Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/8sVxWEiqcq9oIOX4DYs61TdMaFI.roa
File: 8sVxWEiqcq9oIOX4DYs61TdMaFI.roa (raw, json)
Hash identifier: 3MPQU0xokOmcnS0OZXIs6CDlpoa9bOro3FPp/nLyQJA=
Subject key identifier: F2:C5:71:58:48:AA:72:AF:68:20:E5:F8:0D:8B:3A:D5:37:4C:68:52
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 018CC5DBFF65EF886C511ED7CB51F39F37D1
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/8sVxWEiqcq9oIOX4DYs61TdMaFI.roa
Signing time: Mon 01 Jan 2024 16:29:38 +0000
ROA not before: Mon 01 Jan 2024 16:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 378
IP address blocks: 147.233.128.0/17 maxlen: 17
147.233.0.0/17 maxlen: 17
147.233.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ff:65:ef:88:6c:51:1e:d7:cb:51:f3:9f:37:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Jan 1 16:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c5715848aa72af6820e5f80d8b3ad5374c6852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:68:15:7d:74:e7:74:0d:10:fa:93:cc:c4:
85:0d:c1:19:c3:fd:b2:ec:ba:67:63:87:1d:8a:11:
f2:12:5c:f5:7d:e0:4d:d4:8c:47:df:ef:35:28:d9:
06:10:b5:e4:90:fc:30:33:d8:bb:1b:2e:ab:20:21:
63:e9:41:8d:17:d6:ae:fa:df:20:a8:08:40:cb:00:
7f:09:64:45:e0:45:14:12:44:18:32:5d:d2:d3:1d:
bb:b7:34:88:86:a4:e1:57:6c:2e:17:c0:8d:03:18:
70:47:fc:b6:d9:62:1c:93:79:92:36:4a:7f:75:2a:
c1:8f:d6:34:5d:94:b1:66:c9:e9:81:39:de:a0:24:
89:9f:1a:4d:a2:c3:78:48:c7:6c:0f:3d:06:f2:34:
e4:02:20:15:4e:7a:a3:b5:0e:27:e2:e2:7e:9e:2a:
67:b6:32:ab:7c:83:25:fb:76:34:53:74:ec:17:ce:
16:4b:30:79:c7:16:d0:54:c3:17:96:a4:fa:a8:a4:
5f:50:8f:c2:83:c6:2d:02:62:09:50:28:95:64:81:
c3:8d:8a:d9:31:44:22:a7:22:bd:75:6f:07:03:00:
6d:27:31:f6:be:d4:17:50:37:41:59:66:61:a8:37:
7d:3c:75:f9:d7:16:0d:08:2f:99:de:4f:25:bf:8b:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:71:58:48:AA:72:AF:68:20:E5:F8:0D:8B:3A:D5:37:4C:68:52
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/8sVxWEiqcq9oIOX4DYs61TdMaFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:7a:59:ef:1d:31:1f:b1:90:7e:d0:bc:f7:c5:0b:5f:c9:29:
53:f4:29:0a:17:5d:55:0b:6a:48:72:82:57:14:7c:5b:f9:78:
43:d0:46:55:7f:48:41:a7:9d:4f:3b:d7:83:2d:5a:02:9e:8b:
ea:0e:af:bf:d8:33:06:09:94:6d:17:e7:b8:95:9b:11:09:4c:
83:40:e1:cf:84:ab:d1:55:64:2b:09:e2:4f:8d:be:2e:27:1f:
7c:54:3a:3d:44:0b:da:20:6e:e1:66:ef:1b:87:44:3d:d6:57:
cb:53:04:af:f2:ad:76:ab:71:58:45:9e:23:db:d1:5c:78:ec:
e7:4d:47:1b:7a:c4:6e:c7:59:ce:fc:56:5f:67:e4:83:e7:68:
f9:b0:f2:c7:3c:79:dd:08:7f:21:6a:55:8a:62:31:48:f3:68:
ce:10:f8:2e:54:3f:0c:27:8a:8e:f2:0a:e4:3f:e7:f8:37:79:
37:54:9d:1c:2b:19:67:cf:19:f3:72:2a:9b:e3:a7:11:e7:3c:
36:b0:ca:d7:bf:d2:af:30:1e:28:3b:18:63:bd:98:78:be:39:
a9:e0:b3:ec:dc:a4:31:ba:08:f3:bd:11:ad:55:3f:ab:e3:5d:
88:44:d8:8f:aa:af:5c:cd:df:d8:2d:7a:74:94:cc:a8:3f:c3:
79:aa:f0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:43:29 2024 by rpki-client on console-ams.rpki-client.org