Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/acUnzthTi2Riqn4mE7JCjlKe2P8.roa
File: acUnzthTi2Riqn4mE7JCjlKe2P8.roa (raw, json)
Hash identifier: PH0Pt/9XVw56PW+Yeh6t2k517DbumYqlGrzuYrGTyks=
Subject key identifier: 69:C5:27:CE:D8:53:8B:64:62:AA:7E:26:13:B2:42:8E:52:9E:D8:FF
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 01934EA26BB505E8D67E3AFBEB6465713DA3
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/acUnzthTi2Riqn4mE7JCjlKe2P8.roa
Signing time: Thu 21 Nov 2024 12:11:27 +0000
ROA not before: Thu 21 Nov 2024 12:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 86.111.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:a2:6b:b5:05:e8:d6:7e:3a:fb:eb:64:65:71:3d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Nov 21 12:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69c527ced8538b6462aa7e2613b2428e529ed8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:56:3c:36:1f:8e:37:bb:e9:9c:af:2a:58:
55:73:3c:6e:d6:48:d6:5c:0a:80:1d:d8:bc:1d:32:
e3:c4:06:59:d5:80:4c:3e:79:c0:0c:1f:15:74:96:
68:68:9b:1e:0c:a1:97:71:21:a6:cd:4e:ac:0c:d8:
95:86:9d:83:7d:d9:1b:25:6c:77:cc:51:f1:f7:2b:
38:0e:4f:6e:5a:74:4d:d8:9c:cb:62:d1:bf:b1:ed:
98:09:d6:1c:61:5d:cd:55:a8:17:a5:27:3b:dd:31:
84:d7:2e:47:9b:3b:b4:a1:03:f6:9b:39:47:7e:fa:
c0:65:35:08:40:38:19:b8:ae:43:8d:c9:6c:38:ae:
a9:4f:45:48:60:f4:ff:72:ea:50:77:46:d5:c3:19:
71:e6:bd:fd:b6:89:9f:3e:3a:0b:ab:5d:dc:0c:dd:
a5:54:30:b1:ae:b8:b6:b6:10:09:fa:2f:64:f8:44:
79:46:cf:08:76:ee:54:05:96:2d:7a:2a:a0:32:e9:
f7:e1:0c:68:76:86:22:a3:a5:b0:08:d9:02:7a:2f:
13:77:63:bc:bf:89:42:41:86:d2:b3:eb:cb:fe:89:
6d:bd:c3:07:39:7b:48:7e:67:8d:51:90:74:8e:54:
69:07:37:95:e3:36:62:f6:80:2c:91:49:7f:1c:83:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:27:CE:D8:53:8B:64:62:AA:7E:26:13:B2:42:8E:52:9E:D8:FF
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/acUnzthTi2Riqn4mE7JCjlKe2P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.224.0/22
Signature Algorithm: sha256WithRSAEncryption
71:cb:35:c3:a9:0c:a2:79:2b:3f:76:a3:8a:b4:58:d4:93:df:
69:de:26:23:6e:b7:76:1b:e0:cc:8a:11:d6:bf:ab:db:18:ac:
ce:d3:6a:5a:82:af:7a:8c:5f:ed:a1:38:f5:3c:f9:5f:86:b5:
95:c9:58:63:bb:61:43:21:99:23:5f:e1:37:88:f0:12:43:87:
52:28:51:b7:7a:5a:fc:1b:04:a0:eb:f5:d8:b9:32:15:0f:fa:
0a:df:04:36:97:96:4d:3a:af:7b:cd:c3:ec:a1:89:f9:72:1e:
75:b5:9f:a8:6d:b4:16:fe:5e:05:99:4d:a0:54:4b:ad:7d:1e:
7c:51:05:e9:0a:a8:42:87:b1:87:83:70:4b:2a:9a:2e:fb:b0:
91:45:52:e2:cc:c2:4d:9d:7d:75:10:14:15:c5:d9:07:da:07:
46:16:26:53:e2:7c:36:a3:3b:a2:23:bd:86:3b:bb:e2:e2:67:
8e:23:82:42:58:0c:e2:09:bd:4e:c3:31:1f:ff:04:3c:ed:f0:
26:88:e1:e0:bf:9a:e3:af:00:56:d3:76:38:24:40:a3:32:a9:
75:26:7c:73:9d:92:63:c0:74:4d:7b:8a:cf:e7:a7:42:6e:a8:
41:c5:99:6d:3b:e8:59:3d:dd:b3:14:7c:4f:79:36:54:2c:b8:
8c:61:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:40:40 2024 by rpki-client on console-ams.rpki-client.org