Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/7arvf6qTXBmTVVsPblBNn4gsfMA.roa
File: 7arvf6qTXBmTVVsPblBNn4gsfMA.roa (raw, json)
Hash identifier: 2HvJ70Dd3kj5uTF6UWiBM1U7pU6DRtqmM8FV7VK8so8=
Subject key identifier: ED:AA:EF:7F:AA:93:5C:19:93:55:5B:0F:6E:50:4D:9F:88:2C:7C:C0
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 018CC94E5522C2D62541C23D3A51173DCF23
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/7arvf6qTXBmTVVsPblBNn4gsfMA.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200322
IP address blocks: 194.48.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:55:22:c2:d6:25:41:c2:3d:3a:51:17:3d:cf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edaaef7faa935c1993555b0f6e504d9f882c7cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:fa:dd:f9:a4:29:b3:fd:97:d6:19:93:e7:
2e:7b:0c:a4:b0:63:36:77:22:cf:74:bf:1a:7f:0c:
36:9f:81:57:12:e2:50:8f:7f:e9:ad:26:33:da:db:
e1:38:1c:75:1c:e4:5c:bb:51:f9:0c:f1:ae:01:45:
29:32:7a:a7:94:6e:e6:42:d1:d0:64:29:c2:a3:72:
44:79:f5:f7:8b:82:d6:ca:57:2a:a3:de:24:50:83:
c0:a8:5d:8f:d7:bd:cc:8b:de:f6:5b:de:fa:16:ea:
7f:86:22:00:15:bd:85:7d:96:85:35:f5:cb:78:65:
bd:d7:17:df:95:d6:e5:e4:5c:5e:a9:c9:07:9b:52:
a5:e8:f5:d0:df:7e:b1:9c:3a:19:06:cb:e1:ca:92:
d7:08:05:9f:2e:a4:f4:83:13:58:0f:96:01:ef:56:
d1:3e:82:31:e2:13:7b:24:37:59:09:af:1c:ce:98:
79:c0:58:5f:98:73:6b:34:e0:a7:7c:3f:69:9d:d8:
27:42:89:1f:47:b3:09:60:5c:25:15:ac:a6:f1:54:
df:13:ed:31:c0:a8:bb:87:63:bd:04:db:b4:81:ce:
3b:f0:7b:48:dc:71:e2:32:93:3f:2b:8c:8b:f5:f5:
06:ed:83:57:f0:06:31:c2:c6:b2:43:50:6b:54:13:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:EF:7F:AA:93:5C:19:93:55:5B:0F:6E:50:4D:9F:88:2C:7C:C0
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/7arvf6qTXBmTVVsPblBNn4gsfMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.0.0/24
Signature Algorithm: sha256WithRSAEncryption
45:24:1e:fe:68:dc:cc:51:42:0a:fe:5c:72:47:72:68:67:9a:
5f:e9:8e:16:78:0d:2d:f8:52:3d:c1:4e:71:b3:c3:64:ba:c6:
5c:ff:00:f2:7b:ae:b7:7e:1d:c6:6e:e5:a7:cf:0d:5f:9b:71:
8b:38:7f:9e:8c:c6:58:b7:88:47:69:1d:f8:b9:cc:60:71:b5:
16:50:2f:a9:e7:a8:71:7e:e3:da:da:e4:18:52:d9:06:f8:59:
cd:c0:7e:b3:fb:13:1f:c5:1f:20:f4:72:06:b5:43:67:53:5d:
e5:87:3d:58:68:68:94:94:e1:81:09:90:3b:5b:1b:11:4d:48:
b8:71:ff:e4:41:f3:a3:a4:0e:b2:c4:0f:7c:d6:1f:47:eb:fd:
21:42:4a:3b:c7:2b:3e:53:1b:87:52:67:b7:d4:08:b8:00:70:
07:ab:3a:b5:5a:8b:8f:56:9a:9f:38:5f:ec:52:c3:1e:d0:7a:
13:ac:35:00:79:73:39:88:74:ee:32:fd:31:e0:cd:48:24:8a:
df:71:28:19:2e:28:29:04:d9:0b:11:58:d1:72:6e:f3:a8:86:
bc:c6:48:a1:25:b8:32:4f:3d:d6:99:6a:9d:c0:aa:3e:31:c8:
0e:ca:76:a7:e0:05:c4:b4:15:6c:89:99:36:9f:08:ae:05:32:
b8:e3:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:48 2024 by rpki-client on console-fra.rpki-client.org