Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/eQ8B4pnnrqWhTtzeAnN4jWlbG3o.roa
File: eQ8B4pnnrqWhTtzeAnN4jWlbG3o.roa (raw, json)
Hash identifier: A5x6syDtyMEuhpTmVp6CacysWSujpJQJdxs8o7PKhx0=
Subject key identifier: 79:0F:01:E2:99:E7:AE:A5:A1:4E:DC:DE:02:73:78:8D:69:5B:1B:7A
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 018CC64B3873CA13B9A6BCB3CA212C15C334
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/eQ8B4pnnrqWhTtzeAnN4jWlbG3o.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6750
IP address blocks: 185.130.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:38:73:ca:13:b9:a6:bc:b3:ca:21:2c:15:c3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=790f01e299e7aea5a14edcde0273788d695b1b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:dd:e7:63:4b:0d:4c:85:44:b4:6e:7a:96:
d7:cb:20:76:85:2f:3e:c1:18:7e:ed:d9:cc:6b:ef:
19:aa:c2:5b:99:01:b1:3b:34:2e:b3:af:28:c3:cd:
db:db:e7:e8:73:e9:1c:d6:9e:39:a5:56:5d:6f:1b:
00:97:ae:10:c0:16:af:34:bc:5b:c7:d6:4a:04:69:
6f:8d:fc:56:a4:9d:7a:90:5b:7f:6b:64:78:41:7d:
16:e9:7b:fa:79:41:ef:9b:19:fb:c3:54:5a:78:c3:
11:b3:aa:19:d0:2c:7a:80:63:18:9f:17:fa:ec:05:
a0:16:bd:40:16:1b:1a:5f:49:24:e3:a3:11:96:d9:
9b:91:51:02:f8:c9:55:c4:53:85:78:f8:63:92:9a:
50:67:38:d5:8f:03:05:6e:ae:98:05:70:63:92:88:
34:a0:f6:66:e8:70:fd:c8:73:f8:e7:b0:aa:7b:63:
57:ba:77:3f:73:b2:54:35:7e:b5:b2:47:8c:66:1c:
29:cc:60:df:e3:80:f8:d2:1b:90:cc:b0:f7:af:75:
e4:0a:47:64:b4:4c:8b:7b:de:50:7e:a0:1b:64:a2:
bf:93:76:55:f0:4a:99:16:71:f4:3d:ea:3d:f9:48:
83:79:bb:82:30:d9:3f:e5:6b:eb:c3:37:6a:6c:b4:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0F:01:E2:99:E7:AE:A5:A1:4E:DC:DE:02:73:78:8D:69:5B:1B:7A
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/eQ8B4pnnrqWhTtzeAnN4jWlbG3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.200.0/22
Signature Algorithm: sha256WithRSAEncryption
16:9b:6c:b3:ac:1c:d8:15:09:63:64:7d:18:83:e4:2f:f1:47:
1f:9d:df:83:21:dd:31:47:18:60:4d:f0:7a:15:fc:79:5d:30:
20:69:b7:9d:1d:80:38:ae:25:fb:3a:ea:14:ed:28:05:69:22:
d4:b8:72:d5:c9:87:61:32:03:75:62:38:2e:57:bb:71:a9:bb:
af:1e:9b:90:71:43:61:2d:1d:4e:b6:2b:6f:a3:45:96:7e:36:
46:95:78:23:3f:cd:70:d0:e9:4b:46:eb:e7:18:50:1d:f2:fb:
89:89:d2:70:bf:37:66:52:91:69:4d:24:37:50:1b:dc:f0:93:
ba:cf:d9:7f:04:10:75:8d:4b:1a:45:89:a2:5d:03:74:b7:76:
f7:79:ae:01:b2:3f:54:83:47:f3:2e:fc:7a:82:0d:3f:d9:c9:
0b:1a:07:b9:e4:88:73:e9:12:40:94:cd:fd:99:c4:c5:81:00:
f1:20:0d:71:a1:df:46:ed:91:99:9b:b0:b3:1e:44:42:d5:af:
3a:a6:bb:99:28:01:33:f6:6c:03:e7:84:e3:5d:de:da:09:c9:
5f:34:82:06:1b:11:a8:08:f0:0d:17:1a:b8:c3:fa:18:0d:55:
f6:10:69:7e:b7:b9:b5:c4:48:4b:5e:fa:c6:71:7e:7a:28:39:
ad:b6:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:58 2024 by rpki-client on console-ams.rpki-client.org