Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OoYRcCvtBWKJkPliK0SeUGm9AMY.roa
File: OoYRcCvtBWKJkPliK0SeUGm9AMY.roa (raw, json)
Hash identifier: YJ3Z/dRnH5521wFbidu6//k2efBb/fqcNaVy5/WhiUM=
Subject key identifier: 3A:86:11:70:2B:ED:05:62:89:90:F9:62:2B:44:9E:50:69:BD:00:C6
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE8A13659481FA6E8A1168EB5207CF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OoYRcCvtBWKJkPliK0SeUGm9AMY.roa
Signing time: Tue 02 Jan 2024 06:31:16 +0000
ROA not before: Tue 02 Jan 2024 06:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142111
IP address blocks: 45.86.73.0/24 maxlen: 24
45.89.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:8a:13:65:94:81:fa:6e:8a:11:68:eb:52:07:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a8611702bed05628990f9622b449e5069bd00c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:ac:44:c5:ab:de:81:ed:3c:b6:70:68:00:
79:19:ca:ec:c6:7a:63:60:b1:fd:85:5e:81:7a:77:
d8:c1:7a:77:1e:ed:a3:1e:79:57:86:bf:33:54:39:
89:86:80:1f:1a:5f:4d:ca:af:d5:9f:a1:c2:92:37:
e7:98:04:08:32:3b:42:ac:34:1b:94:b4:01:a3:6c:
59:46:8b:97:c6:54:d0:bc:05:72:b3:0d:d3:42:37:
c2:4e:c3:68:96:ad:f0:db:e1:a6:51:7a:cd:15:db:
9f:9e:b5:6b:67:4b:d6:fb:7d:fa:b8:f4:96:b1:dd:
b9:36:c4:0c:28:c7:68:43:94:4f:19:e9:a6:50:7f:
8f:87:52:9a:ac:f0:93:4b:e0:48:e2:e2:63:1a:3f:
d8:ca:e8:98:ae:0f:d4:a1:09:03:a8:d2:5e:17:30:
57:38:25:33:ba:4b:70:ce:f7:a2:1a:39:06:5b:6c:
36:4b:97:44:b0:ad:cb:03:da:1e:6b:b3:99:05:00:
63:ab:1e:04:8e:63:ac:c7:77:17:44:6a:98:cf:54:
46:9c:c2:12:35:0e:57:fc:68:f4:24:75:96:e7:72:
3b:d6:90:ea:9d:d8:de:14:8a:63:2c:8c:1f:3d:a6:
89:4e:32:31:1a:6d:c6:01:ae:09:5e:36:af:f5:c2:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:11:70:2B:ED:05:62:89:90:F9:62:2B:44:9E:50:69:BD:00:C6
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OoYRcCvtBWKJkPliK0SeUGm9AMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.73.0/24
45.89.104.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3e:36:45:c0:45:b0:83:64:94:fd:b3:a3:d4:0f:7b:0f:3e:
04:bc:b5:12:f4:2c:26:a4:e3:88:d8:99:87:1f:34:15:9c:60:
6d:7a:3c:3c:90:0b:33:52:33:02:10:bf:de:a8:61:96:0d:b7:
23:b9:ca:35:d4:0c:31:e4:19:19:25:4b:8d:f4:a6:8b:9f:2c:
4d:06:ac:b6:e8:17:d5:c9:ee:95:cc:6e:96:c5:1f:45:16:01:
6e:16:57:54:85:04:d7:13:62:68:0d:9f:a5:58:47:f7:8b:6e:
9a:f6:71:d0:64:79:4c:15:a7:6d:d1:98:53:81:24:84:33:25:
34:ae:72:a2:bc:7e:04:89:b7:20:3f:b3:6d:b5:95:0f:1c:72:
84:00:b4:59:0c:32:74:aa:5b:17:8f:b1:8f:6e:ad:c9:bc:8c:
ad:9b:15:5a:6f:32:d6:d4:48:3c:aa:91:10:48:4b:42:9b:db:
bb:46:50:5a:a5:0b:54:3a:28:cd:f2:c3:07:b9:48:11:23:80:
32:f4:ff:95:27:42:77:d5:5a:10:56:52:4f:d5:c7:d2:62:98:
a6:10:64:ba:33:72:66:8a:2c:35:6a:2e:c3:27:b1:52:b9:00:
32:45:42:4f:6f:ea:7e:00:ee:62:75:1a:5b:5a:11:4c:8b:13:
52:73:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:16:19 2024 by rpki-client on console-ams.rpki-client.org