Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/cfMJ_5yJemnXs3Ip8c8Zm0z5Y_8.roa
File: cfMJ_5yJemnXs3Ip8c8Zm0z5Y_8.roa (raw, json)
Hash identifier: fdmnn/UeVlHyQNIyUqw6WIfhKPSz2/66lprMJtCoDuk=
Subject key identifier: 71:F3:09:FF:9C:89:7A:69:D7:B3:72:29:F1:CF:19:9B:4C:F9:63:FF
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0190921036A2EE7D108C0011D8F28B9E016B
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/cfMJ_5yJemnXs3Ip8c8Zm0z5Y_8.roa
Signing time: Mon 08 Jul 2024 11:17:34 +0000
ROA not before: Mon 08 Jul 2024 11:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49357
IP address blocks: 94.141.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:10:36:a2:ee:7d:10:8c:00:11:d8:f2:8b:9e:01:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jul 8 11:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71f309ff9c897a69d7b37229f1cf199b4cf963ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:cc:4b:c1:fe:d3:c3:3f:43:8a:d0:d8:96:
b5:c6:55:e5:00:e1:be:fe:07:44:0b:be:c1:f5:1c:
91:5d:9d:af:a2:59:6a:35:ef:15:3f:3d:03:c9:45:
ba:25:44:00:ee:0d:b2:97:54:1f:95:cd:46:18:35:
74:f3:0d:e9:10:41:b6:26:a3:48:ec:22:c2:35:1c:
0e:44:2a:94:17:11:7b:0a:c3:b8:8a:fb:98:08:0c:
6e:74:d5:2f:84:d3:07:0b:88:b3:65:4e:49:28:8d:
5c:6d:3e:4f:10:07:73:0a:a4:4a:fb:9e:40:f2:2f:
05:3f:0a:8f:61:be:3e:90:9d:47:35:23:76:35:2e:
4f:0d:3f:f6:34:32:60:77:46:91:ab:2b:1c:90:5e:
04:8c:5a:3f:5a:69:e1:0e:43:03:05:0a:5e:9b:d8:
83:78:97:a6:1c:62:d3:d8:1b:76:ec:95:ad:ed:34:
5b:25:73:04:09:96:f5:b8:97:a8:d8:27:df:a8:47:
0c:ec:8e:fb:48:fa:34:b0:16:ea:ce:8b:04:dc:c6:
e3:80:7d:bb:8c:b3:1d:6c:d8:33:1f:b2:91:8a:e2:
76:06:b9:3e:5e:92:85:a7:51:63:e6:34:f9:df:a2:
c0:89:c8:10:d5:48:51:36:92:94:85:cf:c1:cd:46:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F3:09:FF:9C:89:7A:69:D7:B3:72:29:F1:CF:19:9B:4C:F9:63:FF
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/cfMJ_5yJemnXs3Ip8c8Zm0z5Y_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.116.0/22
Signature Algorithm: sha256WithRSAEncryption
19:6c:87:f3:c6:d8:6f:24:41:69:10:27:24:c5:e0:b0:fe:ce:
66:40:92:9c:43:7d:17:22:3c:f2:0e:1f:ee:98:c0:01:b1:31:
47:a3:ff:bf:bc:a1:29:12:c3:bc:3c:37:e9:9e:74:e2:45:fd:
72:11:bd:03:f8:ed:e4:8c:58:d1:65:8f:6e:cd:dc:b0:25:78:
c7:4a:7b:86:5b:c4:bb:99:85:b3:3f:31:35:d9:37:8b:7e:be:
a8:25:9d:9e:46:6b:02:77:24:5f:dc:f9:3a:a4:60:53:5c:cd:
33:26:13:1f:50:09:31:09:30:f7:75:4d:fb:b7:9b:58:1c:bb:
d1:b3:dc:96:ea:b2:2f:09:a8:26:29:33:74:fd:04:00:ea:99:
1b:3c:3e:68:59:84:22:d7:6a:d0:74:37:15:68:7f:8b:4b:23:
e8:27:c3:96:fd:b9:97:87:cf:5b:8b:02:f0:67:01:4d:5e:67:
11:5f:bf:16:5e:bf:16:f5:f8:11:17:7c:73:71:5f:5b:ff:76:
7f:3b:64:d2:b2:5d:fa:7e:66:43:6f:6c:64:78:25:7a:fc:4c:
e2:7a:b1:56:7a:d9:a3:5f:a9:89:1e:ff:41:76:82:3b:d3:f4:
20:7c:25:2f:92:f9:c7:86:4a:3f:57:2e:e3:a5:9e:fc:0f:d2:
9b:d0:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:11:45 2024 by rpki-client on console-ams.rpki-client.org