Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/t4qpRJ8LQQ5MoScNS9v8wlDAyQA.roa
File: t4qpRJ8LQQ5MoScNS9v8wlDAyQA.roa (raw, json)
Hash identifier: tWznTq6POTNMxZv5aLIq7TQ+5RcPAtrjqOfiqEMCX4k=
Subject key identifier: B7:8A:A9:44:9F:0B:41:0E:4C:A1:27:0D:4B:DB:FC:C2:50:C0:C9:00
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 018CC6B80481A632845B187DC40F4AC84DB0
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/t4qpRJ8LQQ5MoScNS9v8wlDAyQA.roa
Signing time: Mon 01 Jan 2024 20:29:57 +0000
ROA not before: Mon 01 Jan 2024 20:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207492
IP address blocks: 94.231.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:04:81:a6:32:84:5b:18:7d:c4:0f:4a:c8:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Jan 1 20:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b78aa9449f0b410e4ca1270d4bdbfcc250c0c900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:6b:ad:63:13:28:b3:9f:6c:57:89:f6:7f:
87:80:24:58:a5:fb:b7:93:f9:54:d1:e7:40:30:b9:
7b:dc:ee:0c:25:20:f4:b7:6b:c2:6b:7a:18:5a:4c:
77:33:96:a1:21:d7:92:6d:7d:0d:da:c0:80:e1:da:
04:30:12:3f:ff:a3:eb:47:21:e3:d6:a0:85:d9:9d:
76:f5:0c:ae:02:2c:a7:83:72:7c:c3:c9:6c:9b:1b:
4f:ed:b4:d5:c5:75:66:a5:76:c7:63:ad:b7:71:00:
1b:c8:f7:a4:03:0a:42:2c:47:fe:4b:12:af:ea:d3:
48:54:b7:5e:a8:3d:91:77:4c:20:b5:69:57:60:11:
2d:95:77:c6:48:62:9c:45:a5:06:26:f6:04:b5:53:
40:df:37:06:78:e7:56:80:97:2a:8e:dd:cc:e9:17:
9a:f6:76:6f:91:49:57:17:80:52:31:08:89:64:d3:
40:08:a9:3b:2e:1a:bf:e2:0c:c2:e5:fb:38:6f:55:
29:55:b9:ae:12:51:ad:3e:9c:74:1a:49:8b:c2:1d:
63:ca:c5:39:3c:87:1a:96:67:db:f0:b9:3d:2c:08:
c1:86:3b:df:44:10:e0:2a:10:fe:3b:5f:e6:38:d9:
3b:ae:9d:11:30:1b:fb:06:95:a1:51:53:ca:c4:b0:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8A:A9:44:9F:0B:41:0E:4C:A1:27:0D:4B:DB:FC:C2:50:C0:C9:00
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/t4qpRJ8LQQ5MoScNS9v8wlDAyQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.194.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b5:59:c1:2e:0b:49:3a:fe:1c:7d:d8:e1:cc:7e:06:b1:56:
a2:e9:21:00:5a:a0:f7:01:94:53:8c:b2:19:85:d2:52:aa:bf:
90:0f:6d:d9:a1:c3:b1:ef:21:03:8f:dc:72:8b:be:80:7c:6d:
90:13:59:cd:f3:d4:da:49:c7:c9:4c:6d:44:7e:61:5e:0d:78:
7a:65:5c:05:39:85:e1:94:6e:7a:67:1b:bf:73:cf:d6:b3:cc:
17:02:d4:27:ce:4d:25:68:46:ad:f1:e0:a9:c3:48:76:79:fa:
76:75:9b:21:2a:6c:4e:0d:63:88:8c:dc:a7:64:6c:1f:6b:69:
27:ef:32:88:ac:9f:ef:5a:11:62:56:c3:8a:5d:e5:d7:c6:86:
4a:7a:42:71:c1:45:cf:38:ce:af:71:29:2f:d0:2e:26:33:af:
f7:f8:24:30:92:ed:0c:19:99:84:b4:22:4a:75:bc:38:a7:31:
b5:8f:2e:50:3a:66:b7:55:55:6a:fd:cf:a2:39:d7:88:03:f0:
57:b1:bf:30:9d:61:67:b7:23:f7:01:05:3d:8d:77:41:d8:b2:
45:51:a1:e2:57:db:70:4f:b8:53:4f:32:65:7e:53:10:fb:e6:
3b:72:75:85:1b:54:01:28:33:d1:78:c3:f3:6b:68:f0:70:6f:
73:fa:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:10:16 2024 by rpki-client on console-ams.rpki-client.org