Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/8L4tp0NTfqVDTLNFo2CfgDqDWEI.roa
File: 8L4tp0NTfqVDTLNFo2CfgDqDWEI.roa (raw, json)
Hash identifier: 9MIjBSeNBdQPovW61w+NVmwgQ0hZPNQtT4pUMO14OpI=
Subject key identifier: F0:BE:2D:A7:43:53:7E:A5:43:4C:B3:45:A3:60:9F:80:3A:83:58:42
Certificate issuer: /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial: 018CC94E45FDDC8E681011DAC3E4A5609BC9
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/8L4tp0NTfqVDTLNFo2CfgDqDWEI.roa
Signing time: Tue 02 Jan 2024 08:33:19 +0000
ROA not before: Tue 02 Jan 2024 08:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 786
IP address blocks: 157.190.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:45:fd:dc:8e:68:10:11:da:c3:e4:a5:60:9b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Validity
Not Before: Jan 2 08:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0be2da743537ea5434cb345a3609f803a835842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:42:2d:27:3a:d8:b2:8c:a5:2c:30:3b:4c:
28:03:f0:f4:5e:4c:9a:a5:74:90:04:0a:74:a7:bc:
e5:26:27:11:ea:32:8e:01:15:ee:a7:58:0e:1b:31:
1c:0d:8f:19:2a:e9:65:60:a9:bf:6e:1d:4f:46:33:
e7:b1:0a:56:55:c7:76:08:e2:3f:8f:5d:29:29:37:
49:e3:01:4d:bc:04:f0:dc:a0:a6:7b:0d:57:2d:5e:
83:ee:97:27:ee:66:20:40:14:13:bd:c9:73:52:94:
2c:07:c0:15:de:b0:0b:f4:22:c3:c2:86:8f:1b:ac:
b6:ab:4e:c3:28:66:7e:1c:cd:63:83:70:e2:6c:23:
19:6a:90:6c:29:d3:cd:f7:28:6b:ad:19:bf:fb:c7:
10:86:76:18:2a:44:8d:51:6d:f1:9a:7c:0f:0b:8d:
76:6c:67:66:43:8f:17:47:ca:77:bf:25:12:25:95:
b3:24:44:1e:08:18:c4:ab:f4:72:5d:a1:91:f1:05:
40:a5:ef:1f:2f:eb:7a:9a:d4:1e:fd:13:83:6e:54:
68:26:a9:4d:8f:7e:e3:c5:64:20:a9:07:a1:cf:c3:
12:53:13:a3:04:73:4f:01:a8:56:16:22:9d:07:ce:
cd:21:91:7e:70:ad:69:6a:f3:8a:e0:21:4c:b0:63:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BE:2D:A7:43:53:7E:A5:43:4C:B3:45:A3:60:9F:80:3A:83:58:42
X509v3 Authority Key Identifier:
keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/8L4tp0NTfqVDTLNFo2CfgDqDWEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:e9:b3:d2:06:30:0f:b9:2a:03:3d:17:54:72:d2:29:db:e9:
41:2e:2b:53:a8:ca:31:c0:34:a2:b5:87:aa:e4:38:37:55:9a:
97:d0:67:d5:e2:17:de:9e:b4:b8:1e:d1:f9:48:fc:5c:0a:6b:
51:62:f7:30:cb:b9:8c:ec:ae:20:32:8a:3a:f9:fc:de:09:0f:
f8:1a:8a:f3:f1:19:5f:e9:d1:d8:e8:13:e4:cb:3d:da:8a:dc:
0f:49:96:cc:ba:f6:25:26:26:ee:14:39:84:17:83:57:22:3f:
d8:4d:0f:a6:0a:51:1a:b9:53:2c:e4:eb:0b:89:2f:28:77:c1:
80:5f:75:e7:8e:b6:10:a1:13:60:03:58:00:ab:08:8a:4f:2c:
7a:43:7a:e7:a6:b2:43:71:25:27:d5:59:fc:26:1a:d8:ae:40:
57:1f:87:35:0d:c3:bc:1c:bc:df:ac:d5:9b:6a:a5:08:a2:fd:
26:3b:df:0c:0f:34:a1:9c:bb:56:3f:dc:ad:5a:74:67:16:db:
2d:b4:06:43:35:80:1f:d7:86:3b:d4:97:d8:99:b2:f9:ed:9c:
d9:2f:f1:6c:0a:d4:e4:6b:e3:27:ef:55:95:eb:81:70:c7:1f:
c6:4b:c3:c7:8e:2c:9c:c9:e9:53:95:be:c2:89:87:cc:ab:f6:
2c:64:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:57 2024 by rpki-client on console-fra.rpki-client.org