Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/8FkEuZSwOivwVvpvp2wh61mYUdE.roa
File: 8FkEuZSwOivwVvpvp2wh61mYUdE.roa (raw, json)
Hash identifier: q1Md7rechrYW3H2bJHFVjgHDDxttIXCNUs4hPgqAy8s=
Subject key identifier: F0:59:04:B9:94:B0:3A:2B:F0:56:FA:6F:A7:6C:21:EB:59:98:51:D1
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 018CC726D38F09C9B4FC9B7AD6BF796E3C16
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/8FkEuZSwOivwVvpvp2wh61mYUdE.roa
Signing time: Mon 01 Jan 2024 22:30:59 +0000
ROA not before: Mon 01 Jan 2024 22:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 906
IP address blocks: 193.41.248.0/24 maxlen: 24
193.41.250.0/24 maxlen: 24
193.110.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d3:8f:09:c9:b4:fc:9b:7a:d6:bf:79:6e:3c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jan 1 22:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f05904b994b03a2bf056fa6fa76c21eb599851d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:e3:8e:37:b4:e1:33:73:27:20:f1:ae:f4:
ac:92:a7:7c:2a:f2:2f:e8:a1:ae:88:ab:e7:37:ba:
73:bc:b6:ab:81:08:8a:51:f7:1a:f4:87:62:37:a9:
e8:85:00:26:a6:ee:d5:4e:06:a4:6c:63:11:cb:97:
d4:63:9a:a1:a1:43:97:8c:92:25:91:53:66:a9:b2:
66:19:cb:5a:c6:26:4d:44:f1:55:aa:8d:69:e5:16:
65:55:d8:8e:09:4a:6f:03:e1:18:e2:ff:29:cf:fa:
d2:35:ee:eb:3c:d3:b7:1b:ba:1c:38:41:b8:1a:a7:
62:09:cd:e0:1d:26:cf:31:dc:86:ea:2b:17:5f:97:
3b:72:ca:6f:c9:b5:ab:97:dd:82:18:59:23:68:02:
87:39:85:47:c5:42:7c:10:4c:6f:8b:85:ec:b9:27:
2a:59:89:07:37:7d:30:8b:dd:d7:55:93:c7:47:c6:
19:3f:f1:6f:ff:18:67:c9:3c:cd:b2:4c:a2:eb:3e:
b3:47:c9:4a:93:44:f4:36:be:7c:96:4d:d2:18:12:
9a:95:33:82:10:71:c0:ce:2d:19:91:2c:2b:94:9d:
1d:d2:c1:7c:90:8a:2c:4b:3b:ff:e2:6a:dc:67:db:
78:78:c3:ea:62:b2:81:ec:b3:ec:78:ec:8f:10:15:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:04:B9:94:B0:3A:2B:F0:56:FA:6F:A7:6C:21:EB:59:98:51:D1
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/8FkEuZSwOivwVvpvp2wh61mYUdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.248.0/24
193.41.250.0/24
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
65:c7:28:c7:a3:b0:99:63:f7:9b:da:d7:9b:b3:54:93:b1:6d:
a9:7e:91:b0:9d:ba:6e:73:c0:54:04:3c:dc:cf:1f:1c:f2:fd:
e9:03:2a:6f:3a:27:61:d7:18:60:be:94:d9:6d:0e:f7:c4:8d:
67:12:bb:92:9a:b9:82:6e:06:91:ff:37:6b:92:3b:97:27:55:
5e:c8:3a:65:a1:cd:69:78:e5:e9:da:a9:e3:41:9b:72:d9:b6:
cf:7d:e2:0c:2b:a1:65:ed:7e:eb:da:91:a5:4a:eb:db:69:b4:
91:1d:5c:f7:6d:70:f8:6f:83:05:8a:34:8a:32:7a:50:cf:a5:
80:c2:1d:4e:16:64:5c:8c:f5:91:ba:6c:69:21:13:98:b0:8f:
ce:75:15:48:55:ee:d0:c0:a4:c9:56:6d:de:3f:df:30:7a:2a:
00:38:68:11:fa:45:20:94:1a:0c:85:44:ae:5f:48:73:35:0d:
32:ea:9b:3c:70:8a:6a:30:2d:25:31:64:bd:e5:a0:23:7d:c7:
56:23:27:5d:4f:ed:e5:18:fa:18:33:3c:66:72:9d:5b:4a:f9:
55:86:1f:f7:41:d1:99:2d:99:87:ae:1e:87:47:a6:f2:06:75:
da:b8:36:8f:d6:a7:59:a6:29:ba:b0:03:56:17:0e:7d:9d:45:
c2:f9:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:33:16 2024 by rpki-client on console-ams.rpki-client.org