Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/9xE9nFPlj70J1OkAYkPQYHMcKz4.roa
File: 9xE9nFPlj70J1OkAYkPQYHMcKz4.roa (raw, json)
Hash identifier: KbjCfY8tRKt9xgl6vTqDY8eEBJZsNH3uXTMfSSDkpxM=
Subject key identifier: F7:11:3D:9C:53:E5:8F:BD:09:D4:E9:00:62:43:D0:60:73:1C:2B:3E
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 018F0FAF2A1FA27DADD98C0CE9FD1C19BD2E
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/9xE9nFPlj70J1OkAYkPQYHMcKz4.roa
Signing time: Wed 24 Apr 2024 10:38:08 +0000
ROA not before: Wed 24 Apr 2024 10:38:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 194.59.6.0/24 maxlen: 24
194.59.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:af:2a:1f:a2:7d:ad:d9:8c:0c:e9:fd:1c:19:bd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Apr 24 10:38:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7113d9c53e58fbd09d4e9006243d060731c2b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:00:35:a2:0a:8a:ff:22:13:9e:21:f8:b5:
56:40:dd:c3:82:05:44:9a:9f:97:1a:bc:e9:59:18:
25:57:8c:ff:46:a0:29:1d:46:1b:9f:25:8d:c5:cd:
7a:b5:0e:12:c5:b0:00:b3:09:85:28:ac:de:42:8c:
3f:3d:aa:1c:e9:07:5a:c3:69:b1:0b:9a:29:3f:8b:
11:d3:22:a1:11:e3:b4:d7:f3:35:1d:32:18:74:9c:
00:61:cc:c0:4c:f1:35:7e:ea:29:f6:29:0b:dd:46:
19:47:f7:38:95:7a:eb:ef:00:a7:cb:b0:b8:b0:5f:
f6:f0:3a:04:52:e2:f3:49:67:e8:56:45:82:fc:93:
16:d0:c6:a7:22:f0:7b:b7:c9:9c:16:4a:c0:ce:08:
79:d4:ca:88:5d:8d:d0:f8:d6:98:50:e1:29:e9:00:
96:c5:b2:ec:c8:c9:f2:49:2f:f9:e0:f8:0d:44:97:
4f:4a:ff:89:ec:7c:77:97:2b:8f:0e:10:e6:d6:9e:
d1:ad:58:eb:5a:ff:a3:b8:82:f8:f0:60:39:c6:c4:
28:8b:70:f4:37:54:4f:5a:4e:88:e6:66:1d:30:55:
c5:f9:69:5a:91:c3:d5:e8:0d:97:30:c6:da:49:80:
36:86:16:20:02:b2:e1:dd:9a:d9:e0:ef:33:77:fc:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:11:3D:9C:53:E5:8F:BD:09:D4:E9:00:62:43:D0:60:73:1C:2B:3E
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/9xE9nFPlj70J1OkAYkPQYHMcKz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/24
194.59.8.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7c:15:5b:4e:cf:b5:3b:76:9b:46:04:4a:a3:fb:da:da:3b:
1a:ae:d0:54:08:f9:32:b5:a3:40:66:24:4a:70:c2:82:24:fa:
cb:ae:73:fa:88:0f:08:c3:ed:28:29:88:3c:00:b2:2b:fa:68:
f2:80:23:8f:52:58:b4:44:76:51:92:fd:7e:be:f4:45:e4:38:
33:08:30:d6:f2:77:4a:99:c4:20:8f:05:39:f9:4b:17:b0:f0:
89:dc:6e:69:c0:be:b9:d4:02:61:54:1c:69:47:37:ee:e8:11:
ef:67:af:f5:c4:4f:6a:21:cb:a0:26:a8:25:98:23:e3:23:fd:
33:d7:31:cb:9c:0f:3d:8f:19:23:e9:a1:ae:c8:67:01:84:48:
5e:4b:01:d4:5f:c8:2e:51:ae:8e:49:30:e6:6e:d7:66:bf:50:
97:cd:e8:42:fb:8f:99:f8:1c:95:ba:f9:4e:26:1b:48:06:27:
25:d7:3c:29:0e:01:86:a3:af:fb:06:03:0d:40:de:eb:94:fc:
0d:e3:55:09:ca:3b:b2:d5:e5:be:5c:77:11:b5:34:56:8b:f5:
f5:ca:6b:48:89:3a:9d:d7:cb:3d:19:22:86:7d:fd:f6:55:c8:
56:20:fc:d6:9d:29:98:27:54:bc:0a:f9:46:db:f2:96:99:7d:
58:e5:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:51:03 2024 by rpki-client on console-fra.rpki-client.org