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/dyGCNgBBhjarCwIihF_85ElN74w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.228.89.0/24
213.91.173.0/24
213.91.191.0/24
IPv6:
2a01:5a8:8::/48
Signature Algorithm: sha256WithRSAEncryption
15:4a:c6:8b:1d:55:93:9d:6d:eb:6d:56:f2:82:a2:83:4b:de:
48:22:80:7a:6d:b0:65:8a:8d:d4:56:27:9b:65:5f:aa:4a:f0:
6e:88:6c:17:12:74:8e:87:e1:7d:e2:73:e0:98:4f:cf:66:2d:
0d:21:1b:c6:ae:8d:75:f6:b2:6f:5b:3c:66:76:33:dc:69:4d:
82:9c:89:1d:7c:9b:8f:7c:fe:ca:ba:0c:23:73:a4:de:82:36:
8d:62:58:0a:a7:c9:d6:07:54:f6:88:02:ac:86:47:c7:3f:19:
b6:26:a4:17:0e:7c:d6:5f:ba:52:5e:ec:ff:c0:9d:e9:08:87:
b2:d5:a6:ba:c3:ad:f0:e3:20:c8:3f:29:ab:be:66:64:3a:c7:
37:a6:1f:66:5a:b9:1b:75:58:4e:ec:84:81:67:b0:bf:8a:e9:
76:89:02:ae:00:91:bb:25:3f:b5:1e:0d:c4:f0:71:a5:2b:4e:
4c:2b:04:0a:ca:34:a8:d1:53:1b:7a:b9:0e:95:5a:76:35:4a:
46:da:58:d5:59:b4:65:b9:77:24:db:cb:48:f4:9c:7c:d2:a3:
0d:27:ab:2e:33:95:69:84:bc:da:e8:d7:71:b2:27:d2:cf:2a:
d6:f0:d5:51:c2:90:be:e6:3d:69:35:22:dc:f2:f0:b4:17:54:
38:47:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:41 2024 by rpki-client on console-ams.rpki-client.org