Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/7UGv7o15mgOwlWOS_538YlNivqw.roa
File: 7UGv7o15mgOwlWOS_538YlNivqw.roa (raw, json)
Hash identifier: LGtT9u2qu7uuwfFLG+c8hMRwzbkpXGqXnrHinjE0Hi0=
Subject key identifier: ED:41:AF:EE:8D:79:9A:03:B0:95:63:92:FF:9D:FC:62:53:62:BE:AC
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 018CC6B88302179B8FE0B71016FADC1BBB8D
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/7UGv7o15mgOwlWOS_538YlNivqw.roa
Signing time: Mon 01 Jan 2024 20:30:30 +0000
ROA not before: Mon 01 Jan 2024 20:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1213
IP address blocks: 134.226.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:83:02:17:9b:8f:e0:b7:10:16:fa:dc:1b:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Jan 1 20:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed41afee8d799a03b0956392ff9dfc625362beac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:37:e1:30:a1:29:4a:63:74:09:8e:71:c0:
8a:88:cc:71:32:26:5d:6a:09:de:ca:13:3e:3e:87:
4f:4f:59:07:90:5f:17:86:3a:9f:c0:ce:a7:63:77:
f7:1d:0f:50:79:37:3a:76:e4:94:6e:ab:46:8e:23:
5e:36:a0:12:1b:b3:91:6d:1a:eb:45:8c:10:2d:84:
11:15:c6:01:92:43:32:4d:f3:62:3b:a3:71:ef:a8:
96:50:b6:36:d4:e5:8d:f2:b5:a8:54:bd:e0:6e:40:
19:de:15:6e:73:89:5f:25:e7:57:f5:b9:b1:2a:e8:
80:1c:4d:82:2c:19:c7:95:5f:ac:6f:7e:f1:c0:82:
c7:fe:e2:73:d5:14:09:3e:0b:5a:8b:02:2a:e4:0c:
51:33:08:98:4b:29:cf:96:06:af:24:0b:17:0e:7a:
a3:ff:1d:25:dd:8c:e2:3d:51:ff:61:99:00:de:18:
29:46:fa:17:ad:53:11:e8:14:18:d7:59:24:44:ba:
73:38:66:ee:71:47:8b:96:d4:a4:51:3f:34:1c:21:
51:5c:2e:fb:a2:d7:d6:68:b9:bb:c3:20:94:ec:97:
c9:ee:a3:36:7b:c4:0a:01:74:dc:7c:27:54:fe:26:
60:b5:0c:5d:2b:83:5e:53:6d:e9:44:b1:c1:bf:5c:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:41:AF:EE:8D:79:9A:03:B0:95:63:92:FF:9D:FC:62:53:62:BE:AC
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/7UGv7o15mgOwlWOS_538YlNivqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.226.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:9f:3c:23:dc:62:13:28:e8:e2:d6:ec:96:45:83:04:3b:92:
b5:5c:39:0d:f8:2d:ef:69:90:ea:3e:5e:a1:dd:8e:35:47:54:
c6:43:8b:d9:18:f8:f0:d5:82:57:1a:1a:33:8b:b4:b5:42:37:
60:65:79:c3:41:8a:ce:98:fd:db:16:a7:9b:e2:1c:05:dc:09:
bb:8a:55:1d:c7:22:d4:61:cf:9e:36:2f:7d:14:e6:13:80:6a:
9e:0f:68:c2:6d:39:71:46:13:3e:dd:17:75:15:91:f1:55:11:
0d:99:2e:c9:08:9d:52:46:49:93:8c:32:18:b7:35:91:5f:dd:
49:97:cc:85:4d:ba:7b:89:80:2d:f3:98:21:76:27:01:4b:f0:
b3:82:c3:0c:63:ef:d3:f5:46:04:96:29:32:ab:7c:5c:d0:4f:
1e:87:67:60:11:29:7b:a9:be:cd:b9:2a:e4:b7:42:da:ee:70:
9c:e6:7e:fa:98:41:35:9d:6c:66:6b:a3:9f:10:16:f7:39:7e:
16:98:69:23:99:88:0d:58:ec:ae:80:c1:e8:20:26:75:27:77:
5d:77:05:92:e5:3a:cf:37:72:74:16:07:51:72:ba:0e:3c:9f:
60:17:02:bf:0c:ff:0a:c9:d9:cf:4a:e7:e2:d0:ee:37:ad:9e:
10:31:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:04:39 2024 by rpki-client on console-fra.rpki-client.org