Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/7bX5qjOOa-N6lqtlVE2U3BDpZlU.roa
File: 7bX5qjOOa-N6lqtlVE2U3BDpZlU.roa (raw, json)
Hash identifier: 8B/O/8m71cF9aZyXDkkPVIOMqx72K0CuLmX7rQIYG8I=
Subject key identifier: ED:B5:F9:AA:33:8E:6B:E3:7A:96:AB:65:54:4D:94:DC:10:E9:66:55
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 0191DFF4D156D4965A2469F9A8139BF98786
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/7bX5qjOOa-N6lqtlVE2U3BDpZlU.roa
Signing time: Wed 11 Sep 2024 07:20:49 +0000
ROA not before: Wed 11 Sep 2024 07:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41236
IP address blocks: 86.107.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:f4:d1:56:d4:96:5a:24:69:f9:a8:13:9b:f9:87:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Sep 11 07:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb5f9aa338e6be37a96ab65544d94dc10e96655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:19:07:46:88:04:85:ca:7d:b0:f4:41:0d:
90:3f:8d:0e:64:e8:3a:b9:20:30:cd:18:15:24:42:
27:dd:b1:51:a9:e2:f9:01:5d:0c:d3:e7:98:d8:da:
bc:c2:86:3e:8b:3e:92:f1:4d:34:e2:3e:d3:7f:d1:
c1:fc:78:17:4b:7d:eb:66:79:7b:18:29:27:8e:17:
c0:07:41:92:fe:32:34:db:94:43:ce:a2:9f:a8:08:
bb:d6:25:a0:63:c2:7e:a2:b9:35:2f:3b:5d:a3:51:
4a:8d:f3:29:3d:93:ea:a6:b7:60:fe:95:30:4f:8b:
ef:46:96:03:c0:29:7d:9f:14:e6:3e:d3:6e:d8:f6:
9c:4f:8a:f3:af:91:53:b1:7c:3c:2b:f0:e5:eb:d4:
cd:62:b3:6d:9a:01:48:86:86:8c:b9:f7:05:8c:86:
07:18:29:ae:aa:f0:be:85:da:91:40:e3:9f:b1:a1:
1b:8b:54:f4:19:6b:c0:84:68:fc:03:e0:fc:84:15:
45:56:4c:44:01:9a:65:ff:89:ae:dc:41:1a:09:05:
90:33:f2:23:47:8b:9f:97:c1:08:ce:6f:7d:e7:b8:
6a:c3:5e:36:a8:f3:60:0e:93:57:0e:e8:9e:49:42:
21:1b:1d:8c:48:72:5c:11:d5:78:f6:78:b6:7a:1a:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:F9:AA:33:8E:6B:E3:7A:96:AB:65:54:4D:94:DC:10:E9:66:55
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/7bX5qjOOa-N6lqtlVE2U3BDpZlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:99:01:43:b1:36:fd:f2:f7:31:b3:b0:64:74:2f:f4:9b:45:
7d:e2:a5:a8:ce:69:53:11:d1:e5:69:0b:75:49:e4:70:7d:36:
0a:91:4b:db:9b:36:7e:b6:f0:a4:56:a0:db:6b:00:0b:10:16:
ae:79:e7:f5:79:bb:fe:5a:03:39:a3:19:57:d0:f7:66:60:ee:
9f:31:91:a0:44:bb:e5:73:b1:7f:02:49:ee:0c:19:6b:47:c6:
a2:bb:63:72:d7:b7:2f:54:a8:70:3a:a4:49:08:a1:94:25:36:
35:1e:9a:bb:78:62:55:76:cb:29:81:c2:34:58:30:aa:ba:36:
ba:6b:dc:0f:b8:44:29:6f:9f:f5:74:61:6b:a1:83:d1:00:13:
c0:ac:13:c6:33:94:40:c3:6e:25:28:ce:2f:f1:b2:2c:c0:78:
8b:f1:66:4c:0a:88:87:70:4e:c8:43:a7:e3:8f:8f:f1:56:5a:
7f:91:29:80:00:11:99:48:61:47:62:a1:db:68:b9:6f:8a:6e:
f9:9f:7b:84:2e:ba:65:83:02:de:60:9a:7e:cd:32:e5:56:d1:
c9:04:d4:5e:ad:a0:93:95:1f:4a:dc:df:6a:53:4e:3f:a2:9b:
fb:6a:b6:0b:e3:00:6a:b1:d7:08:cd:9f:b7:57:d2:78:31:49:
44:05:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:05:54 2024 by rpki-client on console-fra.rpki-client.org