Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lVFGCkfN6Q7VzMV0icYe2zUI9wg.roa
File: lVFGCkfN6Q7VzMV0icYe2zUI9wg.roa (raw, json)
Hash identifier: QbspNuxuVU8sqfWsmYYcgVEQZP1tY2csz6uimqz7uOo=
Subject key identifier: 95:51:46:0A:47:CD:E9:0E:D5:CC:C5:74:89:C6:1E:DB:35:08:F7:08
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018CC56F042E1EDED2A348188D39B01F0EE4
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lVFGCkfN6Q7VzMV0icYe2zUI9wg.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400040
IP address blocks: 86.104.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 10:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:04:2e:1e:de:d2:a3:48:18:8d:39:b0:1f:0e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9551460a47cde90ed5ccc57489c61edb3508f708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:95:ba:e4:96:7d:c9:cc:6f:51:13:dd:8d:
57:b7:f7:3b:0d:a0:96:c2:1b:90:4c:2c:c7:a0:be:
6e:70:28:5f:0b:09:ac:9e:84:2b:74:7f:a5:9d:46:
e9:a3:40:10:54:75:26:e0:8b:72:d8:c2:47:b8:d2:
8a:48:82:b4:ef:09:bb:53:6a:87:f1:80:63:c3:44:
c0:35:42:74:3d:56:a4:d9:80:48:ef:54:73:7f:91:
f3:e2:78:5b:1b:ca:c2:e8:b1:b0:8c:ee:75:7b:9d:
d0:b4:44:5b:20:d6:cd:3b:d9:cb:d1:a8:cc:9c:bb:
92:8b:e6:72:42:b8:a0:3c:12:49:cb:82:5e:53:fa:
cc:32:1a:e3:13:52:43:10:75:88:7c:ad:d7:d9:4d:
91:54:d6:cc:f9:c1:81:78:93:1c:55:9d:e8:6d:51:
48:58:32:1d:5e:00:16:34:db:97:52:83:51:b1:fc:
48:8b:c7:70:5e:a3:1c:53:4f:91:97:55:21:c2:38:
a2:6e:8f:d4:56:69:23:9e:cb:52:c4:13:00:04:31:
03:df:b6:88:57:df:c9:4e:6d:91:cb:53:46:87:5c:
7f:23:0b:be:06:db:e4:65:83:b6:3b:b6:9c:6f:62:
2c:7e:9a:86:3b:06:e3:fd:30:8f:f0:9d:52:62:99:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:51:46:0A:47:CD:E9:0E:D5:CC:C5:74:89:C6:1E:DB:35:08:F7:08
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/lVFGCkfN6Q7VzMV0icYe2zUI9wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.209.0/24
Signature Algorithm: sha256WithRSAEncryption
07:07:81:fd:fd:5c:96:76:fa:d0:68:a8:ed:f9:30:da:b7:fc:
ce:88:98:68:ef:33:c3:91:ed:94:81:5c:16:7d:0d:98:32:87:
2f:6b:28:61:f5:63:6e:b6:32:cb:95:e2:11:e1:ff:eb:68:a7:
44:4c:c2:e0:e7:2c:3e:5e:3d:2b:93:cb:46:19:f4:aa:7d:fb:
d8:51:70:2b:df:4e:ad:a9:ec:09:a9:86:39:76:17:86:f1:7d:
fa:25:c7:19:8e:86:c3:d5:2e:4d:1c:81:71:8f:4d:77:07:d2:
7d:1d:96:bf:e5:f8:e4:61:5c:15:8a:65:fa:ce:b3:b0:ac:79:
37:d8:ea:e6:c6:3a:79:07:29:35:75:a3:8f:2c:6e:48:40:42:
69:c5:c7:f7:ce:d1:41:91:af:e6:5e:34:cd:bc:b4:23:0b:95:
eb:7d:ed:da:b4:bc:c9:43:4d:85:6d:4e:73:d0:a4:59:8b:fd:
c6:1b:47:d3:8d:6e:48:72:0e:3b:ef:de:92:e7:27:de:84:f5:
44:a0:91:f9:ee:95:15:c5:30:a3:ff:09:a2:ee:49:9e:4c:1f:
49:1d:56:a4:84:ac:74:a5:e9:3d:ec:c1:a2:5f:ac:51:01:ed:
b1:92:96:16:5c:d7:26:1e:85:23:f3:8b:e8:3b:95:f1:e8:d0:
8c:ec:aa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 17:55:21 2024 by rpki-client on console-fra.rpki-client.org