Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/v_8oHEF4nx8p9i6KoidCxszq-CE.roa
File: v_8oHEF4nx8p9i6KoidCxszq-CE.roa (raw, json)
Hash identifier: 2a6in9D3nr02TdmHgW/fZCYGhhLlFGz7EeiyDlyv3MU=
Subject key identifier: BF:FF:28:1C:41:78:9F:1F:29:F6:2E:8A:A2:27:42:C6:CC:EA:F8:21
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 018CC2DAF50F2EC655D3624BF4EE9D6D214B
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/v_8oHEF4nx8p9i6KoidCxszq-CE.roa
Signing time: Mon 01 Jan 2024 02:29:38 +0000
ROA not before: Mon 01 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9091
IP address blocks: 194.8.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f5:0f:2e:c6:55:d3:62:4b:f4:ee:9d:6d:21:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfff281c41789f1f29f62e8aa22742c6cceaf821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:7c:28:ec:27:ad:07:ea:cb:02:2b:25:ce:
89:3b:22:f9:68:8e:59:0a:92:a1:b3:cc:96:ea:30:
34:61:c7:74:cb:db:ea:26:35:05:6a:57:e5:14:11:
6b:77:27:d4:e6:ee:cb:f4:f5:93:5e:5c:09:e0:9d:
ad:35:0d:29:23:c7:0d:b5:ba:73:d9:28:dd:e1:c7:
de:89:fc:fc:11:c1:57:0f:8e:72:85:63:1c:94:13:
f7:3e:a9:3f:55:5f:2b:a6:3c:8e:93:84:c5:e2:b2:
f9:f2:c4:4b:a4:e8:26:5d:44:0e:dd:ab:a7:12:63:
a8:59:b9:ba:05:47:b9:30:27:1f:8f:04:6d:08:26:
c5:f0:77:e4:2d:8e:55:b3:70:1b:63:94:3b:7a:87:
da:72:92:6d:5f:12:7f:61:0f:91:c7:d8:29:ac:c4:
69:a0:60:58:f5:de:36:3f:fa:46:7e:30:d1:55:2f:
9d:9b:db:d9:46:83:44:8d:fb:11:dc:8d:5e:fb:f3:
47:d2:92:ae:92:58:c5:9f:95:1b:ec:95:b0:22:5e:
fd:2d:b8:14:af:ac:59:d5:27:75:0f:97:d8:e7:53:
8b:42:f1:e4:17:f1:a7:e9:c7:c8:53:69:a5:10:be:
7c:33:ae:02:7f:02:68:be:40:02:7c:2a:66:c3:4b:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FF:28:1C:41:78:9F:1F:29:F6:2E:8A:A2:27:42:C6:CC:EA:F8:21
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/v_8oHEF4nx8p9i6KoidCxszq-CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.10.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:ba:b9:b8:f4:61:67:96:db:25:a9:7d:38:d7:eb:bc:53:33:
24:21:14:17:e6:6f:80:c1:1b:45:f3:42:da:1f:1c:a0:4e:15:
6a:73:11:81:e8:05:28:11:b4:76:61:01:86:bd:53:04:7a:6f:
46:f8:f7:9c:08:2f:b6:0d:2d:73:40:bd:a6:0c:d1:45:02:3e:
8d:02:25:99:05:8f:76:3e:1e:cd:da:55:ff:06:77:64:3b:57:
d2:9c:be:13:c1:fe:7e:58:eb:e1:48:da:1d:19:22:b4:3c:aa:
60:90:fc:ed:f5:34:4f:fb:e7:97:8a:0e:3e:e9:42:8f:4a:2d:
d6:71:0e:c4:c5:33:79:7b:96:c0:92:46:d7:72:8e:43:28:f0:
1a:97:03:d4:c0:73:58:d8:ab:aa:fc:d7:43:87:96:d7:b9:0f:
89:22:d8:b4:80:eb:20:8a:d9:0f:f4:85:73:58:58:ff:10:0a:
5d:6a:c4:6a:11:d0:f6:c9:ee:8b:97:1d:9f:27:a2:42:a1:c3:
8b:42:99:0c:37:d2:2f:5a:28:ae:5e:f3:c7:d4:9f:c7:b7:31:
ce:fc:dd:d4:21:7e:53:74:b9:88:18:54:96:2d:a9:62:5d:58:
7c:85:37:56:19:22:2b:84:12:7b:f7:a8:c4:89:3e:bc:b2:c4:
1c:50:ed:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2vUPLsZV02JL9O6dbSFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MDQ3Yjk4N2JlOTc0Mjc4NWJhOGU4YjMzYWMwNzdiZjlj
N2EyMjIwHhcNMjQwMTAxMDIyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmZmMjgxYzQxNzg5ZjFmMjlmNjJlOGFhMjI3NDJjNmNjZWFmODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobF8KOwnrQfqywIrJc6JOyL5aI5Z
CpKhs8yW6jA0Ycd0y9vqJjUFalflFBFrdyfU5u7L9PWTXlwJ4J2tNQ0pI8cNtbpz
2Sjd4cfeifz8EcFXD45yhWMclBP3Pqk/VV8rpjyOk4TF4rL58sRLpOgmXUQO3aun
EmOoWbm6BUe5MCcfjwRtCCbF8HfkLY5Vs3AbY5Q7eofacpJtXxJ/YQ+Rx9gprMRp
oGBY9d42P/pGfjDRVS+dm9vZRoNEjfsR3I1e+/NH0pKukljFn5Ub7JWwIl79LbgU
r6xZ1Sd1D5fY51OLQvHkF/Gn6cfIU2mlEL58M64CfwJovkACfCpmw0usiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL//KBxBeJ8fKfYuiqInQsbM6vghMB8GA1UdIwQY
MBaAFGcEe5h76XQnhbqOizOsB3v5x6IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYt
ZThlZGYyOTI0NWMwLzEvdl84b0hFRjRueDhwOWk2S29pZEN4c3pxLUNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYtZThlZGYyOTI0NWMw
LzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwggKMA0G
CSqGSIb3DQEBCwUAA4IBAQB+urm49GFnltslqX041+u8UzMkIRQX5m+AwRtF80La
HxygThVqcxGB6AUoEbR2YQGGvVMEem9G+PecCC+2DS1zQL2mDNFFAj6NAiWZBY92
Ph7N2lX/BndkO1fSnL4Twf5+WOvhSNodGSK0PKpgkPzt9TRP++eXig4+6UKPSi3W
cQ7ExTN5e5bAkkbXco5DKPAalwPUwHNY2Kuq/NdDh5bXuQ+JIti0gOsgitkP9IVz
WFj/EApdasRqEdD2ye6Llx2fJ6JCocOLQpkMN9IvWiiuXvPH1J/HtzHO/N3UIX5T
dLmIGFSWLaliXVh8hTdWGSIrhBJ796jEiT68ssQcUO0o
-----END CERTIFICATE-----
Generated at Fri Jun 7 21:02:53 2024 by rpki-client on console-fra.rpki-client.org