Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/hRnc5do4SpupbbaG82CO_wtw0mY.roa
File: hRnc5do4SpupbbaG82CO_wtw0mY.roa (raw, json)
Hash identifier: 3dlObg0RAVZ8AZYopyD/CrU5GdrxMC7AQvx6cmx+cc0=
Subject key identifier: 85:19:DC:E5:DA:38:4A:9B:A9:6D:B6:86:F3:60:8E:FF:0B:70:D2:66
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 018CC349077CC057CA2CBBE814CCE99FA10E
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/hRnc5do4SpupbbaG82CO_wtw0mY.roa
Signing time: Mon 01 Jan 2024 04:29:52 +0000
ROA not before: Mon 01 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42065
IP address blocks: 83.243.64.0/21 maxlen: 21
83.243.64.0/22 maxlen: 24
83.243.70.0/23 maxlen: 24
83.243.68.0/24 maxlen: 24
193.218.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:07:7c:c0:57:ca:2c:bb:e8:14:cc:e9:9f:a1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Jan 1 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8519dce5da384a9ba96db686f3608eff0b70d266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:51:3b:bb:68:95:6d:c2:91:71:ed:dc:4e:2e:
54:de:7e:80:52:9f:99:5d:e8:e2:be:7f:90:87:25:
1f:24:00:cb:e2:e2:44:bd:39:b7:5e:72:8b:47:78:
6c:85:54:d3:49:11:48:e8:23:ca:69:58:b0:5c:5c:
c9:3f:a6:8b:29:46:04:49:25:85:72:2c:17:50:5d:
be:f2:72:25:cf:b2:ae:4f:95:bd:20:be:90:56:44:
8d:b0:82:56:93:3a:ee:8f:26:98:9f:df:94:5d:ba:
1c:d5:fb:d3:cc:54:14:b3:bb:18:f5:99:ef:73:08:
9d:fe:7c:d2:84:c9:7b:5e:39:8b:f1:11:4f:7d:9a:
0b:16:12:16:db:6e:5b:ad:95:02:0a:3c:02:8e:23:
12:89:85:20:6c:6b:1f:95:41:96:eb:e2:31:3b:5b:
04:62:8a:b8:05:83:66:d1:e7:16:50:75:2e:f1:32:
e0:f3:d3:56:0b:1e:6f:12:b5:5a:35:62:01:39:2e:
7d:8c:f6:a3:e0:98:7d:af:cc:a2:5c:81:ae:58:f9:
0f:4c:9b:5d:b3:78:9f:6a:0e:f4:d4:a0:57:5b:8d:
00:84:f7:ad:ca:4a:61:3a:b2:18:92:7e:0c:55:3d:
4a:f0:e3:9e:1a:4d:3d:7a:ac:47:12:d5:fc:21:9a:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:19:DC:E5:DA:38:4A:9B:A9:6D:B6:86:F3:60:8E:FF:0B:70:D2:66
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/hRnc5do4SpupbbaG82CO_wtw0mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.64.0/21
193.218.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:d1:46:5b:0e:08:8d:34:48:fd:d9:63:bd:d0:7a:bb:1b:a7:
83:8b:27:17:ac:a7:38:a5:64:e8:19:93:e4:af:c1:34:e1:81:
23:f0:c0:c7:2c:1d:2c:c6:c4:49:ae:73:71:b4:a3:fa:27:18:
53:06:df:d7:6d:23:96:a2:16:23:e3:08:2b:86:e5:92:d0:4f:
7d:05:b5:e8:2e:7a:42:34:94:d7:67:6d:0f:83:61:20:d3:ef:
4a:78:6b:2b:d8:d8:7e:25:62:b7:58:68:56:4c:11:39:13:8f:
4b:b5:c4:1e:e9:a5:60:e8:2e:bc:05:a0:66:be:3a:6f:50:14:
55:cd:be:43:fb:6c:a9:0d:3d:47:82:1e:ee:ad:93:84:57:ba:
e2:d7:93:86:02:5b:8b:e5:d4:06:c5:7c:25:d4:60:d9:d7:24:
be:14:7e:02:d5:81:3f:8e:e2:22:84:72:df:33:c2:66:da:04:
70:f8:1b:d6:0c:6d:e1:a7:5a:a9:30:0e:70:83:1b:c0:6e:6f:
75:33:aa:e5:74:06:82:f1:9d:0e:ac:74:12:21:b6:d9:85:a2:
84:05:bc:0b:0f:29:9f:f6:56:90:d2:c2:3b:3f:e3:91:c8:b3:
82:ed:68:d1:0b:bf:71:f3:00:34:40:59:d3:25:ff:4d:4e:a1:
68:7d:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:42:07 2024 by rpki-client on console-ams.rpki-client.org