Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/7oW16AEBr0I2Ka3Ga27GnIOouns.roa
File: 7oW16AEBr0I2Ka3Ga27GnIOouns.roa (raw, json)
Hash identifier: ZlJidFjuVkZb2iggUfavtLAgfgeh4vpXDHPP/yLRpE4=
Subject key identifier: EE:85:B5:E8:01:01:AF:42:36:29:AD:C6:6B:6E:C6:9C:83:A8:BA:7B
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 018CC5DC46A4A041B35EE8D5EE6340D53C4C
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/7oW16AEBr0I2Ka3Ga27GnIOouns.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34636
IP address blocks: 194.31.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:46:a4:a0:41:b3:5e:e8:d5:ee:63:40:d5:3c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee85b5e80101af423629adc66b6ec69c83a8ba7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:e1:00:2a:11:48:2d:b3:64:be:1f:6e:1f:
a5:86:f5:97:77:9d:30:39:f7:fa:17:38:ac:84:56:
e3:7a:66:53:56:ce:5b:ae:7d:d5:26:6f:d7:6e:e7:
7c:36:0f:dc:70:45:14:92:ed:3b:c6:b2:0a:f5:b2:
72:32:3b:ab:2e:62:cc:34:2b:79:94:5c:fe:49:8c:
31:b9:0f:c8:64:0d:e9:e6:78:aa:af:31:8b:ee:4b:
3a:1d:29:ea:95:b2:fd:31:1a:31:43:ef:8b:96:55:
ce:3c:6f:c9:51:12:44:71:28:57:06:25:ff:bc:df:
f4:cf:83:01:8b:05:4d:c6:0e:75:e9:f0:26:ab:19:
80:9a:b1:34:08:ef:a1:4e:7e:0c:8d:bb:ed:22:17:
5f:dd:c3:cd:f9:07:a7:8c:3c:a9:2c:ee:ad:6d:7b:
d4:de:88:59:49:63:6b:35:99:ba:f1:5a:94:11:90:
b1:35:f2:92:e5:65:f6:d5:5f:0e:82:b5:bb:8b:41:
76:25:7e:e8:40:5a:38:ae:e2:4d:5b:83:ad:15:e9:
1e:ac:e2:bc:cf:49:4d:91:ac:67:9f:97:a9:de:61:
58:28:96:38:3c:a5:da:32:f4:8a:38:e8:8c:dd:7c:
e0:70:ca:23:cd:04:78:29:58:90:55:96:87:2b:ca:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:B5:E8:01:01:AF:42:36:29:AD:C6:6B:6E:C6:9C:83:A8:BA:7B
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/7oW16AEBr0I2Ka3Ga27GnIOouns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.108.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d5:e0:7f:9a:f4:48:07:c4:f8:ad:e2:86:35:53:25:08:2c:
34:f4:10:ff:12:eb:40:ef:20:96:88:1d:a7:1e:83:d9:db:6a:
eb:02:9c:85:65:42:c4:6d:f0:f6:b4:c9:00:85:c5:39:ec:79:
a2:0c:88:2b:a1:e4:78:ec:29:13:0f:08:ac:e0:ea:53:ff:a6:
0e:cf:24:89:ab:7e:ee:87:72:e0:fa:4f:89:70:32:5e:9e:da:
d3:8d:49:eb:32:98:ce:d2:f9:9e:ab:25:e6:07:69:32:1d:60:
e6:82:d2:63:e5:76:69:44:9a:48:9c:8e:38:e1:69:d1:96:d5:
e6:70:32:5b:b1:14:8f:f5:14:97:c0:11:a2:31:7d:72:6f:4f:
4a:7a:bc:61:c0:09:8f:2a:95:a7:43:65:d1:3c:b8:fb:fe:3b:
c7:ce:34:f4:37:0d:42:f9:e2:b1:86:f6:0c:75:dd:8d:ba:ff:
1c:09:f7:55:86:01:6a:ef:f2:10:17:d0:f3:65:a0:24:f6:49:
d5:1f:98:2d:6d:61:26:d1:42:de:73:7d:21:d1:54:d7:79:e8:
a1:73:30:97:13:fa:01:9f:7e:dc:3e:d5:01:91:82:e1:36:a2:
31:26:f2:70:5b:ca:dd:06:6a:f7:21:f7:67:da:e7:a4:0f:9c:
0b:d5:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:28:58 2024 by rpki-client on console-fra.rpki-client.org