Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/jIFXUTMDYhtY6f-ZD67eqyeprtg.roa
File: jIFXUTMDYhtY6f-ZD67eqyeprtg.roa (raw, json)
Hash identifier: TDmZRVNxqj2g7rCv3yaiExm2Mf/Jox3IT8ZL3WH40ck=
Subject key identifier: 8C:81:57:51:33:03:62:1B:58:E9:FF:99:0F:AE:DE:AB:27:A9:AE:D8
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018CC56E1A76716E5A9785A4DE9359DAC5FE
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/jIFXUTMDYhtY6f-ZD67eqyeprtg.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24655
IP address blocks: 194.30.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1a:76:71:6e:5a:97:85:a4:de:93:59:da:c5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c8157513303621b58e9ff990faedeab27a9aed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:60:0a:c1:c9:e0:ee:fe:68:03:7e:3d:13:
0c:9c:22:74:46:a0:0b:fe:ae:16:e2:4c:60:d5:ef:
19:2f:0f:2d:1b:b4:ab:67:89:20:c5:69:49:88:f4:
c1:4b:10:b2:d0:fa:54:ad:ff:42:d9:4d:ff:0d:96:
2e:cd:59:03:99:9c:83:19:f6:bd:d0:11:c3:88:3e:
af:97:a3:07:99:ca:2b:db:11:b3:5a:48:27:00:73:
33:4a:a9:c8:eb:75:b6:1d:30:34:fa:4e:d6:d1:f7:
c3:7b:e7:35:bb:70:79:d4:48:a0:92:33:3e:51:6c:
70:a8:69:04:d2:7e:b8:37:85:c6:74:ff:74:b8:36:
97:68:3e:2c:6f:25:83:a2:98:0e:6d:12:b9:39:0b:
a6:a0:5a:5a:76:6b:23:77:e3:8a:91:34:3d:1c:45:
f1:87:0e:e3:1a:db:d5:9d:77:0a:ec:0f:26:42:9b:
04:ec:04:f2:27:e4:b4:7c:98:e4:be:d9:77:4b:c2:
2d:a3:1b:17:80:8e:8a:bd:62:cb:fa:2c:a2:ba:91:
3f:7f:93:85:cc:42:b4:74:3b:c8:bb:ae:95:9e:27:
95:77:10:44:4f:dc:1d:8a:fc:75:74:51:64:14:8c:
b2:c7:ee:4e:4b:78:3f:d8:6c:35:88:43:e1:f1:67:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:57:51:33:03:62:1B:58:E9:FF:99:0F:AE:DE:AB:27:A9:AE:D8
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/jIFXUTMDYhtY6f-ZD67eqyeprtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:bf:9b:5c:ad:66:20:1d:70:30:4c:31:ee:38:78:b0:cf:e1:
d4:68:55:2c:b0:a7:e7:95:fc:38:7a:64:ea:bb:5c:bf:82:c9:
c7:7d:04:56:2e:a8:10:06:9a:98:e2:3a:d8:29:45:70:2a:2d:
7b:b7:e5:c6:4f:39:fb:48:5d:09:6a:70:b2:9e:30:e2:bf:cd:
49:d0:23:86:02:1b:91:a2:c5:8a:7d:6e:01:2d:9d:bc:cf:fc:
6a:fc:36:09:80:f3:f1:1a:eb:e2:9f:0a:d7:d6:0b:16:8d:17:
0e:95:74:0b:ee:aa:9b:43:aa:a7:e7:56:49:4b:4d:f4:da:3a:
2a:cb:e4:28:e2:19:72:33:51:e1:8f:cd:5b:8c:03:28:ac:bc:
68:50:87:0d:01:d7:ae:ab:a9:1b:bc:8b:90:a2:01:53:6f:eb:
bd:36:34:db:09:1a:67:8b:13:4e:d2:13:31:94:9c:16:b7:ec:
53:58:6e:0c:f5:46:31:77:5b:dc:e1:24:58:a9:df:fd:36:de:
47:14:fb:f7:76:86:ff:25:af:dc:42:77:05:b6:72:f2:ba:04:
03:57:20:c9:98:9e:f6:42:07:e4:e2:0f:52:37:dc:2b:8d:bd:
44:8d:15:a1:71:ce:87:11:f8:b5:be:7b:02:7a:45:b4:aa:7a:
a6:0f:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:39:15 2024 by rpki-client on console-ams.rpki-client.org