Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/i3Urhbleo_2nnTfg_fCz-uGl-uk.roa
File: i3Urhbleo_2nnTfg_fCz-uGl-uk.roa (raw, json)
Hash identifier: shHsR7rEMKI3fDOmHoqjhgOZ/hyG/v7uhKAw7vn4NfM=
Subject key identifier: 8B:75:2B:85:B9:5E:A3:FD:A7:9D:37:E0:FD:F0:B3:FA:E1:A5:FA:E9
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955D41E2940749E365940A03B0F133
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/i3Urhbleo_2nnTfg_fCz-uGl-uk.roa
Signing time: Tue 02 Jan 2024 00:31:43 +0000
ROA not before: Tue 02 Jan 2024 00:31:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59910
IP address blocks: 86.107.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5d:41:e2:94:07:49:e3:65:94:0a:03:b0:f1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b752b85b95ea3fda79d37e0fdf0b3fae1a5fae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:63:27:d9:77:2c:9a:c2:0a:49:d4:de:10:
be:99:9b:cd:e1:3c:1a:82:df:08:c4:d9:2e:cb:f6:
1f:99:33:b1:48:d2:cb:63:83:06:91:a8:fa:54:f9:
25:33:8b:05:81:ef:9a:70:5c:dc:08:22:f7:17:0c:
90:b7:10:df:71:76:97:fd:3a:9c:79:69:7b:2a:f5:
9f:e6:a8:0a:57:9e:8e:aa:dc:ec:f6:8b:29:20:1f:
53:32:49:a4:7c:a0:7f:e8:ad:6f:09:de:bc:65:5c:
26:a4:5b:3c:70:50:4f:30:f8:85:b0:1e:19:2d:48:
8c:82:1f:b3:88:49:19:d0:9b:c0:0e:74:ef:a0:da:
87:4d:4a:25:3e:4b:fa:4c:ea:fa:bb:77:5f:be:99:
c7:f1:2b:52:25:26:65:28:8f:1b:e1:1d:8d:07:0b:
38:b6:67:ad:fd:b1:b0:78:b3:b2:6e:d6:26:98:87:
5e:b3:e1:68:a1:0c:3c:94:83:dd:86:01:77:3a:c1:
26:49:70:56:ae:29:19:74:67:6d:83:7a:5e:e9:f5:
5c:de:62:0c:56:2b:bf:55:c8:bd:85:e7:c2:90:f7:
0b:84:f5:f8:e8:c9:4d:1a:a2:7d:20:75:a3:29:3c:
81:7b:12:60:1d:72:09:a3:87:68:0a:c2:c3:ac:f6:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:2B:85:B9:5E:A3:FD:A7:9D:37:E0:FD:F0:B3:FA:E1:A5:FA:E9
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/i3Urhbleo_2nnTfg_fCz-uGl-uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.111.0/24
Signature Algorithm: sha256WithRSAEncryption
43:df:1f:91:c6:07:a5:1a:7c:41:6e:b3:4c:e0:01:af:0f:5d:
e5:ba:15:f0:23:2f:b2:f5:f8:16:2c:a5:c4:21:d4:59:1f:6e:
ef:23:4b:28:73:bd:f6:39:72:21:5d:79:55:a0:a2:7e:41:c7:
76:77:b0:64:89:65:e8:f4:60:7a:f3:67:69:f2:ba:fc:84:fc:
ad:06:0f:99:80:d4:cc:80:e4:c7:a3:ed:7b:58:c1:99:b6:8d:
08:7a:71:10:6b:9e:83:ec:ba:f6:8a:8b:75:b2:bf:3c:0c:39:
3f:1c:eb:ed:46:d4:8f:2c:93:56:69:2a:49:85:9a:a5:ef:a6:
e8:cf:e1:e1:f6:d7:21:c3:ae:da:f3:c9:5f:2c:a4:4e:99:ae:
55:c7:8b:51:87:a3:51:01:68:44:ee:99:f9:7a:f6:07:c2:e0:
d1:49:43:a3:29:81:21:17:41:9c:14:c4:34:61:76:79:f3:b9:
82:fe:47:cd:76:b2:24:c7:75:47:57:8c:e0:cf:9f:49:8c:7c:
4b:c3:45:49:91:1e:09:37:4a:30:1a:81:6a:f7:0b:cb:35:15:
b7:5a:1f:5c:f5:66:fa:b7:52:5e:c5:bc:e8:0a:9d:e7:f0:9e:
a5:36:8d:29:e5:69:5d:f7:5f:07:a9:f1:a4:b9:57:eb:09:cf:
08:a5:85:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:56:37 2024 by rpki-client on console-ams.rpki-client.org