Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/8VXNoQ0fvQx6WERo1Mnggqmty6Q.roa
File: 8VXNoQ0fvQx6WERo1Mnggqmty6Q.roa (raw, json)
Hash identifier: 9UaTZQ95kG3D/Rmh01t9tmHGeCVBqdtpfvQ3l4KA5CE=
Subject key identifier: F1:55:CD:A1:0D:1F:BD:0C:7A:58:44:68:D4:C9:E0:82:A9:AD:CB:A4
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 0191E2635E628E7107984FD612E663B033D2
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/8VXNoQ0fvQx6WERo1Mnggqmty6Q.roa
Signing time: Wed 11 Sep 2024 18:40:48 +0000
ROA not before: Wed 11 Sep 2024 18:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197999
IP address blocks: 185.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e2:63:5e:62:8e:71:07:98:4f:d6:12:e6:63:b0:33:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Sep 11 18:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f155cda10d1fbd0c7a584468d4c9e082a9adcba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:36:ed:7a:6e:b7:88:b7:52:a4:58:af:7f:
07:0f:d3:7f:7b:d3:6d:16:47:0f:3d:02:72:98:e7:
79:c1:f6:ac:7d:59:07:62:d4:17:90:02:db:2e:d5:
72:dc:2f:f7:df:50:fa:cf:45:95:9e:0a:34:34:a2:
08:dd:df:46:f2:a6:07:49:36:57:73:bf:0f:9c:0c:
3c:63:54:17:59:c4:d5:b5:0f:c2:09:61:f6:21:33:
35:88:d4:7a:9d:25:b1:11:98:a2:48:f1:8b:17:4c:
4a:d0:ea:66:a4:26:eb:57:86:2a:27:18:28:c0:ab:
22:34:e6:01:84:56:b4:ea:d7:d6:0b:74:ee:65:f7:
ae:b3:f1:75:b0:46:f9:cb:a4:12:36:2d:b5:9e:cb:
50:b9:fe:51:2b:c2:84:47:eb:87:04:e0:ca:75:17:
03:33:eb:a7:59:5a:7d:cf:47:65:c7:55:94:2c:eb:
72:c1:52:7a:86:18:c0:87:2e:38:04:a0:db:a6:39:
84:bc:40:c6:28:0e:ac:71:bd:f7:c4:a2:2e:31:e6:
26:98:7a:e4:1f:2e:65:2b:c7:02:b0:a8:27:7f:8d:
f3:c4:3a:9e:1a:22:d5:94:41:4b:fa:44:73:9c:cc:
b8:16:c9:7f:df:a7:2f:f6:99:7a:c7:ac:32:9b:1c:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:CD:A1:0D:1F:BD:0C:7A:58:44:68:D4:C9:E0:82:A9:AD:CB:A4
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/8VXNoQ0fvQx6WERo1Mnggqmty6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.7.0/24
Signature Algorithm: sha256WithRSAEncryption
90:4d:05:15:5b:75:40:41:8c:fb:0b:62:15:4f:e5:5c:73:57:
41:81:27:6a:1e:50:3e:c4:73:93:86:0c:49:ca:8c:f7:9c:a8:
d2:ce:ec:6e:b2:c5:77:b7:f9:15:d5:f4:d1:07:09:18:cf:6f:
0f:41:a2:06:a8:c6:20:9f:5f:dd:ee:7a:8f:79:ae:63:39:1e:
a7:98:ee:e4:96:ec:a5:8b:59:94:e5:dd:17:24:74:01:43:97:
8a:13:e6:b4:14:fd:bb:aa:f5:ac:68:7a:ce:21:b6:5f:61:78:
59:a5:96:b5:fe:ab:e1:48:a7:8f:d4:cc:ad:72:1f:4b:8b:d6:
bf:cb:e9:43:ca:c0:a6:1b:ac:f2:42:6f:5a:9b:3c:1b:06:c3:
66:51:56:55:19:d6:29:36:33:f5:90:88:b3:a1:c6:c2:19:22:
73:8c:96:66:14:ff:4f:f8:fb:53:b0:38:98:9f:31:15:43:2f:
69:91:76:19:6a:20:5f:c6:23:6b:bc:27:cc:dd:55:80:3c:2d:
0b:b8:e9:0d:d7:89:fd:f8:3d:ff:2d:7c:8b:e2:65:0d:6d:18:
19:f3:1a:68:57:e3:f1:9d:64:c7:0c:66:12:05:13:db:f3:af:
65:3d:36:e7:73:a4:57:61:be:d1:20:70:06:eb:e0:fe:a8:ac:
2e:2c:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:58 2024 by rpki-client on console-ams.rpki-client.org