Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/qKHvHs8r9yPwx-f7fmm4-79rOr4.roa
File: qKHvHs8r9yPwx-f7fmm4-79rOr4.roa (raw, json)
Hash identifier: dLJtXyBzPRiENM0XCJ8qr4ug0Sqle26fZPW/dxuZpQ0=
Subject key identifier: A8:A1:EF:1E:CF:2B:F7:23:F0:C7:E7:FB:7E:69:B8:FB:BF:6B:3A:BE
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 018E5066E7FC27C50E1E4EB3A8034C23FF16
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/qKHvHs8r9yPwx-f7fmm4-79rOr4.roa
Signing time: Mon 18 Mar 2024 07:11:45 +0000
ROA not before: Mon 18 Mar 2024 07:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 83.217.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:66:e7:fc:27:c5:0e:1e:4e:b3:a8:03:4c:23:ff:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Mar 18 07:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8a1ef1ecf2bf723f0c7e7fb7e69b8fbbf6b3abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:62:6a:ae:10:55:b0:92:9d:b7:5e:4f:4a:8e:
b5:65:dd:28:5e:a7:35:98:4f:5b:4e:cc:74:0c:4c:
cd:c9:75:08:4e:0b:11:81:81:57:33:b1:e7:da:f4:
a4:58:a6:ca:06:d2:08:76:45:17:e0:8f:52:08:69:
d7:71:9a:d1:4f:0f:9b:d4:90:1b:4a:01:9e:2c:1e:
ce:9d:74:02:be:5d:06:a8:a8:9b:f1:14:70:3f:f4:
7e:fd:46:c3:6a:df:9a:a5:5a:05:f6:ba:45:4c:59:
b2:87:d1:47:51:84:b5:b8:bc:99:75:c1:21:fc:3d:
e1:d8:a0:27:49:38:d6:a8:23:ce:ff:1b:af:ee:f1:
a8:ff:f5:81:d0:03:bc:18:81:d5:f6:0e:3e:b4:5b:
b4:66:9c:04:01:bf:9c:11:d4:14:bc:cc:3a:de:df:
10:e2:98:de:b5:0b:07:00:55:b5:8e:0d:33:30:16:
9a:e5:1f:8d:3d:aa:13:8a:87:a5:80:fb:5e:53:8d:
26:3d:2b:4c:c5:8f:ce:0a:c2:df:13:a0:4e:77:24:
75:d3:67:9f:27:2c:fd:16:1a:47:cc:8e:26:ab:c6:
e4:f8:56:9f:63:28:ef:76:2a:fc:24:db:ff:34:b3:
6f:54:14:9e:11:1f:2e:44:87:f9:9f:75:af:bb:ff:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:EF:1E:CF:2B:F7:23:F0:C7:E7:FB:7E:69:B8:FB:BF:6B:3A:BE
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/qKHvHs8r9yPwx-f7fmm4-79rOr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:aa:94:7a:73:28:a8:9b:43:b8:b7:bf:25:10:d4:6a:03:f9:
78:37:c9:11:2f:2e:ba:23:64:cf:0b:ba:27:04:5f:e1:25:b6:
04:bb:52:40:94:5f:3a:5f:40:a5:fd:d0:c4:88:7b:68:5a:ba:
53:b2:4e:59:96:74:3b:59:01:c0:c4:46:ed:8e:95:2e:44:e8:
e8:d1:16:67:f2:5d:2d:b9:62:09:0b:0d:74:a8:ea:7a:49:55:
bb:1d:18:93:bc:25:65:4b:1f:db:1e:a4:db:93:5e:f7:2a:a9:
88:18:7e:b5:ee:45:f4:c9:fe:8b:bf:f8:fe:23:8c:d5:71:e9:
3c:b7:21:78:0a:65:82:1c:2c:bc:96:6f:e7:4a:91:25:1e:7a:
95:de:03:b5:9d:28:3b:08:6b:03:1c:92:12:91:a1:69:35:c0:
73:84:88:93:5b:b9:55:ec:6f:a9:60:9f:e8:75:21:7c:af:0a:
56:ea:49:59:89:0c:41:8e:42:ed:af:fb:c9:79:6e:3f:0e:95:
ca:42:3c:4d:f2:0d:3f:73:89:e1:66:02:9f:5d:be:01:69:e3:
ea:c2:f7:f7:9c:67:a7:c2:c8:a8:9a:06:67:1f:c2:7d:22:12:
b3:5e:87:44:4a:0b:69:e5:47:36:bc:2a:87:1c:66:c8:e7:fd:
b6:a2:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:02:55 2024 by rpki-client on console-fra.rpki-client.org