Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/gHj_xRUxCGNYHIUpSht9PO7y8pU.roa
File: gHj_xRUxCGNYHIUpSht9PO7y8pU.roa (raw, json)
Hash identifier: MksQKi9hK2I2dlsx2UXVFTVEKMd4uGgVHY8H+K4d1lQ=
Subject key identifier: 80:78:FF:C5:15:31:08:63:58:1C:85:29:4A:1B:7D:3C:EE:F2:F2:95
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B67D237F85F64100EBE86E7CDE1905
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/gHj_xRUxCGNYHIUpSht9PO7y8pU.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209996
IP address blocks: 192.144.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7d:23:7f:85:f6:41:00:eb:e8:6e:7c:de:19:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8078ffc515310863581c85294a1b7d3ceef2f295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a8:de:3a:34:c9:4b:04:77:6e:56:e6:f9:f8:
7a:d9:be:40:eb:25:c7:01:f7:40:e5:7f:fd:84:e5:
93:90:d0:32:32:28:88:00:ab:00:ac:b4:1b:1b:12:
bd:4d:72:6f:3e:89:d7:83:a4:f1:18:49:c1:ea:ba:
53:00:75:67:f9:5d:a8:2c:b0:8b:82:b8:62:a4:b0:
e9:a5:71:d9:71:86:ce:be:ac:52:ae:8e:13:d5:d0:
31:3e:ba:a4:6b:32:d2:c8:d5:da:68:22:57:3c:9e:
64:73:21:4b:05:87:21:5c:ff:d4:34:e3:99:fa:71:
00:7a:95:d5:8e:8e:43:05:2f:0b:4e:dd:46:61:fb:
c6:4f:fb:8a:26:82:e6:8a:75:64:aa:f3:7d:9f:36:
42:fc:16:79:82:59:d3:d4:01:99:95:38:e7:bc:aa:
79:af:3f:db:e3:03:9b:99:b9:53:70:4c:67:ca:ab:
1c:6a:b1:43:dc:c4:b5:df:e0:99:84:96:bd:9f:71:
b6:7e:3c:b4:ea:55:2f:c1:81:f0:89:74:84:ac:fc:
bb:02:4c:0c:45:79:0b:c7:0b:9f:0e:4b:30:a3:2e:
54:95:40:58:c0:8b:c5:42:da:a4:fd:f3:d5:7f:06:
d8:c0:dc:7a:e8:ce:21:aa:8d:3f:6e:d6:f6:1c:92:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:78:FF:C5:15:31:08:63:58:1C:85:29:4A:1B:7D:3C:EE:F2:F2:95
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/gHj_xRUxCGNYHIUpSht9PO7y8pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
29:03:79:9d:ee:d7:f0:08:89:0a:e7:4d:b1:14:cd:35:8f:7c:
04:49:dc:36:00:67:2a:fb:e8:89:a8:8b:a2:1d:16:3f:d4:11:
07:ca:9a:8e:dd:1c:17:cb:67:ba:70:d6:d4:8d:49:12:23:56:
da:90:52:e9:36:a2:d3:ec:19:ad:ec:52:8b:1b:94:d2:e4:59:
5e:34:f4:9b:b4:6b:a4:97:51:6b:3c:e8:50:76:f9:19:93:4d:
32:62:38:ab:e2:2c:33:7b:e3:ce:ed:17:d4:c5:8c:b5:0e:cd:
32:3d:bd:54:b1:bc:fc:4b:b9:a1:9d:4d:de:ef:87:58:96:50:
61:7d:88:e5:23:c2:1f:e2:09:ef:60:bd:9f:c2:7f:92:47:77:
b4:68:d0:42:cc:d1:e6:63:17:c9:fc:17:b5:53:e0:d7:59:7a:
7f:06:eb:2c:1b:31:55:5e:9c:ee:c1:42:e5:f0:74:be:8d:83:
fe:69:57:dc:14:ed:8b:56:5b:24:2b:c4:b7:4c:72:55:17:60:
bc:e8:96:6f:68:e3:13:b4:b2:e5:29:4a:7c:4f:fc:dd:89:49:
df:8a:6c:b9:ae:11:b6:3c:58:9d:72:4d:43:5a:d5:74:89:7a:
e1:48:ea:55:a6:3c:f1:10:64:b6:6b:c1:0f:ce:f2:a8:e0:7e:
18:4f:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:24:09 2024 by rpki-client on console-fra.rpki-client.org