Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/8dIAlJvu019XOBrbHDOvVYQ-XJM.roa
File: 8dIAlJvu019XOBrbHDOvVYQ-XJM.roa (raw, json)
Hash identifier: 5VvAoFpgqit6I+9nqP2a28GU8qNPah3Ap7QkzKGZ/Po=
Subject key identifier: F1:D2:00:94:9B:EE:D3:5F:57:38:1A:DB:1C:33:AF:55:84:3E:5C:93
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 018FF322FE8B4C2365C2864C09EBBE6C4111
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/8dIAlJvu019XOBrbHDOvVYQ-XJM.roa
Signing time: Fri 07 Jun 2024 14:38:27 +0000
ROA not before: Fri 07 Jun 2024 14:38:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41960
IP address blocks: 87.239.96.0/21 maxlen: 24
2a00:c2c1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f3:22:fe:8b:4c:23:65:c2:86:4c:09:eb:be:6c:41:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Jun 7 14:38:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1d200949beed35f57381adb1c33af55843e5c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:c0:3b:29:65:e2:c6:1e:a6:0f:72:c2:4d:
b0:53:98:02:8e:35:4b:62:a6:a2:5b:a4:f1:a7:33:
72:32:a9:c0:ae:d4:e9:75:67:b9:5a:65:c8:51:9b:
fc:a7:61:c4:ef:cb:ac:10:49:29:fd:60:5b:76:62:
9a:95:ca:43:59:dd:88:27:af:7e:22:03:85:a3:43:
68:01:2a:b9:5f:06:b1:9f:55:67:b6:15:1d:85:df:
4b:42:00:ee:4e:6e:de:10:08:54:3c:1f:67:b8:26:
2d:69:8a:d5:c0:0f:d8:99:bc:46:80:3e:f3:dd:f1:
22:0c:5e:69:7c:7c:cf:80:4c:b2:64:8d:f9:85:65:
f2:02:05:df:be:48:31:ef:8d:7f:7b:33:28:4d:49:
4a:ab:39:87:02:3f:73:c7:30:b5:3c:77:95:2b:e8:
74:dc:54:0f:35:02:a3:00:ba:b1:a0:05:70:5d:d1:
5c:cd:54:e6:54:1d:67:29:f9:24:d2:92:e1:cc:aa:
9c:d7:fb:f1:e8:61:b4:24:58:97:14:b3:77:bc:e0:
e0:df:ac:c2:bf:22:fa:04:2b:95:b6:ec:8d:b0:c3:
fc:eb:b7:54:cc:68:85:bc:db:4c:61:3d:7c:eb:42:
15:11:ac:30:c0:5e:8f:2b:a1:c2:1b:d0:6e:57:7d:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D2:00:94:9B:EE:D3:5F:57:38:1A:DB:1C:33:AF:55:84:3E:5C:93
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/8dIAlJvu019XOBrbHDOvVYQ-XJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.96.0/21
IPv6:
2a00:c2c1::/32
Signature Algorithm: sha256WithRSAEncryption
90:bb:45:ab:a3:2a:c5:1d:98:12:12:ff:9d:87:3f:cf:19:a3:
81:c0:f5:8c:4f:95:78:34:81:72:cd:67:44:90:5c:a1:17:df:
da:50:15:6f:8c:36:10:de:9d:34:44:29:8b:db:d1:08:fe:17:
95:97:e9:c1:16:d5:c5:a9:49:98:29:e4:33:f5:8e:d6:28:bb:
62:f5:6a:81:57:5a:0a:fc:dc:67:e9:1c:8c:3c:9b:c3:48:19:
d8:43:91:f7:34:97:11:74:49:94:2e:b9:cf:3d:03:1a:1d:ed:
da:b7:de:84:ed:24:da:df:13:fc:4d:4e:9a:55:37:9e:e8:16:
17:cb:40:de:8c:5a:b8:78:c8:74:97:2e:6f:51:ba:46:c8:e9:
80:9f:48:08:5d:2e:f9:fa:7f:de:2c:e5:5a:58:ed:f6:aa:ad:
a9:fd:ba:e9:9c:40:40:12:ed:8f:db:a4:8d:0e:1a:0b:e8:87:
de:0b:c9:58:6a:c0:43:11:51:62:82:88:28:46:09:ca:49:05:
6a:a3:7b:dd:76:17:ee:4e:f8:ea:93:92:fe:6c:57:2b:cd:58:
3e:76:cf:57:b8:fd:7c:94:68:4c:dd:89:26:72:3d:af:d6:e4:
8c:4d:8a:7d:db:f1:fd:0a:15:3e:9c:49:6f:5a:77:eb:f3:09:
a3:f3:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:01:59 2024 by rpki-client on console-fra.rpki-client.org