Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/Eraq8TDFMzXx8Udr-ffNbblIOHs.roa
File: Eraq8TDFMzXx8Udr-ffNbblIOHs.roa (raw, json)
Hash identifier: bO3DiiKSZ+3rkO9i7Ko0YSulVr2XVEAcws73MyW47sw=
Subject key identifier: 12:B6:AA:F1:30:C5:33:35:F1:F1:47:6B:F9:F7:CD:6D:B9:48:38:7B
Certificate issuer: /CN=b31f64de5618f75c19df513953f6469879e08773
Certificate serial: 0190BB2B48B7429CDEEC7427A4852A06D960
Authority key identifier: B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/Eraq8TDFMzXx8Udr-ffNbblIOHs.roa
Signing time: Tue 16 Jul 2024 10:51:34 +0000
ROA not before: Tue 16 Jul 2024 10:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209486
IP address blocks: 194.36.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:2b:48:b7:42:9c:de:ec:74:27:a4:85:2a:06:d9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f64de5618f75c19df513953f6469879e08773
Validity
Not Before: Jul 16 10:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12b6aaf130c53335f1f1476bf9f7cd6db948387b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:8d:15:8d:b7:a0:46:c3:73:89:96:95:e0:
30:c3:56:8f:9e:45:90:bc:e8:ef:2e:77:79:b1:f9:
7c:5d:c2:63:87:5b:46:60:d4:ce:ed:cf:64:98:03:
ef:3c:df:98:a0:c8:87:ff:35:0f:2c:37:32:5b:15:
23:ec:0e:ad:55:22:02:65:6a:79:68:be:8d:8b:ec:
ee:6f:8d:e0:d2:6e:78:1b:da:f3:27:85:ca:00:3f:
52:62:43:7c:2c:99:3f:5d:43:16:46:1d:c1:96:c7:
7b:65:cf:90:0c:b3:89:78:8d:0b:b1:27:4e:84:62:
dc:ae:79:81:c7:fb:0f:74:f9:5e:f8:6a:81:01:fb:
25:af:f4:4c:d8:26:11:ce:e4:15:4f:56:c8:c5:21:
74:73:a4:5a:02:f2:16:e1:ed:50:97:14:d5:f9:ff:
dd:95:65:63:13:b4:97:7b:be:8a:d3:f0:de:70:ac:
d6:0f:31:d2:8c:c9:87:0a:25:9b:f1:54:e7:87:dc:
b9:e0:7a:4a:d8:02:22:71:74:a3:98:4b:ac:d1:40:
12:10:f8:d2:4d:ac:e8:56:1a:6b:93:97:f5:78:8b:
92:71:55:69:40:53:52:db:7b:85:4f:62:22:8b:9b:
b9:35:07:96:7e:fd:23:bb:6e:56:d3:d3:e6:53:94:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B6:AA:F1:30:C5:33:35:F1:F1:47:6B:F9:F7:CD:6D:B9:48:38:7B
X509v3 Authority Key Identifier:
keyid:B3:1F:64:DE:56:18:F7:5C:19:DF:51:39:53:F6:46:98:79:E0:87:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx9k3lYY91wZ31E5U_ZGmHngh3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/Eraq8TDFMzXx8Udr-ffNbblIOHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3fa007-f344-467e-b712-1cce5b58f8e3/1/sx9k3lYY91wZ31E5U_ZGmHngh3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:14:af:3c:ed:8a:bc:f3:49:a5:cc:ff:fa:93:b9:37:99:8e:
2d:21:9a:ba:55:12:52:90:a0:18:df:87:37:04:d3:e4:98:ac:
dd:30:ee:ba:5b:7c:61:f8:c9:f2:ff:54:74:db:72:10:6b:c6:
2c:d0:90:4d:6c:8e:54:86:de:76:d8:ec:03:75:92:ca:f3:a2:
4b:a4:b1:b8:ff:62:fc:b3:fb:d9:cc:fc:9d:e1:7e:2f:b3:e8:
c4:1c:5d:25:b4:cc:fc:6c:6a:de:4f:31:75:6c:93:b6:40:74:
09:67:5a:52:01:cf:9e:41:17:fa:04:49:e4:5c:e3:d3:d1:55:
6c:3f:59:02:cf:47:db:57:9b:4f:6c:01:4b:39:81:00:4d:f1:
32:d3:69:d3:d9:c8:d7:98:da:ae:f7:25:f0:73:8b:16:55:1a:
3a:61:f1:74:c5:a9:ee:8f:cb:8e:48:4c:b8:c1:71:ef:c2:b0:
f2:21:92:18:88:b4:f8:e5:83:8f:56:01:d6:a1:40:26:b2:41:
31:7f:20:92:9b:38:cd:01:24:43:ca:01:9d:2e:32:94:34:21:
7e:9a:80:2f:68:b9:ca:14:d0:b1:fc:7c:2f:5b:82:ac:4d:e5:
0d:d1:26:63:bf:af:bf:fd:c1:77:2a:93:bd:28:c5:8a:65:4e:
80:1d:d1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:26:07 2024 by rpki-client on console-ams.rpki-client.org