Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Avsy0ZrbHLzm2gw37_jsLt-Gjf0.roa
File: Avsy0ZrbHLzm2gw37_jsLt-Gjf0.roa (raw, json)
Hash identifier: UCM8qQWE4PL/EzKxMG6LdpK6xxo7WgvlMG0/LbyIKkw=
Subject key identifier: 02:FB:32:D1:9A:DB:1C:BC:E6:DA:0C:37:EF:F8:EC:2E:DF:86:8D:FD
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018F3F87D23C7D4E2FAF96F2B831018BB5D6
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Avsy0ZrbHLzm2gw37_jsLt-Gjf0.roa
Signing time: Fri 03 May 2024 17:36:56 +0000
ROA not before: Fri 03 May 2024 17:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215124
IP address blocks: 94.154.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3f:87:d2:3c:7d:4e:2f:af:96:f2:b8:31:01:8b:b5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: May 3 17:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02fb32d19adb1cbce6da0c37eff8ec2edf868dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:08:eb:4d:1f:29:92:07:aa:d5:21:0f:61:
76:ef:38:14:b1:de:2a:bf:54:57:c0:6d:85:c4:28:
d9:52:1b:5c:69:90:17:f0:91:c4:ff:18:e2:9d:7d:
fc:48:3b:6f:9b:15:1b:2c:f0:c8:f6:62:af:98:3d:
24:f8:c6:13:32:d1:41:f0:8c:ce:59:0a:55:4d:5b:
34:3b:1c:48:fa:72:e2:89:f6:89:5e:48:a9:d4:b4:
d9:ee:ae:f7:6e:0e:9f:58:dd:ba:42:9e:b3:3a:2c:
00:d9:62:d9:54:a4:dd:04:f4:e1:2a:1b:9b:de:18:
31:5b:96:3f:4f:50:58:73:96:af:97:81:dc:cb:87:
0f:89:5c:97:30:ca:6d:39:65:a9:30:e3:7d:79:f7:
cf:14:11:9b:34:97:a1:3a:f4:b5:f1:b5:0f:5c:50:
71:99:97:0f:35:b4:d7:d3:25:cd:c8:3d:af:25:2b:
59:b1:f0:a7:54:5c:90:39:11:fc:03:72:fd:5c:4c:
e8:fd:23:1e:85:49:7e:64:34:a2:12:6b:03:6c:01:
24:22:ce:1f:a2:16:96:44:aa:e7:02:33:cf:c3:b3:
94:37:5a:4d:50:de:4d:21:2f:a0:fa:d7:ac:06:59:
cf:ab:91:aa:cc:52:b0:eb:9e:1a:3c:3c:ec:db:28:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:32:D1:9A:DB:1C:BC:E6:DA:0C:37:EF:F8:EC:2E:DF:86:8D:FD
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Avsy0ZrbHLzm2gw37_jsLt-Gjf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:46:eb:e5:4f:40:07:32:f3:33:4c:6b:f4:64:13:00:41:8f:
3f:1b:e4:86:0a:e7:89:0c:36:75:9e:8c:41:0b:8b:02:2a:5e:
bc:f8:39:1d:85:4c:16:22:07:ae:ab:e0:4f:c7:97:2f:0a:22:
58:35:6f:bf:3e:da:46:f9:54:16:76:d5:c3:73:50:c3:ea:e8:
d7:ab:3a:4d:89:9f:a1:a3:ff:54:cf:e8:97:6f:78:87:0a:bb:
93:20:cd:a1:a6:39:d2:04:30:14:fb:f0:5b:79:56:da:36:20:
af:9d:3d:12:a4:a3:6e:35:38:63:46:e9:66:83:28:87:29:ff:
0f:b0:41:ed:d9:f2:1e:35:1b:7b:c2:a3:03:a1:86:a0:aa:2c:
bb:e1:15:db:3d:c9:9a:97:8c:8b:8c:e1:10:d5:36:ab:f7:f1:
c9:22:84:70:0a:9c:57:97:c0:54:07:8f:71:4d:e5:3d:9f:17:
fe:3f:38:a3:50:ba:90:b5:0f:8b:99:bc:a5:bf:9f:c2:0c:32:
ab:5f:33:8c:7c:2a:b5:77:3a:3f:3c:7d:d6:ef:30:69:e9:85:
b9:9d:e9:7a:4a:6e:c4:41:33:6f:8d:bd:07:8b:29:62:34:4a:
e6:74:b5:60:fe:49:9b:bb:f3:a0:d5:0c:a0:28:c2:8e:d3:36:
98:a5:87:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:55:31 2024 by rpki-client on console-fra.rpki-client.org