Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/8nDkCeXE6pJRKVSMuQkmSc4ad4I.roa
File: 8nDkCeXE6pJRKVSMuQkmSc4ad4I.roa (raw, json)
Hash identifier: hAGXvF0P6CMjmJjfHu243bpkYh1UNRozGe3CSwKJY9U=
Subject key identifier: F2:70:E4:09:E5:C4:EA:92:51:29:54:8C:B9:09:26:49:CE:1A:77:82
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 018CC4253A453187A56FCD3069CB14A9FD31
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/8nDkCeXE6pJRKVSMuQkmSc4ad4I.roa
Signing time: Mon 01 Jan 2024 08:30:23 +0000
ROA not before: Mon 01 Jan 2024 08:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212748
IP address blocks: 83.242.104.0/24 maxlen: 24
83.242.104.0/23 maxlen: 23
83.242.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:3a:45:31:87:a5:6f:cd:30:69:cb:14:a9:fd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Jan 1 08:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f270e409e5c4ea925129548cb9092649ce1a7782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:42:69:a6:76:06:52:80:02:08:99:68:53:5b:
30:5a:19:e6:7e:10:3d:7c:f6:c5:fa:23:43:2f:41:
da:e5:1f:7b:6f:cd:f8:78:90:f0:9a:a1:e2:cd:41:
2b:6a:02:d2:04:ca:75:cb:e2:d6:84:10:aa:af:00:
a4:2b:8b:ee:4f:b4:86:57:51:d3:3b:af:ea:b2:37:
25:6a:23:a9:d1:84:3f:54:ec:b4:24:5b:09:43:6e:
ec:56:79:fa:5e:66:33:30:a6:f5:27:c2:6e:d4:e7:
f6:4c:d9:54:08:4d:90:b6:f2:65:06:2b:4c:75:ec:
19:89:12:3e:8a:62:11:f2:06:14:9e:99:15:2f:85:
ea:53:ce:34:df:1d:c8:99:03:c9:72:80:69:e9:3f:
65:1f:f8:cf:e0:b3:94:fe:4b:4a:84:f0:75:dd:4e:
db:11:24:36:cb:b2:ca:88:29:dc:85:48:bf:40:54:
b4:1a:b9:82:e0:51:b4:3d:ff:f1:75:b8:b3:08:d6:
48:fd:70:ae:c5:b1:50:84:56:af:5c:79:bd:3b:76:
83:fa:cd:10:c4:df:17:b5:3c:0a:32:28:5b:a4:50:
a4:6c:22:58:9a:2a:62:fe:c4:b3:f4:b1:f9:61:04:
a4:a0:f0:72:26:56:50:63:3e:16:3d:11:d1:91:e3:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:E4:09:E5:C4:EA:92:51:29:54:8C:B9:09:26:49:CE:1A:77:82
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/8nDkCeXE6pJRKVSMuQkmSc4ad4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.104.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:5e:31:bd:31:d6:83:0a:03:99:5c:56:97:11:84:78:9c:6f:
9c:92:b1:9b:ca:41:be:89:f6:c2:8d:eb:28:d1:ed:ae:0a:91:
58:c9:30:d1:44:73:91:e1:44:c4:ed:c0:4e:af:fa:28:a8:0e:
f0:ec:da:fd:ea:0d:3d:0c:c7:8f:c5:14:fe:9d:16:96:81:62:
cd:fc:f7:2b:49:1f:06:9c:c1:f4:cf:aa:b0:9b:3f:3a:ef:fc:
9d:f4:aa:31:1c:6e:26:24:6f:c3:55:b7:65:57:0d:83:62:14:
a6:8d:9f:d1:22:ee:55:b5:0f:65:90:c0:08:46:3b:68:48:39:
13:ce:5e:10:e7:44:17:69:c4:ef:6d:1b:97:74:38:66:9f:33:
fb:b5:3e:a5:bc:24:c1:65:54:ce:4b:ed:36:f1:bd:d2:64:ae:
f9:20:6b:c5:80:a0:7c:f0:9d:ad:97:6f:52:db:1e:aa:e9:8c:
a1:71:f9:f6:66:95:80:53:a5:29:ac:1e:80:41:0d:7b:06:3a:
c7:d6:91:f6:8a:a4:22:1b:ac:3e:16:56:7f:6e:c7:53:72:b4:
3a:ac:e1:e6:63:c2:67:68:76:3a:8a:87:df:0b:8d:7d:a7:70:
60:10:3c:4c:74:c1:69:b7:64:8d:65:c7:70:96:2b:7d:05:6a:
09:36:96:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:09:20 2024 by rpki-client on console-fra.rpki-client.org