Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-Wj-c2fk6a_PHfmE31oYqYACQF4.roa
File: 1-Wj-c2fk6a_PHfmE31oYqYACQF4.roa (raw, json)
Hash identifier: 8ztTCKf892fJnT5NzW6Wg4KwIlc0KfHX28o50eiltW0=
Subject key identifier: F9:68:FE:73:67:E4:E9:AF:CF:1D:F9:84:DF:5A:18:A9:80:02:40:5E
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B67AABF51FB2C6F30786962644AAB2
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-Wj-c2fk6a_PHfmE31oYqYACQF4.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60790
IP address blocks: 194.110.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7a:ab:f5:1f:b2:c6:f3:07:86:96:26:44:aa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f968fe7367e4e9afcf1df984df5a18a98002405e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:b5:35:c6:81:35:9e:f7:bd:f6:3d:be:00:
de:e9:09:fe:af:7b:57:9a:ee:39:2b:a6:f0:60:26:
48:b2:05:48:2f:b5:0c:b9:97:52:9c:73:26:84:f3:
d2:d0:23:ea:79:fc:ff:bf:06:93:33:36:be:69:d8:
15:7d:7a:57:97:e0:b6:03:da:23:de:2e:ea:e2:e4:
ae:93:71:22:43:7d:6c:46:cd:3f:11:08:40:74:5b:
28:7d:7e:b5:11:b4:2e:42:66:04:7e:50:cf:d6:0b:
97:72:5f:3f:ee:62:6e:e6:5e:26:9d:a7:ad:70:26:
4a:26:89:89:65:ce:fb:24:0c:77:a4:c9:a4:dd:25:
5f:d8:a3:bf:08:74:d1:ab:df:3e:ce:5d:80:d3:4f:
03:83:c2:ab:7f:63:c0:b6:63:6d:cd:00:c4:1b:f0:
1a:dd:a4:e0:84:8b:29:f7:ec:31:bf:e7:9b:65:5b:
e1:4a:a9:0b:76:58:3c:9a:ff:ac:1e:0d:1b:aa:ac:
14:4b:4f:c5:97:60:a8:16:75:67:f4:d6:01:b7:fa:
36:e4:71:0c:69:26:54:63:40:57:b6:24:9a:52:c0:
8c:a0:67:28:6f:02:a1:33:94:a3:9e:96:37:49:92:
1a:57:c1:46:eb:e7:1d:8f:ff:c5:ed:db:8d:c2:5c:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:FE:73:67:E4:E9:AF:CF:1D:F9:84:DF:5A:18:A9:80:02:40:5E
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/1-Wj-c2fk6a_PHfmE31oYqYACQF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.172.0/24
Signature Algorithm: sha256WithRSAEncryption
21:95:1d:87:3d:47:35:bb:2a:5b:46:f4:8d:7c:27:59:7a:3c:
ec:9b:70:e4:e9:ee:45:49:8d:68:04:d9:24:cd:45:7c:2e:ae:
d8:59:75:1a:88:45:6f:2f:37:ba:1d:2d:d9:2b:07:8c:9e:4f:
bc:65:34:39:87:b6:cf:45:54:e9:10:17:17:f3:0a:6d:6a:48:
23:08:3d:01:0f:d3:e3:b5:56:58:fb:27:30:e5:89:50:87:5b:
45:5d:77:0b:a0:f5:8e:29:ca:84:cf:38:b7:88:a5:1c:ea:3a:
c6:d9:26:2c:e6:1a:0d:0b:de:12:77:70:a5:67:93:bb:a0:5a:
41:82:d1:75:92:56:98:90:85:35:19:5e:15:7c:42:ec:8f:da:
3e:48:cd:60:38:c9:6e:ad:ff:b0:6f:6f:cc:36:18:71:3e:1e:
ef:1a:93:8f:d7:6c:2a:cf:83:6d:52:e2:cc:44:c2:56:b4:2c:
14:b7:1b:8a:02:60:52:cf:d8:dd:76:5a:25:69:23:9b:96:aa:
69:13:4c:d8:5f:66:9b:13:56:e9:e5:e8:3a:ae:6b:91:3d:3c:
49:86:d8:72:69:66:c2:7f:ce:8f:37:76:f1:c4:81:fe:7c:54:
29:93:51:ab:72:8e:13:54:9c:53:75:53:16:96:9d:a2:17:a9:
de:6d:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:17:01 2024 by rpki-client on console-fra.rpki-client.org