Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/oJ1_B2b8pSWaHysrM2BjLwYqCXo.roa
File: oJ1_B2b8pSWaHysrM2BjLwYqCXo.roa (raw, json)
Hash identifier: ry+2k6Dv7Kbuu0SkJJQdKKX8HdF/g5S7NKbl0vq0cE4=
Subject key identifier: A0:9D:7F:07:66:FC:A5:25:9A:1F:2B:2B:33:60:63:2F:06:2A:09:7A
Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial: 018CC802BD92F0C14B0EF24CA8B9E4D18FD5
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/oJ1_B2b8pSWaHysrM2BjLwYqCXo.roa
Signing time: Tue 02 Jan 2024 02:31:11 +0000
ROA not before: Tue 02 Jan 2024 02:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8220
IP address blocks: 46.28.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:bd:92:f0:c1:4b:0e:f2:4c:a8:b9:e4:d1:8f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Validity
Not Before: Jan 2 02:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a09d7f0766fca5259a1f2b2b3360632f062a097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:6f:95:07:4b:40:79:93:fb:d8:e6:e2:27:
dd:da:37:92:89:90:ba:40:be:e8:5c:8e:a5:a3:82:
76:3d:90:df:17:e6:2a:2d:6f:c2:c1:73:22:11:4c:
0f:c3:17:84:e4:b5:59:54:cf:db:69:39:e4:f9:f7:
a0:37:41:30:5c:a4:7d:03:02:04:a4:d5:7d:b0:9d:
d0:6c:45:02:d1:96:2b:d7:f2:5e:fb:c2:cf:39:48:
66:d5:18:1d:db:4b:1f:61:c5:a9:4d:0c:ae:97:5a:
79:56:55:c5:12:4c:d6:bf:99:fc:f1:c4:59:4d:aa:
a8:5b:79:ce:55:f0:dc:3e:09:c5:87:d0:fa:81:04:
79:f9:1c:72:b0:51:f3:1f:f3:a2:a2:3d:d8:66:9d:
7f:45:37:42:66:e0:01:c9:89:ec:e2:94:97:a2:86:
cd:7e:2d:85:07:70:d0:e5:c7:b5:5c:87:5e:0d:6e:
eb:8c:e6:7a:45:3d:cc:51:93:05:aa:6f:07:91:ca:
13:58:b0:d2:e7:3c:b0:0e:d6:4e:62:c7:84:b6:2b:
ee:f8:72:4b:b3:dd:b8:90:ae:ca:85:da:07:d8:f0:
0e:21:33:0e:6b:c8:86:07:5b:51:85:e5:25:bf:e7:
9c:af:2b:bc:2d:68:27:2d:b5:2f:a1:60:37:ae:4c:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:7F:07:66:FC:A5:25:9A:1F:2B:2B:33:60:63:2F:06:2A:09:7A
X509v3 Authority Key Identifier:
keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/oJ1_B2b8pSWaHysrM2BjLwYqCXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.184.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1b:48:e9:c3:1e:64:bf:e1:ce:57:bd:e3:e7:c6:6c:df:28:
4c:ee:09:68:45:f1:87:82:58:77:6a:87:f1:fb:b9:a6:a2:64:
b4:c2:dd:24:ed:85:df:c9:fc:6a:94:d0:49:87:36:ae:12:26:
81:85:b2:c7:6d:ca:de:43:c6:97:85:4b:4e:f0:fb:7e:f2:63:
69:6e:31:68:4a:01:3d:48:67:1f:03:89:0d:08:33:bc:de:ea:
0d:34:50:f2:96:17:57:26:6f:9a:78:e2:d4:62:05:c1:e9:3a:
ca:ac:4b:19:6f:e5:92:76:1e:78:ec:64:ad:f8:13:c2:73:45:
4b:1a:79:5d:21:53:f0:b0:64:56:e1:03:fe:58:b0:bb:8b:b0:
24:de:be:5b:56:45:5f:ba:52:05:e1:2d:a9:79:18:f3:d3:27:
f0:22:03:06:1f:9c:e4:5b:8a:30:d0:68:9b:19:37:28:54:b6:
a2:87:5a:81:b5:78:c2:29:52:30:fc:8d:3d:43:06:f4:ab:41:
de:97:f6:2d:f3:68:77:53:61:6e:59:ba:b9:d5:af:1a:6c:8a:
d5:ba:d9:f6:c5:9a:59:42:e3:f4:bc:75:e9:5f:8a:73:f2:03:
3c:ae:d5:0b:32:7d:d1:db:16:70:4c:eb:5c:79:a9:aa:07:60:
09:a6:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 11:58:05 2024 by rpki-client on console-fra.rpki-client.org