Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/1-7BuW4c18A9-shwSRnUQpTejiQ4.roa
File: 1-7BuW4c18A9-shwSRnUQpTejiQ4.roa (raw, json)
Hash identifier: YEQE3pfREqMPVnaqay7yi2xcUejDaFyQkq6Zl/K9vj0=
Subject key identifier: FB:B0:6E:5B:87:35:F0:0F:7E:B2:1C:12:46:75:10:A5:37:A3:89:0E
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 018CC5012B4B98CA6303D86E9910D052AE7D
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/1-7BuW4c18A9-shwSRnUQpTejiQ4.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31183
IP address blocks: 109.235.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2b:4b:98:ca:63:03:d8:6e:99:10:d0:52:ae:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbb06e5b8735f00f7eb21c12467510a537a3890e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:38:7c:d4:90:75:d5:3d:81:3f:e9:b0:a9:
a4:9d:cb:16:62:18:7b:8c:c3:93:01:54:97:a8:fd:
91:b6:3d:f4:77:67:30:9f:7d:8c:b3:b1:a6:06:4d:
bc:bf:b9:19:a0:11:42:c0:c3:ba:26:d4:0e:23:95:
78:63:7a:81:7e:23:fd:f5:6a:9a:83:d3:53:0f:2c:
6c:6d:a3:a6:7d:ec:2a:b2:38:f4:a7:d5:18:30:2b:
69:8d:8f:2a:6e:d3:63:0e:39:e3:4f:76:3e:f5:9e:
27:3b:0d:51:52:14:30:48:f3:4a:64:e8:cd:79:03:
04:5b:8c:1b:bb:d2:e5:37:24:c9:96:77:36:9c:e6:
46:5a:26:73:dd:e8:16:76:b4:b0:9e:48:3f:37:b2:
6e:03:ca:bd:e2:00:79:a0:7c:43:13:13:d2:32:9c:
62:e4:5c:71:e8:8e:c7:13:7a:67:d5:07:b7:13:4e:
74:b7:77:bf:fb:59:cc:9b:12:d6:5c:e1:fa:e0:b5:
fd:b7:9c:6c:d2:8b:2b:48:09:4f:12:ad:43:bc:16:
95:7b:28:8e:fe:f7:a2:62:97:bb:ca:28:8e:b5:82:
6a:ea:2b:76:a5:61:39:58:81:84:52:0d:d0:41:0e:
71:32:1f:be:45:55:48:38:e5:c3:45:13:52:60:c3:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:6E:5B:87:35:F0:0F:7E:B2:1C:12:46:75:10:A5:37:A3:89:0E
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/1-7BuW4c18A9-shwSRnUQpTejiQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:03:27:0a:01:4c:4a:79:76:78:7e:7e:90:cf:7a:10:ab:ab:
38:af:de:60:f5:ad:58:a0:46:83:d4:f1:bc:bd:c0:0c:b6:82:
f8:8b:82:ed:9b:2b:29:7d:7b:7a:c9:41:12:4b:52:33:26:ed:
c5:36:0f:7c:ce:5e:43:68:40:3a:0e:cb:d3:02:5f:df:70:3a:
5d:40:03:91:0a:c7:00:27:73:48:ad:f5:2e:8b:d3:3c:92:a4:
03:68:e8:65:27:24:6a:44:0c:f6:96:39:1f:2d:4d:e0:f2:ec:
a0:94:65:7e:7a:d0:30:0f:27:6a:3c:27:25:e2:c1:ea:5b:32:
e3:d6:fb:70:43:b8:d0:48:45:98:3f:91:75:38:3f:36:47:95:
8f:07:2c:66:6d:71:88:89:48:83:62:b6:b7:cf:48:71:0f:e5:
39:1c:16:f2:9b:02:41:19:76:6c:2a:3f:8c:83:b8:7d:b7:c6:
5f:df:cb:63:31:fd:13:70:73:4a:a6:7e:8d:06:ee:42:67:e3:
f4:ef:f6:e5:d5:16:4b:a8:4c:5a:aa:43:a9:86:73:6b:60:2c:
63:85:4c:db:e7:0c:c8:f7:c8:7a:d7:b3:74:41:4e:6c:b3:73:
4b:c8:43:57:04:02:7d:4d:5a:29:2b:15:86:4f:23:37:b1:61:
d5:34:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:52:18 2024 by rpki-client on console-ams.rpki-client.org