Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8JEYjeN8GPG6jo_lS2uDj5vE1as.roa
File: 8JEYjeN8GPG6jo_lS2uDj5vE1as.roa (raw, json)
Hash identifier: O5F+VgWJUgntXcaJ5dcWu5wgRb2Yjk2jFiVOvjT/34A=
Subject key identifier: F0:91:18:8D:E3:7C:18:F1:BA:8E:8F:E5:4B:6B:83:8F:9B:C4:D5:AB
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC80130770BD9B154A1603B461C5CDF78
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8JEYjeN8GPG6jo_lS2uDj5vE1as.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199034
IP address blocks: 159.148.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:30:77:0b:d9:b1:54:a1:60:3b:46:1c:5c:df:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f091188de37c18f1ba8e8fe54b6b838f9bc4d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:11:29:01:7f:3a:3b:dd:ad:57:5e:70:cc:
2a:87:76:b8:de:fc:79:74:4a:b4:00:39:f8:b8:06:
f3:5c:f3:e1:50:6d:63:35:1f:d1:6a:e3:52:7a:5a:
38:c6:74:96:9b:2d:3e:66:35:40:a2:6c:4a:0f:2b:
fd:9c:ea:7e:e6:ec:0a:41:39:6d:76:a7:d3:b3:68:
7a:83:45:6e:20:9f:a6:89:e9:05:ab:04:47:5e:d9:
a0:9f:4f:ae:c1:69:e8:d0:1f:8e:83:19:d3:3e:f2:
ce:0f:5c:d2:03:17:27:78:ff:7f:6b:ac:7b:91:03:
ce:6d:5c:1c:1c:09:f5:b3:c0:66:7c:14:e0:54:f7:
00:2b:b0:e1:00:13:7a:6b:73:87:89:d8:46:7c:d2:
63:53:44:7d:bd:e1:47:c9:f4:a9:1d:4b:14:cb:6d:
38:df:ab:5c:ed:84:b0:10:ee:66:49:2e:d4:28:3f:
75:81:ad:fa:ff:7a:f1:bf:4e:76:87:88:8e:e0:88:
75:50:65:de:89:cd:18:e5:31:24:39:35:c3:04:3f:
ef:db:4d:be:17:d3:7b:fe:eb:63:43:29:1c:91:92:
7a:82:36:03:b9:54:2f:71:0e:71:19:c0:e1:78:34:
31:1d:7a:3c:0b:c9:d6:2e:1b:20:98:c8:a6:71:e2:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:91:18:8D:E3:7C:18:F1:BA:8E:8F:E5:4B:6B:83:8F:9B:C4:D5:AB
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/8JEYjeN8GPG6jo_lS2uDj5vE1as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.50.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0e:21:35:0c:42:3a:93:9f:96:6f:ce:00:a4:68:3e:50:d0:
6c:81:ad:e5:73:0a:aa:18:d4:29:68:ab:8c:99:ef:8b:48:a8:
8e:cc:f6:ed:67:75:2c:ea:03:c9:0c:29:4e:91:13:4f:80:4b:
64:11:36:04:18:eb:4a:f7:ed:79:a5:d8:b6:45:c5:1a:f2:93:
a6:da:a4:90:f8:7e:96:e0:e1:2d:bf:04:bc:31:b2:d7:fc:d5:
78:48:de:eb:1d:54:c0:19:c7:b6:6a:78:7d:2f:18:2c:1a:06:
01:f5:b7:37:32:5e:2d:79:9d:7c:d3:da:e7:4c:81:5b:9b:6f:
c3:7a:9c:26:1a:04:89:ac:86:94:35:5c:75:56:87:99:73:61:
f0:f2:51:b4:57:57:e6:89:cb:f8:e3:46:50:09:53:b6:93:98:
ee:55:a3:0c:8a:b9:71:32:8d:b4:b1:05:00:77:bf:10:b3:92:
5f:b9:45:20:13:55:f6:2e:24:b3:cf:d0:3a:3d:5a:cd:13:48:
8e:04:93:dd:9d:18:3c:cd:62:f6:99:08:47:cb:30:57:31:21:
14:af:f1:a6:e1:27:5a:01:9b:71:91:e0:6a:3a:90:27:0d:93:
88:15:16:99:48:90:09:1f:53:8f:63:30:fd:b2:b1:ac:8b:83:
cc:63:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:35:53 2024 by rpki-client on console-fra.rpki-client.org