Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/8kbwheGVO5kQIDmmld7ASosJ9_M.roa
File: 8kbwheGVO5kQIDmmld7ASosJ9_M.roa (raw, json)
Hash identifier: L1FuSeH5BSGM3MgA4ytYzsPSs0ga/THU6/V7VpOVPHY=
Subject key identifier: F2:46:F0:85:E1:95:3B:99:10:20:39:A6:95:DE:C0:4A:8B:09:F7:F3
Certificate issuer: /CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Certificate serial: 018CC348ED7ED423CD80B6B14BCA8970EFAA
Authority key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/8kbwheGVO5kQIDmmld7ASosJ9_M.roa
Signing time: Mon 01 Jan 2024 04:29:45 +0000
ROA not before: Mon 01 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56984
IP address blocks: 193.36.170.0/24 maxlen: 24
193.36.169.0/24 maxlen: 24
193.36.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ed:7e:d4:23:cd:80:b6:b1:4b:ca:89:70:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f246f085e1953b99102039a695dec04a8b09f7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:60:34:c0:33:82:59:7d:10:39:f5:dd:14:
e6:df:3b:51:78:5c:8a:80:60:3e:3e:5b:f4:85:32:
f5:d5:15:fe:64:d3:14:18:71:ff:ec:5e:4a:86:e9:
1a:30:c9:70:e1:a8:22:38:28:f4:c6:62:27:95:dd:
d4:ac:cf:bb:70:ba:cd:34:da:1c:55:25:f1:bd:cb:
65:ea:19:f3:08:53:7a:90:7a:ec:48:2c:fe:43:2b:
3b:59:31:7b:43:9b:9b:16:cf:7d:04:71:06:7d:ab:
15:89:35:a0:0b:3f:c7:a6:73:fb:ce:29:b4:c3:ac:
70:b0:7f:19:ff:a3:8f:59:34:44:d8:8c:ff:ea:5c:
24:59:bc:de:02:b1:ec:a0:64:56:99:94:70:d9:82:
4c:37:35:70:71:8c:44:42:8a:a2:44:af:40:44:77:
d4:95:4e:df:60:c4:79:25:27:24:73:21:5a:48:9b:
b6:80:c1:05:23:be:5b:de:8d:03:87:f9:8e:4b:66:
86:bd:a3:a5:96:8a:3b:af:ed:f5:e5:d0:dd:25:2e:
8b:72:94:8c:f5:98:e3:08:9d:e1:4f:a5:7a:3a:51:
f2:2f:43:eb:39:38:8f:92:56:3c:b8:6c:0a:00:30:
cf:5c:1e:18:a8:99:1d:25:de:fe:d8:f4:52:9a:38:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:F0:85:E1:95:3B:99:10:20:39:A6:95:DE:C0:4A:8B:09:F7:F3
X509v3 Authority Key Identifier:
keyid:7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/8kbwheGVO5kQIDmmld7ASosJ9_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.168.0-193.36.170.255
Signature Algorithm: sha256WithRSAEncryption
16:30:67:c0:15:84:be:c2:2f:4a:e1:e8:28:45:68:fd:6b:6c:
26:cd:da:eb:32:2e:d0:c0:cc:2b:17:b2:a8:37:f4:01:fa:f9:
58:37:24:0b:46:fd:9f:19:06:3f:b6:77:af:94:b6:71:96:0d:
5e:f3:48:1a:fa:3e:dc:3b:c7:6a:55:0a:01:f1:49:b4:e0:8c:
4f:6a:f5:34:66:06:9b:f8:3b:ef:a9:f5:db:da:66:02:11:d0:
5c:9f:7c:59:85:99:3f:ab:81:95:fa:3d:09:9e:60:78:31:a6:
e0:3a:b8:35:3a:58:11:89:8f:7a:78:28:46:a3:c4:c8:53:40:
bd:1c:b0:2b:87:4c:e2:58:9c:5e:06:a5:ab:8a:d3:de:45:01:
e9:dd:72:f7:b7:4f:0d:e6:43:43:82:fc:c4:fa:c5:81:4c:44:
05:fa:da:c7:3f:81:37:85:51:0a:82:85:85:5d:fc:ac:37:8e:
8a:4f:9e:d0:0d:f4:16:f4:23:ed:9c:e6:a7:13:c1:03:02:aa:
4a:45:24:ce:45:8d:db:49:a7:81:95:00:b1:20:43:49:54:68:
fb:c6:4b:93:ad:9d:ad:ca:5f:e9:5d:31:be:77:ca:77:45:72:
46:2c:d6:ed:6e:0d:eb:ef:81:b1:38:38:85:ea:8c:92:c8:da:
ca:cf:b2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:23 2024 by rpki-client on console-fra.rpki-client.org