Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oPsRxv3z3mxNgBPZo4pb0r1iVdI.roa
File: oPsRxv3z3mxNgBPZo4pb0r1iVdI.roa (raw, json)
Hash identifier: VsTLnr+jB2Kcg8GagNEmUhwLJ/MYkBv7FFi6J3fXo1k=
Subject key identifier: A0:FB:11:C6:FD:F3:DE:6C:4D:80:13:D9:A3:8A:5B:D2:BD:62:55:D2
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018E07C3ADE6CF5B5295CDEB6AFF1C9E534B
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oPsRxv3z3mxNgBPZo4pb0r1iVdI.roa
Signing time: Mon 04 Mar 2024 04:40:48 +0000
ROA not before: Mon 04 Mar 2024 04:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 84.234.16.0/20 maxlen: 24
194.88.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:07:c3:ad:e6:cf:5b:52:95:cd:eb:6a:ff:1c:9e:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 4 04:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0fb11c6fdf3de6c4d8013d9a38a5bd2bd6255d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:19:05:90:e9:a3:7b:12:db:6e:cc:79:bc:
0e:fb:91:0d:bc:48:72:59:45:50:83:d4:5d:60:29:
49:84:63:a9:fd:a2:35:c5:0f:7f:76:1d:cf:da:b4:
c5:dc:84:d4:04:43:45:1c:eb:d4:5c:12:0c:0e:ea:
09:4b:6c:37:f9:6b:82:1d:fd:2f:79:da:d0:86:63:
e4:4a:81:3b:e5:49:77:ec:63:e8:a2:ee:a3:21:c3:
a2:0b:0d:95:e4:0d:03:38:b9:0d:a2:17:9b:33:59:
41:8e:f2:79:f8:50:30:49:ea:ab:20:85:a7:2f:a9:
dc:77:19:df:f5:ba:0b:10:c0:d6:49:64:e3:41:8e:
20:fe:98:fa:b2:51:b0:c2:ef:0b:2a:8c:d2:67:0f:
3f:10:6a:be:d7:0c:b8:5d:52:7b:a6:ff:87:a4:4a:
31:5d:e4:fd:22:91:3e:b2:28:e3:c4:86:5f:70:3f:
99:f9:74:87:69:14:fe:7f:b4:24:40:4c:c5:a4:a4:
44:66:80:a3:27:04:63:3b:df:3f:35:35:de:d6:bf:
de:ee:5b:b0:23:54:8b:fe:6a:12:de:3c:03:88:49:
51:7c:79:19:32:5d:d9:24:04:a6:74:4f:15:8a:1f:
8e:49:93:97:22:51:c2:d4:ab:39:71:9a:d1:f5:ec:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FB:11:C6:FD:F3:DE:6C:4D:80:13:D9:A3:8A:5B:D2:BD:62:55:D2
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/oPsRxv3z3mxNgBPZo4pb0r1iVdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.16.0/20
194.88.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:70:ae:f8:cc:67:48:b8:c9:57:ca:13:e1:cb:fd:82:49:1c:
8c:d2:fd:01:38:d9:18:70:9f:b0:d2:c2:a3:f3:f0:6b:25:4f:
ab:f4:eb:bd:3b:dd:88:c7:6b:0e:67:6a:4f:ef:ec:5d:dd:de:
3b:f9:83:44:1b:9f:c7:05:9a:75:2f:25:ed:90:d2:00:a3:57:
c1:a9:f0:95:af:9c:b9:c3:99:b8:08:4d:28:38:4e:04:3a:35:
ea:a6:4b:c0:71:44:fa:13:31:1f:55:1c:9c:7d:95:7b:22:72:
ff:8b:ee:e8:8e:e9:34:e3:07:97:75:e4:0b:5c:35:4d:b6:4f:
85:09:86:99:59:f0:94:0a:59:ab:fd:ea:9e:f5:1a:c7:1c:b1:
f4:d2:85:f6:1b:60:70:d1:b2:7b:5a:b9:63:d9:93:5f:21:0b:
30:ed:55:21:ec:ca:50:47:50:a0:28:91:d1:ab:c3:71:75:36:
25:27:b8:40:9a:e5:ec:d8:3c:99:d9:50:05:bc:9f:bd:4a:3b:
e0:de:31:ed:21:34:99:e8:34:97:42:5f:94:b8:78:26:4b:a7:
f3:47:b5:05:31:c6:16:67:e8:0d:d9:3f:b9:07:50:6e:b7:de:
0c:07:1b:72:5c:c2:b6:9d:5a:ac:48:d3:b8:9c:a7:b2:f9:85:
95:34:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 14:54:05 2024 by rpki-client on console-fra.rpki-client.org