Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/fj8zgeAc3YfD3nVbVOnMaVj1tts.roa
File: fj8zgeAc3YfD3nVbVOnMaVj1tts.roa (raw, json)
Hash identifier: ykOGdGM+9TwnN0R95J2jd9torWLk0kcYXa0b8+yfy1o=
Subject key identifier: 7E:3F:33:81:E0:1C:DD:87:C3:DE:75:5B:54:E9:CC:69:58:F5:B6:DB
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 018CC94E0B4BD6B64A3DF0464CEC741E6DA7
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/fj8zgeAc3YfD3nVbVOnMaVj1tts.roa
Signing time: Tue 02 Jan 2024 08:33:04 +0000
ROA not before: Tue 02 Jan 2024 08:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 194.169.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0b:4b:d6:b6:4a:3d:f0:46:4c:ec:74:1e:6d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jan 2 08:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e3f3381e01cdd87c3de755b54e9cc6958f5b6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:c7:bd:f5:4c:8f:dc:06:f3:2e:a2:b9:f1:
a3:e6:a5:50:d0:ff:3f:60:d4:37:3d:cf:f7:1b:00:
df:da:1d:92:91:95:77:cd:7e:91:de:ba:1b:42:e3:
fb:58:ad:a2:4c:86:b9:02:86:ca:6b:da:d3:38:94:
89:c6:d7:5f:88:b2:12:0a:7e:47:9c:d8:f7:0d:97:
5e:62:51:cf:cd:f6:55:63:09:f8:d2:06:5c:5f:06:
87:50:88:65:ab:29:d7:47:5b:7b:5b:8a:d0:32:63:
76:f3:9a:f3:1b:53:0b:d4:16:e4:d0:e7:23:84:2a:
44:76:e3:94:e8:1e:8a:f9:ef:30:d5:73:32:0a:df:
e0:34:33:57:9e:e9:90:c5:94:d5:2e:33:3a:7a:98:
3c:8b:b6:fc:17:ca:a3:8c:66:00:5a:bf:5c:d2:0d:
e1:31:ec:9d:fe:0f:32:98:b3:95:24:ab:37:4d:5a:
e4:fb:d7:0e:0e:a1:c5:0b:19:b0:25:73:a8:e7:52:
ad:dd:77:03:84:d7:fe:1b:f1:1f:1c:63:97:d2:a0:
4f:ef:26:b9:17:6e:d5:17:a6:dd:46:c6:75:b4:c9:
ed:06:42:69:31:1b:d1:20:60:30:4a:42:fb:81:35:
ab:8b:91:18:4a:08:2e:b5:a8:07:ea:3a:65:5c:ea:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:33:81:E0:1C:DD:87:C3:DE:75:5B:54:E9:CC:69:58:F5:B6:DB
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/fj8zgeAc3YfD3nVbVOnMaVj1tts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f7:b7:b6:d8:cf:38:fa:0d:19:81:b6:5f:04:a0:f6:03:30:
2a:e5:c6:a7:d0:d7:99:a9:c0:5f:83:fe:12:47:d3:5a:74:c3:
d8:a8:88:a7:2d:e1:84:43:c4:ba:42:dd:74:ad:d4:38:41:32:
39:4c:66:6f:73:4f:72:bf:3d:02:2b:8b:91:61:67:a1:b2:1b:
b1:bf:5a:fa:0f:34:25:b3:7f:42:8f:a4:f2:48:35:0b:89:1a:
a6:a2:eb:2d:31:3e:ad:ab:7a:0d:27:b5:06:c2:65:c1:9c:dd:
f6:ec:c4:f9:1b:5b:43:02:72:80:fa:0d:04:92:00:c1:c6:71:
15:59:51:a7:2e:47:6e:20:b7:7e:99:97:fc:40:f7:6d:62:88:
b8:62:95:85:fa:d4:b7:06:eb:19:6c:b4:02:0f:08:2b:96:66:
4a:1c:b0:4c:ca:80:8f:83:fe:4d:fd:cc:f7:65:75:f6:38:5e:
be:f9:ed:4f:8d:d3:40:90:ca:49:20:5f:c7:93:dc:99:4f:60:
d5:eb:01:12:50:d7:f5:b3:8b:41:65:fd:95:6f:b3:9a:e1:03:
c3:78:68:c7:6f:ed:50:b3:3f:84:94:e4:d8:5e:82:f1:af:51:
3a:a6:07:8e:fe:65:f8:87:9d:99:db:bd:88:53:2b:f3:27:07:
91:2e:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:36:28 2024 by rpki-client on console-ams.rpki-client.org