Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/aLFgMoTwa3f0I6dIcTnSDcOErHQ.roa
File: aLFgMoTwa3f0I6dIcTnSDcOErHQ.roa (raw, json)
Hash identifier: UCbuFUplUVPp+WCvoAoPsMMikVah0cS4rfC2FvFM5xM=
Subject key identifier: 68:B1:60:32:84:F0:6B:77:F4:23:A7:48:71:39:D2:0D:C3:84:AC:74
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 018CC9BCC7C5C56D6B7B3421509B05030E5D
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/aLFgMoTwa3f0I6dIcTnSDcOErHQ.roa
Signing time: Tue 02 Jan 2024 10:34:01 +0000
ROA not before: Tue 02 Jan 2024 10:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8253
IP address blocks: 192.108.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c7:c5:c5:6d:6b:7b:34:21:50:9b:05:03:0e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68b1603284f06b77f423a7487139d20dc384ac74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:f2:68:5e:6c:69:77:5a:9e:0d:4b:8b:72:
a1:b8:37:51:ca:a1:37:be:d1:61:de:d5:01:70:e5:
ce:50:59:d6:f1:1e:42:5e:6e:f1:9a:4c:09:85:f6:
84:8d:d7:e8:fb:ca:c2:d3:6c:25:d9:8c:a4:bc:1e:
51:af:ce:1e:44:86:56:9a:6d:b2:94:cf:98:4b:ab:
3c:65:cb:2e:28:7b:55:49:17:4d:3d:ef:2a:8b:b1:
b4:2a:f1:58:75:da:86:da:8f:d3:b9:f2:ad:92:ea:
fd:37:a3:2c:70:28:dd:e5:ff:78:73:e4:72:64:7b:
21:7d:0f:88:af:17:74:4d:c9:b6:0f:38:c6:9e:35:
d7:b1:e6:51:e9:ab:76:09:2e:74:f8:00:c7:ef:21:
6d:36:50:11:53:87:97:a8:e0:fd:da:91:34:2c:a5:
d7:f8:1c:28:1f:29:78:f2:55:56:2e:f7:8a:02:2d:
7d:08:ed:d8:ed:a8:f1:b2:26:9c:64:99:07:36:d7:
e6:e2:ac:3e:96:91:3d:be:9b:08:e0:d8:65:0f:6d:
cc:15:7d:4b:41:6a:df:92:08:f2:db:a0:bf:4b:50:
61:33:37:fb:b6:3c:ed:7a:14:5e:c5:be:48:17:b1:
ac:a3:d0:b7:9e:a4:02:11:d5:a3:7c:f0:84:0a:f7:
df:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:60:32:84:F0:6B:77:F4:23:A7:48:71:39:D2:0D:C3:84:AC:74
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/aLFgMoTwa3f0I6dIcTnSDcOErHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d0:ae:20:65:27:46:87:36:75:ce:e5:c6:57:b3:b8:ba:08:
dc:8d:3a:2f:30:5f:3a:ee:12:64:d8:79:28:aa:92:a3:11:59:
24:50:a0:71:fe:16:95:8e:23:bc:cc:6d:aa:b9:4a:7e:5a:c8:
ee:6f:b8:28:41:0d:03:e1:23:ca:af:0c:eb:4a:6f:f6:13:e2:
a4:4c:1d:ca:af:f7:50:6d:f3:8c:f7:19:3f:17:6a:4b:92:4f:
98:ce:d9:8e:d9:e5:65:7c:a0:b6:f9:51:47:f1:55:16:a0:53:
25:3a:6d:e9:10:93:67:74:54:b0:c9:7e:01:d2:6b:aa:aa:15:
79:63:c3:86:d4:4b:e2:6d:9e:2c:31:35:ef:e0:5c:a9:05:78:
87:a5:ed:f5:87:90:6d:a6:d8:4b:01:81:75:e2:94:37:d0:da:
4a:a5:58:c7:0d:63:5b:2f:02:15:f0:98:a0:c6:3b:b7:e6:bc:
b9:f3:6b:1f:0d:99:61:a3:43:a5:9e:a0:60:62:5d:5b:03:6d:
5a:19:8e:36:19:ff:34:d0:44:5c:8f:4a:a7:90:b7:23:47:b7:
04:95:6a:2b:f1:5a:a6:bc:12:83:7e:49:2e:b2:26:94:90:bc:
29:8a:2c:09:e9:1e:f0:a6:58:e5:60:89:03:5e:8e:ff:7f:5a:
fd:8a:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:45:38 2024 by rpki-client on console-ams.rpki-client.org