Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/i7LCz01U6eoVtIpcd0OBbxDfXPQ.roa
File: i7LCz01U6eoVtIpcd0OBbxDfXPQ.roa (raw, json)
Hash identifier: r05OBCdMwPCPcMhF5vMh35jD2nkg0k/lD/YfBT/i5y0=
Subject key identifier: 8B:B2:C2:CF:4D:54:E9:EA:15:B4:8A:5C:77:43:81:6F:10:DF:5C:F4
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 01934E16FF4D2B6E404E1F5FAB4508D06075
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/i7LCz01U6eoVtIpcd0OBbxDfXPQ.roa
Signing time: Thu 21 Nov 2024 09:39:10 +0000
ROA not before: Thu 21 Nov 2024 09:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1136
IP address blocks: 194.104.80.0/24 maxlen: 24
2a04:9fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:16:ff:4d:2b:6e:40:4e:1f:5f:ab:45:08:d0:60:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Nov 21 09:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bb2c2cf4d54e9ea15b48a5c7743816f10df5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:4e:09:8b:af:ec:16:4e:b5:ec:87:83:65:
ac:2a:89:ce:db:d1:c6:ff:2a:23:eb:7a:a7:e2:88:
9f:8f:e2:21:05:76:66:1d:71:c0:fb:59:24:a1:6a:
d2:54:7c:c0:cd:a2:b9:e7:f8:c8:f9:f4:82:94:e4:
95:ad:bc:d1:28:24:d4:fb:0e:db:07:d8:f4:96:99:
2a:61:93:df:8d:e1:e7:2b:26:84:93:55:64:c6:26:
f0:32:bb:b9:5a:0e:9c:f4:27:9b:97:d1:ab:88:c7:
3e:b1:4d:f0:ce:a2:a8:01:0d:78:f4:90:e1:a2:c7:
55:11:41:a8:75:04:02:f0:d9:1a:a1:bc:4c:3c:62:
4b:9d:00:12:84:33:61:6b:cb:49:db:93:bd:4c:91:
f3:76:aa:16:f9:85:f7:86:c5:e5:23:32:06:29:10:
9d:a9:7b:bd:95:c2:f7:31:fe:6f:65:90:4b:48:13:
90:0a:25:30:4f:be:ff:7d:a0:44:82:ca:4b:49:0e:
9e:77:e2:34:f2:0b:82:9d:44:a8:e3:c9:71:33:e0:
20:1e:25:a0:42:81:53:e4:8f:9d:fd:bb:c9:52:0d:
d2:00:aa:ab:10:68:2d:0d:9c:b6:0a:3d:d7:de:1b:
90:49:ba:3b:d8:06:c4:47:fd:47:4f:19:fd:7b:90:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B2:C2:CF:4D:54:E9:EA:15:B4:8A:5C:77:43:81:6F:10:DF:5C:F4
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/i7LCz01U6eoVtIpcd0OBbxDfXPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.80.0/24
IPv6:
2a04:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:37:96:1a:91:62:6f:cf:37:98:a7:02:1a:62:cb:2c:25:86:
a5:98:02:8e:5d:ae:96:95:c7:d8:8a:fe:37:5c:0b:e0:ea:bf:
fd:59:b8:6d:f1:3e:0e:7c:35:15:97:95:47:23:c1:29:bb:3d:
f2:93:d4:f0:3d:ee:f5:2e:31:62:f6:12:03:88:86:c8:6f:1f:
11:18:10:d0:97:38:44:c2:13:d1:4c:46:72:cd:0b:17:a3:d7:
94:00:43:34:59:09:ce:68:3d:f7:ca:40:0e:2e:39:a3:d7:b8:
54:50:4a:c4:36:d0:09:8c:2d:ff:70:cd:33:a9:2b:f8:0b:87:
a7:41:14:d4:58:33:12:7c:02:9b:6b:48:31:58:de:91:d3:15:
05:f6:10:eb:34:59:af:dd:bc:ef:0f:19:b3:2d:61:91:25:21:
56:ba:fa:84:56:84:a7:18:10:6a:62:58:94:46:6b:a9:b3:11:
95:04:27:c3:9c:51:c1:e7:a1:0b:81:23:94:fb:84:74:2d:8c:
8f:47:85:74:5c:46:1f:13:cc:7d:6e:87:74:76:1f:d0:a9:1f:
78:fe:7d:c0:8f:89:a9:7e:a3:51:97:2e:21:cb:8a:67:3a:b8:
ab:b1:b6:f1:13:56:ae:5e:ad:2a:6e:e8:e8:56:6f:4e:61:46:
e3:e7:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:52 2024 by rpki-client on console-fra.rpki-client.org