Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/F9W85IqVPXIkjjl6s78VfkAgyb4.roa
File: F9W85IqVPXIkjjl6s78VfkAgyb4.roa (raw, json)
Hash identifier: GHKeLUjCRhpukUlH6x0a6jAgno2P2au9OiFoe5pE4OY=
Subject key identifier: 17:D5:BC:E4:8A:95:3D:72:24:8E:39:7A:B3:BF:15:7E:40:20:C9:BE
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 018CC3B6E30BE2A29DE991DA020A085AFF61
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/F9W85IqVPXIkjjl6s78VfkAgyb4.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 193.8.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e3:0b:e2:a2:9d:e9:91:da:02:0a:08:5a:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17d5bce48a953d72248e397ab3bf157e4020c9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:c2:4f:91:fa:0e:f5:c9:fe:70:94:ca:19:
88:1b:26:2f:fb:d4:fe:ae:db:81:a7:62:bc:1c:0c:
59:d6:d3:cc:31:49:06:67:77:e6:fb:34:53:25:0e:
55:1b:a4:ce:3d:c3:1a:69:7a:72:25:e2:bd:15:46:
72:58:40:35:81:7d:7d:a6:be:c4:6f:83:63:57:67:
bd:12:7b:1d:09:ea:87:fa:3d:a0:95:95:eb:bf:77:
7c:eb:28:0b:ad:8a:99:26:41:30:70:e5:4d:2f:b4:
fd:8d:c1:9b:c0:3d:c2:19:df:16:8f:55:30:80:ba:
a2:5e:ec:bf:e9:3b:32:3f:e9:d7:30:c2:39:38:dc:
ef:3c:f1:ab:e9:6a:c6:ca:21:95:c9:b9:c5:ed:a0:
e5:30:06:f3:ff:8c:82:21:81:3a:49:77:dd:9f:4d:
a6:60:dc:28:68:bf:be:cc:e2:b4:37:b1:3b:bf:b6:
f7:0a:94:9e:c4:25:bb:21:11:ba:88:67:10:6e:d7:
4a:78:12:0c:fe:21:c3:c0:d1:c2:7a:32:82:eb:df:
64:1e:01:a7:fc:16:3a:a6:f6:81:81:7a:27:d6:d4:
8f:88:37:c0:c5:6f:43:aa:a9:7f:82:15:b8:09:28:
dc:1d:bf:30:0b:6b:83:17:8f:60:e7:96:b4:fb:4e:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:BC:E4:8A:95:3D:72:24:8E:39:7A:B3:BF:15:7E:40:20:C9:BE
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/F9W85IqVPXIkjjl6s78VfkAgyb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3e:4d:71:e7:b8:7b:f3:65:f5:50:7b:e3:13:64:26:6f:62:
43:40:79:0c:ce:76:3e:b3:3b:be:f3:0a:07:8b:4b:39:5b:40:
ec:8c:04:39:6e:85:25:33:17:2a:e5:4a:7e:ef:49:72:7b:32:
f7:b5:49:df:f3:c7:26:7d:88:dd:92:b1:0b:22:dc:e0:d0:91:
0d:c8:9d:5e:f4:21:63:d2:e3:9f:d8:08:5f:d3:e5:74:d5:83:
52:ed:dc:41:c0:7e:af:c1:b4:d5:cc:e6:3c:ef:18:47:0d:fb:
63:72:04:5d:5c:d6:14:f1:b8:a6:ac:60:5f:b1:8a:8e:03:6a:
d4:89:84:8b:20:7a:3c:35:b1:aa:88:86:8e:4b:90:0d:10:3a:
5b:75:d6:90:90:d2:b8:b2:60:fd:be:6d:e0:e4:42:20:22:3b:
05:79:4a:75:26:50:02:8f:2d:f0:d3:26:59:07:fc:19:32:a3:
4d:45:1e:c8:37:32:d9:64:14:08:ed:dd:49:cb:42:22:39:b0:
0e:b0:63:f8:78:8e:62:c3:c0:68:4c:22:1e:47:1b:fc:a3:9b:
06:9c:90:f1:29:8d:27:cc:83:5b:25:30:3d:5a:1a:27:a3:1e:
eb:25:a2:e7:6b:30:9e:c2:6d:0c:a0:33:d0:51:16:03:ec:1c:
3a:6e:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:39:35 2024 by rpki-client on console-fra.rpki-client.org