Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/8xvedBYDlUXlucqkdLovTuXxJW4.roa
File: 8xvedBYDlUXlucqkdLovTuXxJW4.roa (raw, json)
Hash identifier: bLkB7k39S96edHmJ3S+XCZDFlYD2qCJfB5JtTAkdXzc=
Subject key identifier: F3:1B:DE:74:16:03:95:45:E5:B9:CA:A4:74:BA:2F:4E:E5:F1:25:6E
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 01902BB65BD307681E4FDA1306AB0581CFAC
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/8xvedBYDlUXlucqkdLovTuXxJW4.roa
Signing time: Tue 18 Jun 2024 14:18:09 +0000
ROA not before: Tue 18 Jun 2024 14:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 203.56.114.0/23 maxlen: 23
2a14:3e44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:b6:5b:d3:07:68:1e:4f:da:13:06:ab:05:81:cf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Jun 18 14:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f31bde7416039545e5b9caa474ba2f4ee5f1256e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:41:97:1c:b3:88:bb:30:97:80:e7:5f:32:
9e:5a:42:7a:57:1e:2e:59:8f:77:24:35:ca:ad:68:
31:19:0c:47:94:6d:b6:04:ca:f2:3f:1e:6c:eb:c8:
2d:9e:4c:96:52:01:57:5c:6b:89:c6:fa:8f:47:cb:
02:a1:45:06:c6:19:ff:19:6b:13:e2:30:48:d3:17:
b9:d5:88:dd:35:0a:ad:e1:4f:0e:59:c2:12:8c:9b:
c1:ea:37:99:e9:4a:b8:dd:b6:b4:e9:39:03:f7:d1:
6d:03:5a:41:b8:69:5f:69:42:6a:e6:c1:74:09:5a:
ad:76:0c:c9:f7:b0:42:bd:14:80:64:d3:26:e9:d7:
f1:2a:60:a7:dc:6c:5b:51:f6:6b:00:a1:f4:d8:2d:
4c:0a:5c:43:aa:6d:2c:9c:f0:37:d8:a3:f2:eb:da:
39:ef:56:1b:48:0e:25:06:dc:eb:4c:15:d9:0a:17:
bf:87:0c:83:29:80:3f:04:2d:91:e6:b1:05:04:14:
f0:a8:64:9f:f6:57:42:88:9e:ae:1a:6c:a6:8d:a1:
13:85:75:cb:7d:f8:28:9f:b7:4d:a9:60:39:d9:9a:
d1:4f:48:4b:79:41:45:a4:93:da:1e:7f:31:b7:3f:
92:fd:dc:83:e8:b6:89:5f:45:81:87:0c:5a:ce:b4:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1B:DE:74:16:03:95:45:E5:B9:CA:A4:74:BA:2F:4E:E5:F1:25:6E
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/8xvedBYDlUXlucqkdLovTuXxJW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.56.114.0/23
IPv6:
2a14:3e44::/32
Signature Algorithm: sha256WithRSAEncryption
38:2e:ad:ec:7f:bb:ae:5c:b4:68:af:73:96:29:ce:12:49:4a:
7f:a3:b0:ab:5a:ae:01:08:37:8b:97:ad:e9:85:52:79:96:30:
23:3e:83:8f:50:40:54:64:f6:ab:74:f2:0f:ce:ef:22:51:33:
01:25:18:53:72:13:99:f2:be:22:1b:6c:ef:4f:cc:84:08:76:
e7:f0:46:c3:bf:17:60:00:35:26:40:2c:32:a2:b7:64:0d:28:
b3:10:ce:bc:d1:ae:98:52:08:6c:72:9b:fb:04:76:2e:40:09:
46:d1:46:a8:d4:02:d2:bc:fc:0b:d9:8a:63:a7:db:1b:8d:a7:
0c:0a:1c:05:16:26:ac:05:6e:21:fe:32:82:ee:7f:2b:ae:a4:
4a:3b:1b:fe:9d:1b:3f:64:a7:36:2d:6d:e2:bb:e2:8d:89:65:
cd:28:83:8d:aa:d3:62:06:53:79:99:79:f6:70:a6:a1:23:5d:
98:ca:89:93:7a:01:d7:15:1d:2a:7b:9f:96:ed:6f:d2:6d:db:
d2:d3:19:00:5f:9a:3a:6a:4d:25:fe:f7:cc:7e:29:8d:1d:5a:
20:92:bd:f0:2d:2a:52:76:a6:10:56:c0:0c:c3:4d:77:ae:f0:
51:48:cb:4d:73:4d:14:56:10:5c:a5:52:2c:ae:12:2f:e8:d5:
14:a1:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:36:10 2024 by rpki-client on console-fra.rpki-client.org