Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/8Jt-rs07reKEkOjd62tX2J_s1z8.roa
File: 8Jt-rs07reKEkOjd62tX2J_s1z8.roa (raw, json)
Hash identifier: z+ZwyCyD/r6j71Yet9o8cCXDGuUour79At0xduZCmmU=
Subject key identifier: F0:9B:7E:AE:CD:3B:AD:E2:84:90:E8:DD:EB:6B:57:D8:9F:EC:D7:3F
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 019127B34100B38BCC7CCEA24041B6CA59E4
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/8Jt-rs07reKEkOjd62tX2J_s1z8.roa
Signing time: Tue 06 Aug 2024 12:39:04 +0000
ROA not before: Tue 06 Aug 2024 12:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 194.150.73.0/24 maxlen: 24
194.150.74.0/24 maxlen: 24
194.150.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:b3:41:00:b3:8b:cc:7c:ce:a2:40:41:b6:ca:59:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Aug 6 12:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f09b7eaecd3bade28490e8ddeb6b57d89fecd73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:a0:7b:1f:50:68:33:76:84:6a:0b:51:fb:
9e:fd:7e:c1:cc:a7:39:91:45:1e:26:be:18:95:89:
9f:2a:44:c0:0b:03:41:ad:6e:e9:b0:e2:1d:e6:c2:
b6:2b:ca:37:05:f1:e2:d1:06:4e:91:d5:14:ae:f1:
c2:b6:2a:f4:e3:18:77:ef:2a:da:fc:52:8f:d4:2e:
39:78:ac:97:e1:bb:e9:c4:2e:75:0c:cc:c3:8a:bc:
63:4a:31:9b:fa:ff:72:d1:b1:4c:a0:ad:2c:61:9a:
3b:59:7b:6a:7a:3b:3c:46:8d:e4:69:40:5a:67:21:
52:7b:82:57:56:db:c2:0d:37:3d:e7:21:dc:5d:ca:
02:6a:b9:c6:2f:06:59:d9:54:57:17:4a:e3:7a:11:
13:8e:1f:31:ba:30:9e:39:aa:63:0e:7c:0c:94:02:
70:25:26:ac:34:b6:33:83:12:7a:66:fc:ca:e2:29:
79:49:0d:80:53:5d:09:4f:9f:70:21:ea:c4:71:bd:
2d:1a:3b:27:55:2a:19:3b:9e:cb:a7:06:3a:90:d6:
60:fd:f1:d6:e8:6a:3f:70:d1:58:9a:84:b2:42:13:
be:fa:62:0e:1c:40:e7:bd:c2:54:b7:03:e8:54:f7:
80:3f:83:2d:0b:aa:a8:31:21:c6:c7:f9:6e:d7:a1:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9B:7E:AE:CD:3B:AD:E2:84:90:E8:DD:EB:6B:57:D8:9F:EC:D7:3F
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/8Jt-rs07reKEkOjd62tX2J_s1z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.73.0-194.150.75.255
Signature Algorithm: sha256WithRSAEncryption
04:73:ea:ee:97:84:88:e1:5d:26:05:3a:ad:ae:fc:50:ab:7b:
a5:54:85:f9:16:76:43:78:e2:87:67:fb:9b:81:20:d9:84:4b:
35:70:df:86:1e:01:e7:2f:ac:ed:74:78:73:fa:4a:b9:b9:e6:
a4:20:a3:7e:ca:ed:66:67:4f:b1:b8:ca:78:79:a6:8a:35:50:
04:4b:d0:27:33:c4:98:dc:27:a3:c6:63:76:2b:51:df:48:70:
8e:09:60:a7:14:a8:91:a5:a7:50:22:12:e5:0b:bc:c2:9e:6b:
d4:a6:14:6e:9f:22:04:17:14:5d:81:77:1d:15:bd:31:ea:1f:
08:76:85:d7:0f:d8:a0:33:19:9c:de:81:bc:c3:d9:b2:b6:d4:
b9:52:9a:31:aa:8c:5b:ed:70:4c:0e:90:53:65:46:57:af:60:
5a:27:8d:9c:0c:bc:3b:40:7b:c4:51:a6:fe:40:13:0e:96:f9:
6f:db:f8:65:05:79:c1:5b:76:b2:c2:c1:80:9e:e3:39:73:52:
d8:12:2d:ab:6f:0d:56:52:fb:e4:1b:e4:71:39:99:3b:2f:8d:
85:5b:fc:f8:8c:d8:b9:a3:56:68:4d:04:50:87:bd:f8:4a:e5:
53:c8:90:4d:38:19:8b:d9:64:7d:60:82:07:e1:18:1d:dc:67:
b9:7e:ad:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:14 2024 by rpki-client on console-fra.rpki-client.org