Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3fac8-cc0c-45c4-9b44-b6e2c959edfc/1/h8QCTySOfipUq-JIXlIpZk4m9oQ.roa
File: h8QCTySOfipUq-JIXlIpZk4m9oQ.roa (raw, json)
Hash identifier: /Dt/KmNlXmWiyJIQ92Cb9b//BDzcJvMw/8AXcIuEWiw=
Subject key identifier: 87:C4:02:4F:24:8E:7E:2A:54:AB:E2:48:5E:52:29:66:4E:26:F6:84
Certificate issuer: /CN=34eaf4fe82d4ba7b26f08c3972f3b956ade56d49
Certificate serial: 018CCA99BE6A24786624D09C45A85872717D
Authority key identifier: 34:EA:F4:FE:82:D4:BA:7B:26:F0:8C:39:72:F3:B9:56:AD:E5:6D:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOr0_oLUunsm8Iw5cvO5Vq3lbUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d3fac8-cc0c-45c4-9b44-b6e2c959edfc/1/h8QCTySOfipUq-JIXlIpZk4m9oQ.roa
Signing time: Tue 02 Jan 2024 14:35:22 +0000
ROA not before: Tue 02 Jan 2024 14:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50057
IP address blocks: 193.150.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d3fac8-cc0c-45c4-9b44-b6e2c959edfc/1/NOr0_oLUunsm8Iw5cvO5Vq3lbUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d3fac8-cc0c-45c4-9b44-b6e2c959edfc/1/NOr0_oLUunsm8Iw5cvO5Vq3lbUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOr0_oLUunsm8Iw5cvO5Vq3lbUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:be:6a:24:78:66:24:d0:9c:45:a8:58:72:71:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34eaf4fe82d4ba7b26f08c3972f3b956ade56d49
Validity
Not Before: Jan 2 14:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87c4024f248e7e2a54abe2485e5229664e26f684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6a:e7:26:ed:df:0d:2e:dc:38:03:10:cf:07:
56:aa:7b:cd:ea:e8:0b:d4:6c:c4:32:3a:8d:1e:ac:
ef:40:d8:2a:e9:82:61:cc:05:4d:58:18:75:82:b2:
3b:32:2e:5b:13:5e:00:7c:8e:17:72:a3:7e:06:9c:
95:e7:c4:f3:9c:42:12:5a:84:8a:4a:31:82:3c:76:
fd:16:39:f1:eb:27:da:ac:83:47:42:92:d0:1c:03:
96:30:d4:25:0b:6e:ad:bc:5c:9c:d4:7b:69:62:bc:
cf:ff:ab:ba:c6:c7:4a:36:be:f6:90:38:3d:76:46:
7a:7d:ac:7e:92:c9:9d:56:d4:8e:a8:4c:70:0a:bd:
3e:26:51:60:f9:d0:a6:2f:47:46:d5:53:62:b8:a1:
24:3f:b1:53:6f:9b:28:e1:03:23:0f:69:59:93:3b:
7d:c0:27:3a:9c:b9:52:41:42:ee:f1:e8:65:d5:e7:
c1:58:86:8c:bb:65:28:c7:29:0a:d5:86:d7:da:d1:
f8:ea:58:a4:30:5e:cf:8d:39:1a:d1:c0:f6:3d:a5:
5f:75:08:28:e7:41:ef:c4:f7:51:20:06:e2:27:b4:
d1:1f:05:40:71:e8:32:80:de:b6:17:2d:cf:51:5e:
2c:56:d9:f3:f7:a6:c3:ad:76:a3:d3:4c:09:98:31:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:02:4F:24:8E:7E:2A:54:AB:E2:48:5E:52:29:66:4E:26:F6:84
X509v3 Authority Key Identifier:
keyid:34:EA:F4:FE:82:D4:BA:7B:26:F0:8C:39:72:F3:B9:56:AD:E5:6D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOr0_oLUunsm8Iw5cvO5Vq3lbUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3fac8-cc0c-45c4-9b44-b6e2c959edfc/1/h8QCTySOfipUq-JIXlIpZk4m9oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3fac8-cc0c-45c4-9b44-b6e2c959edfc/1/NOr0_oLUunsm8Iw5cvO5Vq3lbUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.66.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7b:ab:16:e1:89:ed:01:95:73:ae:38:5a:fd:fc:7b:01:9c:
be:86:da:32:b0:3a:7d:d8:0d:93:c9:7f:2f:22:cb:48:3f:84:
51:83:e6:a8:ce:6a:a9:94:ad:3b:0a:03:90:08:07:23:27:27:
01:8f:b3:a4:9c:ef:cd:d6:dd:49:3e:c7:48:8f:55:dd:f6:14:
5c:a9:93:11:cb:77:c2:11:a8:56:80:29:d0:8b:1a:d3:51:af:
78:6f:cc:93:14:f7:c2:35:64:86:7c:f6:95:c5:e2:70:bb:9a:
ea:1d:28:9a:a8:e6:c1:35:a7:00:71:78:16:2f:dd:c6:ab:12:
bf:97:ae:89:fd:db:39:b4:67:52:6b:93:d0:42:10:ed:93:47:
7a:9d:8d:ac:23:b7:00:0f:e0:fc:1b:6c:c4:2f:fc:c6:af:f6:
42:6d:96:43:0e:97:ab:f0:ff:7e:f1:b5:47:93:a1:7b:57:c7:
46:42:64:2f:c2:7e:a1:e3:c4:b8:b2:57:f2:22:e7:b5:9c:2a:
4b:4a:e4:60:50:dc:cd:60:0c:b7:40:51:8c:6c:38:bb:78:c3:
fa:6f:00:7c:51:cf:a5:70:48:f2:f2:67:c4:fe:44:ba:67:58:
a7:6d:9b:f3:da:95:40:2a:1a:a3:f2:8d:db:6c:40:75:b5:19:
18:c2:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:07 2024 by rpki-client on console-fra.rpki-client.org