Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/7cgIn8OXqWKBWzjmZpHG7RqY9uU.roa
File: 7cgIn8OXqWKBWzjmZpHG7RqY9uU.roa (raw, json)
Hash identifier: /PjGQYL3vQwjgAyl2Ojtk29i+eXnESpE43sdsFd8Z5E=
Subject key identifier: ED:C8:08:9F:C3:97:A9:62:81:5B:38:E6:66:91:C6:ED:1A:98:F6:E5
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 018CC3489A7BDC8E90F192AEA89D1D0D03B5
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/7cgIn8OXqWKBWzjmZpHG7RqY9uU.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41332
IP address blocks: 194.127.234.0/23 maxlen: 24
194.127.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9a:7b:dc:8e:90:f1:92:ae:a8:9d:1d:0d:03:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edc8089fc397a962815b38e66691c6ed1a98f6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:e3:97:6d:ce:71:74:7e:c7:17:c6:9c:f0:
5f:30:67:d2:0e:8e:43:f5:46:bb:8c:ff:91:74:cd:
ac:eb:4b:6d:9f:e3:59:17:6b:37:b2:d8:b2:6b:c8:
69:c1:cc:98:d9:e1:2e:18:b2:4a:46:dc:ca:c8:da:
98:74:69:1a:25:a0:62:57:e8:f9:6d:8d:83:fe:82:
79:38:70:f5:ff:03:13:63:c7:25:63:58:fd:2a:40:
1b:31:9c:7f:21:48:47:89:37:8f:0b:11:3d:e9:c3:
f2:07:3e:1c:31:b6:31:d4:8e:69:b1:fd:ab:f1:3a:
77:0f:75:e6:1b:5d:4e:30:5a:41:5d:aa:f0:cf:96:
78:34:d9:c3:01:b2:37:cc:bb:5a:b2:14:94:34:4f:
15:34:94:4b:86:47:d6:ef:d4:b0:8c:f1:75:ec:33:
04:44:eb:25:7e:b1:99:0e:a5:c2:12:c4:9f:99:10:
96:e1:53:86:bc:59:cc:7b:0a:aa:c8:f9:08:cf:46:
25:3b:8d:b6:1c:91:d1:f0:c9:f7:90:c6:6e:ef:96:
e6:ff:81:2c:f6:c5:e1:ce:91:00:d2:02:55:90:cc:
88:84:6d:0d:62:ad:3c:7d:4a:a4:fd:4e:18:7a:9c:
41:cf:24:fb:ed:8f:0c:07:87:87:45:5d:59:9f:30:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C8:08:9F:C3:97:A9:62:81:5B:38:E6:66:91:C6:ED:1A:98:F6:E5
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/7cgIn8OXqWKBWzjmZpHG7RqY9uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.234.0-194.127.237.255
Signature Algorithm: sha256WithRSAEncryption
3e:bb:26:96:9f:f3:12:1d:92:65:97:6e:b1:2f:0e:bd:f1:d9:
a5:c8:3d:55:6c:66:2e:00:29:7a:45:ac:31:8e:4a:fb:04:6a:
3e:43:8b:0a:92:a3:8d:86:9b:d8:66:ac:a7:40:c3:a9:f0:18:
28:c3:d3:a8:8e:ad:7a:b7:74:bb:2e:f3:2b:ef:cd:e6:4c:5f:
ee:eb:c0:44:c7:2f:09:4d:35:61:c6:dd:98:72:9e:56:57:e9:
37:14:0a:3d:48:c5:a3:7c:fd:54:9b:20:15:61:2e:ab:d7:65:
46:9f:b2:6f:32:be:8d:0d:4e:a6:18:6a:20:06:e3:d1:28:9b:
b5:b7:66:df:e7:a8:2c:79:3f:35:2e:78:df:e8:92:bc:7a:4b:
c0:df:e1:f9:fd:ba:6e:6b:05:74:98:59:f6:6e:04:e2:93:48:
9e:61:a4:4d:a6:4b:30:4a:4b:04:76:5b:a9:7d:ee:21:1c:bb:
81:59:d9:b2:9e:31:8e:d0:21:68:55:25:bd:5a:af:e2:b8:16:
5f:5d:2f:cd:54:0c:ce:09:00:46:9f:ba:ef:70:34:e2:91:44:
41:e0:b5:41:cd:d7:18:40:47:2f:c6:c1:d9:b0:1e:b9:0b:27:
9a:38:1d:a8:0a:1c:d4:cb:e0:cc:78:a6:23:df:af:34:8d:92:
4a:ed:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:59:09 2024 by rpki-client on console-ams.rpki-client.org