Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/8oN-YZgsFCcaJY9-VmQb8Dhn_ww.roa
File: 8oN-YZgsFCcaJY9-VmQb8Dhn_ww.roa (raw, json)
Hash identifier: gVJ6RDswnxGGU/TFhrEuTNnR3gODwX/L6ZDKjNnRk9A=
Subject key identifier: F2:83:7E:61:98:2C:14:27:1A:25:8F:7E:56:64:1B:F0:38:67:FF:0C
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0191ECE09C47252C9408B27555221A345057
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/8oN-YZgsFCcaJY9-VmQb8Dhn_ww.roa
Signing time: Fri 13 Sep 2024 19:33:48 +0000
ROA not before: Fri 13 Sep 2024 19:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48407
IP address blocks: 81.90.16.0/20 maxlen: 20
81.90.17.0/24 maxlen: 24
81.90.18.0/24 maxlen: 24
81.90.19.0/24 maxlen: 24
93.94.50.0/24 maxlen: 24
93.94.55.0/24 maxlen: 24
2a00:8b20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ec:e0:9c:47:25:2c:94:08:b2:75:55:22:1a:34:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Sep 13 19:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2837e61982c14271a258f7e56641bf03867ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:74:b3:01:8e:30:33:8c:51:c9:72:ed:35:
d7:e9:0a:43:8c:a3:72:b3:46:75:3a:93:43:ab:48:
30:58:48:5f:63:fc:3a:e0:0d:e3:d2:73:d2:5a:58:
9b:67:fd:15:60:a6:85:98:14:80:2d:9f:ee:d0:fa:
51:f3:29:02:60:2e:b4:95:88:89:1d:f2:b2:89:75:
10:3c:80:5f:96:0a:58:da:30:a7:0f:ff:ba:9c:01:
5e:65:7a:2e:31:fa:34:38:55:ea:33:23:bc:db:e1:
21:e7:dc:35:01:f2:3d:16:83:0b:76:68:42:99:a3:
51:a1:fe:15:d9:b4:0a:76:57:e3:a4:51:ce:1d:4a:
e2:4e:e6:06:46:38:d8:6f:6a:9c:b6:44:b8:88:a9:
61:78:85:40:1f:52:52:82:07:28:5d:5a:8f:b8:2b:
71:ec:70:db:40:0c:7c:29:ea:29:38:41:49:19:34:
0f:27:d1:25:94:dd:1f:84:4a:5f:ad:9b:cf:d6:e0:
dd:24:17:a3:8d:06:b7:a9:72:9d:8f:d2:6f:6e:f1:
fe:95:f5:5a:eb:4e:0a:47:d6:b2:25:58:11:8c:33:
46:16:9a:8a:2e:59:e0:41:42:6c:68:08:e2:67:c4:
95:fb:19:51:fa:6e:60:32:fd:34:0e:d9:77:02:16:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:83:7E:61:98:2C:14:27:1A:25:8F:7E:56:64:1B:F0:38:67:FF:0C
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/8oN-YZgsFCcaJY9-VmQb8Dhn_ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.16.0/20
93.94.50.0/24
93.94.55.0/24
IPv6:
2a00:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
8f:6b:b7:bf:b1:12:a6:28:73:57:25:49:b0:92:69:a0:2e:0f:
cf:db:5c:ba:e5:a0:4c:2e:c2:26:62:b6:73:20:73:b2:13:ce:
48:8f:ce:55:f9:f1:89:7d:d8:9c:72:5c:83:ba:ba:19:ad:15:
99:31:da:0d:3f:d0:2a:d3:e4:57:d2:f1:45:19:8f:04:f8:1d:
34:03:89:0b:c0:e7:b4:6a:79:e6:50:06:3b:40:aa:00:ab:e5:
18:84:62:cd:78:a3:55:e0:b6:f9:80:e2:6a:06:88:85:f6:2b:
f6:ce:cc:01:6b:81:67:b8:b5:e2:b1:ba:e7:05:82:8d:81:e2:
32:fa:0f:20:2e:e9:5e:a8:08:ed:18:a8:29:72:de:32:e2:f0:
92:ed:ac:ef:5f:d0:52:14:2b:be:46:92:b0:d6:3f:86:0e:39:
8e:d5:17:ec:07:00:59:56:6a:27:c6:de:82:74:65:70:b4:3a:
db:17:7e:b9:a1:0c:0e:c4:16:0d:47:c6:17:c2:d3:0b:c5:5f:
3c:49:1d:14:b5:65:98:23:66:6c:8e:3a:95:21:43:5f:7f:da:
80:94:e0:b7:b9:dd:2f:b6:f9:f9:e4:84:ca:11:fe:2c:c5:48:
b8:27:35:03:e9:90:6e:b1:f7:35:b5:cd:be:3a:4a:eb:97:d6:
52:04:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:49 2024 by rpki-client on console-ams.rpki-client.org