Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/10p9UlG-E6p0Dc93dh6BD2eZsxw.roa
File: 10p9UlG-E6p0Dc93dh6BD2eZsxw.roa (raw, json)
Hash identifier: mnKv4ciVPWgaWBI57jr3xmgD7S5+qrmHjIBHWRfS+OE=
Subject key identifier: D7:4A:7D:52:51:BE:13:AA:74:0D:CF:77:76:1E:81:0F:67:99:B3:1C
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 018CC86F2BFFFEB234848325370A338AE13D
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/10p9UlG-E6p0Dc93dh6BD2eZsxw.roa
Signing time: Tue 02 Jan 2024 04:29:38 +0000
ROA not before: Tue 02 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208727
IP address blocks: 194.48.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2b:ff:fe:b2:34:84:83:25:37:0a:33:8a:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d74a7d5251be13aa740dcf77761e810f6799b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:a2:df:07:cf:6a:47:42:8e:4c:68:60:d4:
3f:f8:7e:3b:19:a2:7d:20:5d:04:49:2e:08:be:fc:
91:3f:e1:e7:77:f6:44:b8:34:ca:83:b3:e9:62:80:
b0:84:58:0a:bc:fa:82:03:94:f9:13:45:e3:48:d0:
18:f0:3c:7b:74:ec:dc:04:de:ab:36:f2:03:fb:b8:
25:dc:c5:31:91:95:89:1e:a8:7f:09:5d:0d:44:af:
16:9a:6d:84:0c:ea:02:f6:80:27:30:98:1d:db:18:
e4:a2:32:0c:1e:59:79:ad:8d:d7:cb:50:11:d6:51:
30:83:47:70:79:c4:4b:24:87:42:80:a7:f4:26:e7:
c6:50:dd:d2:78:c9:3b:63:33:d0:92:86:d2:0c:7e:
6e:80:78:f1:de:d8:96:ab:cd:c5:ff:af:e6:d7:4d:
5f:80:80:6b:88:37:03:8b:00:36:5a:13:cc:b1:55:
3e:20:43:36:76:67:dc:be:04:57:b6:09:83:0b:94:
15:0d:73:32:56:8a:2a:05:f0:9b:ea:77:22:ef:52:
f2:f2:98:08:65:e3:05:c5:0e:35:a1:3d:8b:98:8a:
09:5d:72:28:96:96:a5:33:88:e6:14:07:9d:29:33:
da:0b:c9:0c:22:f5:7b:fa:81:15:d0:db:36:7b:51:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4A:7D:52:51:BE:13:AA:74:0D:CF:77:76:1E:81:0F:67:99:B3:1C
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/10p9UlG-E6p0Dc93dh6BD2eZsxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f8:fe:c1:48:0c:41:0e:4d:73:58:a9:2c:f2:26:5e:a3:ee:
08:19:bd:53:de:3a:7e:05:a8:a3:5e:02:e9:51:a5:64:b8:59:
34:02:12:6b:c5:c0:26:3b:80:58:d8:89:24:a4:6a:4d:dc:08:
31:b6:ed:1c:df:bb:39:1d:f0:1c:a9:62:6d:a4:f0:ef:6b:7a:
fa:8d:8c:a5:14:75:f0:99:69:e4:16:d9:2b:91:94:72:6b:36:
79:fc:d0:17:ef:3a:78:43:84:90:6e:3d:a2:da:d1:fb:c0:71:
4c:ec:9c:60:84:d0:31:aa:48:19:e0:fe:38:31:d6:b3:3f:bb:
2a:9f:72:9a:62:5f:fa:05:2f:09:16:1c:c4:ec:0f:a3:7b:0a:
7f:30:5b:98:d4:07:20:db:14:e3:fa:f1:a9:a1:da:e0:c8:cb:
0e:e1:f2:2b:c3:73:de:9e:10:69:d5:74:d6:b4:74:03:91:05:
4b:49:33:0c:4b:06:75:63:70:24:71:52:93:11:88:4b:d0:e7:
f0:b2:80:9f:aa:d9:d9:41:b7:bb:77:f3:66:8c:63:ed:86:34:
82:25:1a:9e:a2:62:48:14:b7:d2:6e:d6:ba:71:fc:62:51:44:
dc:91:d9:15:80:52:6d:cb:8a:5c:1d:f0:9a:c4:08:ec:35:85:
a8:b1:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:00:41 2024 by rpki-client on console-fra.rpki-client.org