Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/eHj6IoEelU9VHojsIfqV7y1MmUo.roa
File: eHj6IoEelU9VHojsIfqV7y1MmUo.roa (raw, json)
Hash identifier: hO6aoT+kt13mv/9RyOZDyPalvOEYZXJnZ9a5PqIatfY=
Subject key identifier: 78:78:FA:22:81:1E:95:4F:55:1E:88:EC:21:FA:95:EF:2D:4C:99:4A
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 018CC94C0C1EDB6C6E1963D03B2D640CCF4B
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/eHj6IoEelU9VHojsIfqV7y1MmUo.roa
Signing time: Tue 02 Jan 2024 08:30:53 +0000
ROA not before: Tue 02 Jan 2024 08:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 185.186.108.0/24 maxlen: 24
185.186.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:0c:1e:db:6c:6e:19:63:d0:3b:2d:64:0c:cf:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Jan 2 08:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7878fa22811e954f551e88ec21fa95ef2d4c994a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:b6:88:82:b3:69:94:12:90:b9:9b:6c:35:
5b:fc:b6:99:2b:69:db:b3:30:e7:6d:04:5b:df:3c:
66:bc:72:17:4e:73:a2:39:27:1a:d7:35:97:84:9e:
54:59:d2:b6:80:1d:6a:d3:7a:63:09:2c:d5:d0:d0:
41:2b:3c:0e:26:72:9a:33:2c:b6:b6:16:8b:51:75:
fa:a6:5f:04:b5:89:9e:74:58:53:a3:dd:21:cf:18:
4e:7b:19:bc:33:63:4c:6d:3a:63:e8:94:ab:3f:fc:
08:4b:d7:55:97:04:f0:19:da:46:aa:98:bc:83:0e:
c2:dd:8f:8c:39:b7:88:fd:0a:dc:22:24:dc:d9:db:
88:0d:8d:77:f2:1c:3f:ab:e8:e9:09:3a:18:ad:94:
18:2d:d6:28:1f:b5:0a:88:cb:3a:01:d1:ea:7e:15:
a1:f9:9d:9a:39:18:8e:b8:4c:fd:9b:b5:88:e6:b0:
79:f2:90:eb:ed:82:cb:8d:49:a1:df:40:75:d6:31:
bc:bf:9e:e6:5a:80:54:d0:01:10:b1:9b:f0:ff:80:
99:94:ab:fc:dd:e7:d2:7e:3c:6a:06:0e:b9:a7:04:
d3:f4:7b:42:4c:23:c7:57:22:46:5f:64:7f:a0:08:
af:e4:0c:d5:5a:93:f1:2b:f0:79:dc:b9:af:d9:bd:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:FA:22:81:1E:95:4F:55:1E:88:EC:21:FA:95:EF:2D:4C:99:4A
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/eHj6IoEelU9VHojsIfqV7y1MmUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.108.0/23
Signature Algorithm: sha256WithRSAEncryption
94:79:11:71:2d:c5:45:80:3f:28:d3:3e:4b:b3:43:f3:2b:32:
5b:03:6a:11:a0:87:79:8a:30:3b:bd:9c:f5:cb:de:02:17:b6:
60:15:57:c8:89:74:6a:cd:0b:1e:0e:97:8e:91:53:f1:d1:c4:
d0:93:a4:bf:a4:f5:a5:b6:e1:3f:ba:72:b0:b5:3d:73:12:a0:
e7:f9:76:1f:16:f5:8d:f1:07:fe:fe:35:89:99:2b:76:7e:1a:
90:89:7e:60:a2:d9:14:3c:4d:49:e0:a0:38:58:35:1d:a5:a5:
f1:9e:c5:57:f5:bd:53:ba:67:c5:e8:e8:3a:d2:a2:14:b8:9c:
18:d9:23:48:20:90:3c:85:b8:71:f7:e7:c1:1e:88:50:24:e6:
11:4d:2e:9a:bd:f5:af:cd:63:a5:eb:57:64:99:69:57:16:0d:
b9:fb:39:7a:ee:f0:81:a9:d0:2b:64:18:a3:71:36:4e:05:12:
5a:32:c5:26:e2:66:7c:6f:83:02:24:e4:43:71:17:c3:2c:b6:
37:a5:8b:a5:6a:8e:3d:c6:78:5c:bb:d2:3b:20:b9:86:b2:4c:
b4:0c:83:f7:8e:30:87:52:b2:59:3f:83:2e:69:c5:78:d2:07:
75:18:76:d8:2d:42:a4:f5:c2:3e:89:1c:c1:74:33:5b:5a:14:
5b:96:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:28:48 2024 by rpki-client on console-fra.rpki-client.org