Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/8uc5BnZbEkgBPsYtOOTY_B_H_ZQ.roa
File: 8uc5BnZbEkgBPsYtOOTY_B_H_ZQ.roa (raw, json)
Hash identifier: 8WP9SiXL4thETRCPIE15tU1t9Rg8pKiMt4Fxw8AemQk=
Subject key identifier: F2:E7:39:06:76:5B:12:48:01:3E:C6:2D:38:E4:D8:FC:1F:C7:FD:94
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 018F5DBA8855BCF2846ECEFF63F0CE47CE93
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/8uc5BnZbEkgBPsYtOOTY_B_H_ZQ.roa
Signing time: Thu 09 May 2024 14:20:56 +0000
ROA not before: Thu 09 May 2024 14:20:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201749
IP address blocks: 185.128.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:ba:88:55:bc:f2:84:6e:ce:ff:63:f0:ce:47:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: May 9 14:20:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2e73906765b1248013ec62d38e4d8fc1fc7fd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:44:f2:77:e3:d4:b3:92:2b:97:8b:ad:ed:
58:84:a8:04:95:dc:07:35:ed:02:de:b4:d8:a1:99:
7c:c4:d9:a4:79:9d:5a:1e:8d:a2:2f:da:f2:e2:f0:
c1:2b:9d:ce:f7:d4:fe:8f:c7:28:64:7d:6c:eb:f7:
9e:42:d7:78:8c:75:18:4a:d4:3d:e0:5d:94:d6:cf:
d2:b8:43:38:a7:c5:b7:a9:9b:8d:ab:a3:63:ca:21:
47:0d:72:99:14:31:37:af:dd:f5:41:31:67:8e:78:
04:7d:b8:5e:e3:c0:c7:98:21:ad:59:db:ed:d9:11:
30:1b:7b:86:a4:a0:e8:dd:7a:5d:b8:e6:63:91:2e:
ca:63:a8:53:70:fe:43:c4:2b:8f:ca:59:88:93:f8:
b3:0a:b9:c1:cc:d2:03:cd:d1:99:a6:44:01:b0:12:
c0:ad:ac:36:7f:86:09:fd:58:af:13:89:53:dd:27:
fc:80:b5:60:b5:8b:0c:bd:01:02:83:f1:31:73:ae:
ee:89:ae:7f:d1:c3:e5:96:8e:0f:ac:cb:4e:7b:04:
c9:6e:fc:23:46:da:c6:9e:a0:96:67:5d:47:b7:09:
6b:80:ac:f2:98:bc:f5:fe:67:ac:d6:4e:81:f2:f7:
f6:3f:0d:e7:fb:8f:c5:03:9d:98:6b:05:94:5b:d3:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:39:06:76:5B:12:48:01:3E:C6:2D:38:E4:D8:FC:1F:C7:FD:94
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/8uc5BnZbEkgBPsYtOOTY_B_H_ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.38.0/24
Signature Algorithm: sha256WithRSAEncryption
36:79:f3:af:a8:15:99:e0:7c:d1:6c:22:7d:dc:5d:f0:2d:91:
e5:ef:16:04:cd:16:9f:4b:14:7e:8d:71:ed:cd:84:42:96:6f:
0c:8a:9d:4a:a9:91:64:17:4f:fd:77:a8:74:eb:f8:4e:50:5f:
9b:e6:e9:6e:02:41:ba:f6:23:1f:9e:47:77:25:cc:c0:02:71:
fe:3c:f8:12:e0:e3:67:ed:c8:2d:20:43:86:64:06:88:3e:d7:
0c:53:9c:8d:7c:02:17:a4:0e:77:f6:d9:61:6b:54:23:5a:e8:
95:f2:49:e4:21:55:84:71:88:09:f0:67:31:c4:e3:10:83:02:
e8:d2:56:a4:2f:bd:f2:a6:8d:43:5b:33:ae:66:e9:6a:bf:0e:
8d:57:27:39:41:11:65:12:7f:d6:c4:ba:57:01:3d:8c:6e:0e:
92:e7:ff:bb:ff:64:9d:85:70:f8:4a:63:b2:c7:61:72:c8:a5:
0b:4c:49:5b:4d:4e:fb:17:a5:b6:d3:7e:64:e1:a0:2d:9e:4d:
73:7b:57:7c:b8:bc:34:10:41:b4:67:dd:b7:8e:27:f8:64:80:
db:55:95:24:d1:f2:b2:13:eb:5b:8f:3b:71:27:c6:c2:4e:67:
61:6f:9a:fe:aa:07:0a:78:5a:ca:1f:85:99:59:9f:34:d8:e6:
b9:39:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 11:52:25 2024 by rpki-client on console-fra.rpki-client.org