Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/30ZfAW2OFnw6bYl0eLxAfY_LuN8.roa
File: 30ZfAW2OFnw6bYl0eLxAfY_LuN8.roa (raw, json)
Hash identifier: KifvnUxgEkY72eKlsKk7xoNK0uPFTgldUgc/9sgFun0=
Subject key identifier: DF:46:5F:01:6D:8E:16:7C:3A:6D:89:74:78:BC:40:7D:8F:CB:B8:DF
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 018FF2F9CB5D6A90CCCFF31275B5A61C6A55
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/30ZfAW2OFnw6bYl0eLxAfY_LuN8.roa
Signing time: Fri 07 Jun 2024 13:53:27 +0000
ROA not before: Fri 07 Jun 2024 13:53:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213354
IP address blocks: 86.111.230.0/24 maxlen: 24
86.111.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:f9:cb:5d:6a:90:cc:cf:f3:12:75:b5:a6:1c:6a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 7 13:53:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df465f016d8e167c3a6d897478bc407d8fcbb8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:24:53:d4:05:79:05:66:82:d1:5b:64:d8:
5d:8f:5b:74:96:4b:68:96:e3:76:43:ee:9a:b2:0d:
a9:5b:79:97:1d:17:e8:75:b7:da:37:79:14:bf:c2:
e6:96:4a:48:1f:03:20:e6:51:2e:68:ab:fb:a2:79:
96:2d:36:ee:63:ba:5c:f8:e5:0e:68:71:b7:50:80:
a7:1f:71:c1:fe:0c:41:a1:1d:96:85:35:0f:8d:80:
90:7d:b0:4d:c0:77:90:05:aa:b2:db:b4:bf:fd:78:
39:13:72:23:e5:e8:65:35:26:0d:5a:59:4d:37:3d:
75:c7:1c:a0:2f:d8:d8:b3:e6:ad:92:86:cb:59:1d:
91:63:96:11:1e:23:b8:bd:63:46:a2:39:42:ed:e7:
63:c4:65:43:49:35:7e:30:95:20:d1:50:45:3f:bf:
8c:ae:bb:8a:25:2e:71:ef:28:e1:a6:92:ee:36:00:
7d:9e:94:cc:d4:cc:53:06:ee:ed:45:2b:ae:05:36:
d2:b8:7c:64:18:a9:ca:ff:a5:78:df:6e:f1:be:a0:
2e:61:60:29:e0:6d:bc:1c:33:82:d5:68:9c:02:06:
6d:a9:28:ad:25:ff:fa:41:25:9f:d0:6e:8d:bc:09:
29:08:ea:26:21:db:46:70:d1:a3:5e:67:b3:68:2e:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:5F:01:6D:8E:16:7C:3A:6D:89:74:78:BC:40:7D:8F:CB:B8:DF
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/30ZfAW2OFnw6bYl0eLxAfY_LuN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:8e:f7:14:7f:73:f2:3b:0c:a7:9b:e6:38:0b:eb:4b:17:1d:
cd:20:a0:50:81:b8:ea:a4:f8:39:d7:13:b5:2b:be:3a:ad:a0:
d2:63:c8:5c:8a:9f:0b:68:a9:24:3a:2c:77:70:b5:29:07:93:
87:d5:b1:c4:00:ba:66:bb:e6:ac:5a:9d:77:95:b3:9f:f4:98:
9c:11:0c:b5:74:e3:b6:38:0d:94:1d:ca:72:61:20:b7:0e:89:
eb:5e:9b:b1:63:a2:42:e2:9d:63:fe:b3:d1:5e:e8:9e:c9:07:
49:a0:cf:01:25:33:0f:e1:af:60:30:83:44:b5:0d:fc:ba:c1:
bc:d3:1b:f2:32:fe:08:70:04:e6:b0:32:37:e5:a4:47:61:9f:
eb:9c:3e:e3:bd:93:9b:3a:7a:5e:7b:fb:ec:4d:6c:fd:85:29:
d5:3a:c0:8d:47:85:84:e6:51:7f:35:98:21:ec:80:7b:f5:c9:
af:72:5c:61:e1:28:fc:b8:92:d4:7f:56:9f:cf:7d:b6:4a:10:
0b:48:10:4c:8b:71:13:df:72:45:c7:7b:94:c4:f4:46:12:d2:
64:77:61:62:5c:8e:9c:3b:56:99:65:55:1b:69:a6:a1:e3:6f:
a5:9c:68:7a:7d:f2:9a:80:08:a3:11:b8:b3:c1:66:49:3f:11:
d8:08:67:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:40:18 2024 by rpki-client on console-ams.rpki-client.org