Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/w8C-rXpB2qI1CMj_VafeE0-sGys.roa
File: w8C-rXpB2qI1CMj_VafeE0-sGys.roa (raw, json)
Hash identifier: d99gpe9ZI4qFh/kZwcGTLaoCdBno5Vvd655JeayVKCQ=
Subject key identifier: C3:C0:BE:AD:7A:41:DA:A2:35:08:C8:FF:55:A7:DE:13:4F:AC:1B:2B
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64ADA3A10D32F40EE535108F6334CE9
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/w8C-rXpB2qI1CMj_VafeE0-sGys.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61424
IP address blocks: 94.131.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:da:3a:10:d3:2f:40:ee:53:51:08:f6:33:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3c0bead7a41daa23508c8ff55a7de134fac1b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:1e:6c:0b:d8:81:99:1f:07:09:b8:7e:42:
f9:e8:fb:4c:f5:65:ad:93:50:c4:48:0c:bd:78:b5:
d2:94:19:63:0c:18:06:58:5e:52:d3:fd:66:09:d5:
19:a3:1e:bd:7e:2d:6a:52:0f:a0:ea:97:6f:fc:9e:
a9:28:56:13:26:15:19:ae:07:60:f2:3e:47:6e:4d:
43:bd:92:ce:0a:9c:a1:82:13:d0:70:2e:8b:9a:2f:
ba:89:f7:c7:3b:f0:dd:8e:a3:f5:96:5e:cc:35:44:
be:b0:d0:6b:66:d7:d5:d5:3b:14:08:c2:ea:bb:0d:
39:15:47:a2:6c:93:bf:0b:9d:3f:03:cf:a4:fb:1c:
c0:8f:af:31:91:ea:28:a2:0e:4b:44:07:01:df:8b:
c0:e0:61:e7:7a:e4:9d:bc:d5:e4:89:e3:1c:13:b9:
24:69:82:51:34:b8:6c:b1:72:1f:e9:ac:7b:2e:dd:
be:25:ed:51:e5:61:ec:5c:a1:12:f0:18:c0:6b:fc:
5d:fb:01:35:b6:6e:01:04:a5:e7:76:cf:57:ae:2a:
d0:f2:7b:32:26:c7:79:b8:ac:3b:af:bf:f0:f9:93:
12:b4:7c:d8:98:5d:76:a6:f8:ad:c2:25:06:74:54:
c4:b5:40:34:1b:1e:20:de:ab:61:2a:d3:74:6e:c4:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C0:BE:AD:7A:41:DA:A2:35:08:C8:FF:55:A7:DE:13:4F:AC:1B:2B
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/w8C-rXpB2qI1CMj_VafeE0-sGys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.103.0/24
Signature Algorithm: sha256WithRSAEncryption
11:da:a0:d0:6e:9a:1b:eb:e2:2e:0f:13:c6:4b:95:f7:94:d5:
12:f6:4e:79:c4:f2:f6:54:2b:55:ad:23:dd:29:bd:c4:99:6b:
b4:31:e1:98:a7:08:24:ed:85:93:da:74:1d:b9:fe:d2:7d:ec:
b7:90:a2:4c:94:7d:a5:6d:8f:65:d3:eb:ef:d6:0e:be:9c:18:
e2:d3:4f:5e:d2:1e:bc:7f:47:bb:eb:e4:26:f4:c2:e1:e3:21:
dc:30:96:09:58:af:98:8f:2e:9a:af:f2:06:e6:ff:de:3e:6b:
e9:77:23:dc:a9:86:24:6c:33:b1:f9:d8:40:73:1e:da:df:4e:
01:71:8a:60:9f:f5:00:9a:2c:06:c6:9d:01:48:73:63:63:f2:
e4:c9:fd:af:99:06:54:b7:2a:1b:33:7f:33:5c:2e:c4:f6:67:
06:76:02:ad:42:db:30:6b:a0:8c:41:a1:d5:3c:03:36:37:89:
aa:2d:ef:ec:7e:8b:95:eb:ae:05:c5:84:b7:f3:50:97:a9:16:
40:1b:cf:36:32:1b:7a:04:e8:ad:68:ae:14:06:db:1d:d9:bc:
13:13:85:db:17:12:c6:84:37:ec:70:c7:38:49:4e:f6:c7:b6:
ad:3a:12:9c:83:52:51:9f:ea:cf:b8:fe:a1:96:68:45:c0:14:
43:a2:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:25 2024 by rpki-client on console-fra.rpki-client.org