Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/8zfVEgO20l3xwQxuUXCS_jiNHBo.roa
File: 8zfVEgO20l3xwQxuUXCS_jiNHBo.roa (raw, json)
Hash identifier: Z0PEOogw09uVGbeWfzfA3A7WSn8C/dm1kI0NKvp33O8=
Subject key identifier: F3:37:D5:12:03:B6:D2:5D:F1:C1:0C:6E:51:70:92:FE:38:8D:1C:1A
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 018CC7273F019FA2DCEE9061FF5F571D6EC4
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/8zfVEgO20l3xwQxuUXCS_jiNHBo.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201920
IP address blocks: 194.183.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3f:01:9f:a2:dc:ee:90:61:ff:5f:57:1d:6e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f337d51203b6d25df1c10c6e517092fe388d1c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e9:08:88:d7:5b:01:c0:21:23:5c:42:73:91:
46:f0:ba:33:a3:f0:2e:a1:cd:55:a0:08:c8:52:3a:
4a:4a:55:f4:1b:63:d8:88:23:46:80:7d:25:36:01:
08:a4:96:f8:f3:fc:15:d7:46:28:4f:07:09:df:4e:
f0:bf:86:21:d7:e4:4d:b6:fc:c2:70:65:33:bf:08:
fb:9d:fe:d6:83:cc:eb:3b:65:07:ef:c9:14:28:1c:
f7:0f:fe:cb:51:dc:80:d1:e0:3d:52:77:e1:ba:0f:
04:17:c0:14:9a:ba:81:8b:53:1f:53:7a:b6:2a:5e:
6c:8c:80:98:01:10:46:2e:7e:19:14:e3:60:98:55:
e8:44:2f:0e:54:58:f1:e2:49:ef:b7:bc:19:38:13:
cf:7d:2b:68:dc:7c:d0:ee:7a:64:f5:fa:f7:89:d2:
a9:7d:8e:92:96:f4:89:b9:79:e7:14:05:d7:ff:a8:
c4:09:91:e2:49:88:16:25:20:b8:6f:59:bb:b9:03:
7d:8c:81:66:39:79:94:ad:74:06:3f:8f:9b:81:a5:
15:13:91:48:ff:59:c6:02:00:ab:d5:47:b4:42:0a:
34:54:be:31:8d:45:8d:bd:3e:36:26:8d:a7:13:33:
32:f4:0d:07:dc:e4:c7:00:79:6e:e4:8e:93:5a:eb:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:37:D5:12:03:B6:D2:5D:F1:C1:0C:6E:51:70:92:FE:38:8D:1C:1A
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/8zfVEgO20l3xwQxuUXCS_jiNHBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.186.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:42:e9:72:a4:33:9c:01:bb:b1:ed:6b:6a:3a:f5:f9:19:e4:
b1:e3:79:bf:e3:20:16:33:a1:55:89:d6:b8:e3:3b:52:55:20:
3e:6e:23:39:49:83:b2:aa:58:bb:4f:4f:05:f3:c0:d1:50:1e:
69:32:3f:a7:1d:c9:29:d2:de:9c:18:fc:14:1b:10:c3:3e:7e:
0f:f9:b2:33:2a:ef:a6:c3:4a:12:bf:38:69:e2:65:e4:fd:43:
f6:b4:4e:73:e3:e9:d4:e8:a0:af:21:52:3e:f6:46:66:47:14:
ad:a0:39:7c:22:b3:18:c7:32:e2:8b:62:d9:93:f9:e4:6f:28:
48:58:f4:4a:bb:70:86:46:68:0c:ab:8b:11:2d:78:08:07:3d:
8a:9c:d9:72:9b:25:ac:72:97:28:2a:ec:4e:c3:c4:48:3c:8d:
c4:06:06:98:6c:97:e6:bf:0f:21:ef:31:52:24:f0:8c:87:0e:
b8:4e:d9:90:70:c3:02:e7:cd:b4:5f:b1:4d:71:78:c1:2d:74:
c3:be:f8:8a:99:2c:e9:23:87:d5:79:93:91:1e:4d:b6:78:06:
1d:83:dc:1f:ad:a9:00:84:e4:f7:5d:17:0d:97:5a:42:86:d4:
0c:28:ca:85:95:0f:e7:fd:f2:90:55:7e:1b:82:74:c9:53:27:
84:7a:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:28:18 2024 by rpki-client on console-ams.rpki-client.org