Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/8CgaHuw4OTs60-LdFTKaB2H85CE.roa
File: 8CgaHuw4OTs60-LdFTKaB2H85CE.roa (raw, json)
Hash identifier: /NTD61Q4TblGhGPNij8xZETte0KK/4+bTWyLJWHrhII=
Subject key identifier: F0:28:1A:1E:EC:38:39:3B:3A:D3:E2:DD:15:32:9A:07:61:FC:E4:21
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936CEB41830031B1229702C30F9454
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/8CgaHuw4OTs60-LdFTKaB2H85CE.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36352
IP address blocks: 5.252.234.0/24 maxlen: 24
141.98.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6c:eb:41:83:00:31:b1:22:97:02:c3:0f:94:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0281a1eec38393b3ad3e2dd15329a0761fce421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:38:d7:3f:30:a7:54:cb:1a:c5:db:9e:50:
5a:1d:ba:4e:39:a4:e5:90:9c:59:97:de:26:f7:05:
e4:7b:2c:82:d0:ef:65:8a:6e:23:ed:de:35:0b:0e:
5e:7b:a7:4a:b7:03:18:6b:08:e9:67:fe:5d:2b:fe:
53:97:38:94:1d:23:e3:89:b5:d7:ef:9e:b5:5a:bf:
9e:97:1a:1f:ad:2a:be:5f:ce:91:cc:1f:6d:3c:d3:
a8:8f:83:fc:e4:cf:df:05:93:8b:f7:95:17:4a:a5:
ad:56:6f:68:f8:eb:b4:f9:ea:e6:b9:59:3f:39:0e:
94:4a:00:6b:37:12:8f:37:2c:9b:d4:13:71:33:f3:
fc:2f:8f:10:e4:7c:25:57:77:8e:f5:df:2d:35:de:
7d:db:16:36:99:f6:ec:5e:f7:a8:d1:1b:7f:4e:45:
09:7f:8c:6f:20:b9:21:ef:71:f6:0b:54:0d:ea:ff:
3d:0b:51:b0:33:11:7b:8c:c6:2c:99:83:a2:12:fb:
e7:7a:3d:80:63:7e:34:50:22:94:31:69:e0:6f:93:
72:18:ed:fb:52:46:5a:0e:41:f6:08:4e:fd:0f:21:
46:cd:b1:da:0a:cb:3b:35:fe:8d:3b:fc:54:d5:28:
76:8a:fc:29:86:69:fb:b7:af:94:dc:b5:c9:b2:8a:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:1A:1E:EC:38:39:3B:3A:D3:E2:DD:15:32:9A:07:61:FC:E4:21
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/8CgaHuw4OTs60-LdFTKaB2H85CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.234.0/24
141.98.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bd:24:be:25:8b:6f:50:4f:fa:ba:dd:7a:64:73:d9:dd:9a:
f6:2d:29:b5:aa:b7:ed:48:e9:05:4c:9c:87:42:38:24:5a:42:
d6:02:5f:5e:e2:84:64:52:7e:c1:f8:4f:cb:fa:44:3d:c2:2c:
11:93:89:4a:42:a4:a5:33:fb:bb:3f:bf:fc:8b:e0:c5:ff:5c:
40:0b:70:68:8e:42:a2:bf:fa:d3:d8:ba:6c:50:cd:1a:f1:77:
85:cd:fa:f9:ee:df:ff:e4:5f:ac:a4:66:fd:87:45:84:b3:ff:
d7:a7:63:07:d6:83:bb:5f:d0:13:04:4a:8d:bc:1c:ca:22:41:
dc:c7:b7:9f:87:73:4e:50:d2:cd:67:7a:1f:a6:dc:4d:5f:94:
56:23:01:5f:c5:0e:5a:0d:e2:1f:f2:1f:b4:db:cc:52:b0:dc:
2e:e6:8e:53:ba:0d:85:ff:ad:1d:39:1b:17:6c:38:bf:b7:77:
ed:a6:75:2d:eb:9b:47:03:ce:10:ad:82:b9:4b:67:21:22:3a:
f4:0c:39:c3:a4:2b:45:50:c6:e9:71:85:47:91:c8:9e:73:33:
22:25:4a:f0:df:a3:00:9c:38:e2:b2:62:ff:08:a7:53:f5:64:
f4:72:af:ef:4f:e5:96:b4:55:53:a5:e5:d5:b9:bc:10:c0:98:
52:77:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:55:50 2024 by rpki-client on console-fra.rpki-client.org