Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/jB3cCRzlw8UKSXwtly7der_E4ws.roa
File: jB3cCRzlw8UKSXwtly7der_E4ws.roa (raw, json)
Hash identifier: k7zV9KD2ITl3DShdwJHJJ49PLD7ZPchjQTcJquKL8w0=
Subject key identifier: 8C:1D:DC:09:1C:E5:C3:C5:0A:49:7C:2D:97:2E:DD:7A:BF:C4:E3:0B
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 018CC56EA61E2F40B96E16C4AF788ADA8A4C
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/jB3cCRzlw8UKSXwtly7der_E4ws.roa
Signing time: Mon 01 Jan 2024 14:30:12 +0000
ROA not before: Mon 01 Jan 2024 14:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33796
IP address blocks: 194.28.24.0/22 maxlen: 22
194.8.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a6:1e:2f:40:b9:6e:16:c4:af:78:8a:da:8a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: Jan 1 14:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c1ddc091ce5c3c50a497c2d972edd7abfc4e30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:7f:cc:5e:2f:9f:52:92:a3:98:bc:ad:35:
ca:5e:bc:9e:9c:43:fc:c1:9a:9c:ae:e6:98:21:d1:
a8:d9:5a:4c:c4:9c:58:90:da:29:a5:a5:a0:4c:7d:
e2:cf:99:b1:55:11:83:15:34:f1:bd:77:c8:f8:74:
31:bf:c8:30:2e:34:90:42:dc:5b:7b:be:12:4a:2a:
2c:0d:63:5c:b1:49:d0:e3:f7:a9:ea:92:94:1e:9d:
02:89:64:ba:85:de:43:0d:6b:b8:5e:7f:55:a8:67:
2c:59:92:66:56:79:06:93:f0:92:dc:c3:d8:d1:49:
ed:73:e0:bc:93:90:44:e4:7e:23:64:fc:24:f1:41:
9c:5f:31:17:e6:49:ac:2d:f5:7c:9a:ef:7c:ab:e9:
12:70:97:06:32:9f:a3:ec:6b:e4:96:36:16:42:36:
88:5b:b1:6a:72:38:f2:21:8b:fc:bc:8b:54:be:61:
fa:cd:46:22:88:28:63:9f:ca:77:9f:d9:88:c0:c3:
6c:0e:93:c5:b8:b4:c5:6e:f4:7d:54:c5:77:c9:ca:
47:b0:9f:41:bb:81:3c:a5:a6:f4:fc:d9:38:f3:7f:
ab:c2:63:f9:ed:b0:f6:0a:2d:68:65:05:e8:4c:94:
56:50:6a:af:c6:00:18:98:d1:5b:8c:d1:10:13:20:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1D:DC:09:1C:E5:C3:C5:0A:49:7C:2D:97:2E:DD:7A:BF:C4:E3:0B
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/jB3cCRzlw8UKSXwtly7der_E4ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.242.0/23
194.28.24.0/22
Signature Algorithm: sha256WithRSAEncryption
76:0e:f3:e5:3f:3e:ab:c6:6d:53:45:9f:02:e5:9d:4e:89:05:
f6:85:f0:3d:89:a2:90:62:48:a7:ad:ff:57:ec:52:77:81:36:
db:d1:73:11:13:56:57:cb:20:33:d0:e8:e6:38:c5:7d:10:c7:
bb:6b:dc:a7:96:82:e1:b9:57:21:de:f6:d0:42:67:de:53:fa:
0f:9a:06:40:71:33:24:70:99:dc:b5:ac:af:11:9c:7c:e5:83:
c3:e3:91:97:f4:c8:e7:19:86:94:4d:73:dc:d6:ad:5b:3d:6e:
35:e2:17:72:b3:02:19:47:14:aa:4e:1a:c1:79:c1:8d:c5:4c:
96:d2:a5:88:f2:07:67:79:c9:14:a1:67:cc:a5:1f:8f:63:e6:
36:3b:06:c7:f3:d5:9b:3d:6a:dc:61:57:65:ef:f4:14:e2:da:
95:ef:97:99:ba:1b:b6:0a:90:e6:d5:d4:e1:e1:cd:ee:fc:8a:
ae:7e:20:ee:d7:07:c6:e7:b6:83:3d:51:19:5c:8d:48:2f:71:
52:02:2d:cf:a6:47:04:20:e3:90:a1:47:7b:30:eb:51:e3:8f:
92:e4:cb:07:1c:bb:99:40:e1:4e:c9:4a:34:05:3f:80:ff:2e:
9b:1b:58:94:10:24:8c:cd:79:3c:df:a2:28:90:08:bf:95:4a:
91:c3:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:57:47 2024 by rpki-client on console-fra.rpki-client.org