Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/j_fLnKtJ-5Tx0vVwCNIg3pU8O5U.roa
File: j_fLnKtJ-5Tx0vVwCNIg3pU8O5U.roa (raw, json)
Hash identifier: H78q+AjxVSF06DFSnkkKSewSMoV1IINV7VZ/h1xYs8A=
Subject key identifier: 8F:F7:CB:9C:AB:49:FB:94:F1:D2:F5:70:08:D2:20:DE:95:3C:3B:95
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 018CC8707B6D526034AA663972294026ECE8
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/j_fLnKtJ-5Tx0vVwCNIg3pU8O5U.roa
Signing time: Tue 02 Jan 2024 04:31:03 +0000
ROA not before: Tue 02 Jan 2024 04:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.176.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:7b:6d:52:60:34:aa:66:39:72:29:40:26:ec:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Jan 2 04:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ff7cb9cab49fb94f1d2f57008d220de953c3b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:82:94:76:36:36:1e:f5:76:2e:4c:f0:e5:
12:54:73:8c:a2:7b:e7:a1:5f:60:86:c7:1c:fd:f3:
ce:a1:7c:de:6a:99:13:94:d3:eb:02:6b:c6:c4:21:
f7:8f:df:bb:77:d8:dc:8d:2c:36:fb:03:83:d5:66:
bb:1c:8f:ae:19:2e:81:de:81:c3:d9:ed:57:a9:9a:
e4:1c:75:02:ea:93:5f:59:73:1f:ad:6f:7d:92:c1:
36:e5:11:f2:f6:91:9e:01:fa:68:31:6f:14:02:15:
2c:01:68:2b:c8:6d:52:06:66:85:5e:2c:f2:24:87:
af:34:8a:27:45:56:2f:d9:fd:59:13:14:37:27:f7:
9b:4f:38:7c:e6:64:13:c6:f1:7b:3f:db:c6:31:2f:
4b:e2:dc:f9:99:b6:58:b5:a4:79:39:27:ba:b5:dd:
3c:06:3f:a7:68:c5:15:45:8f:97:b9:f8:81:4b:2b:
1c:dc:47:54:2f:99:54:25:2c:c6:e8:7b:af:ab:bb:
ac:66:f7:17:83:81:d9:a2:ff:2d:60:b2:31:50:64:
21:ce:d7:48:af:af:fb:56:d6:3d:6a:71:6f:76:fb:
50:19:30:f2:88:83:2e:f9:a4:65:18:cf:70:3e:a8:
3e:16:ff:83:73:9a:f9:d4:f3:66:48:61:34:0d:9d:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:CB:9C:AB:49:FB:94:F1:D2:F5:70:08:D2:20:DE:95:3C:3B:95
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/j_fLnKtJ-5Tx0vVwCNIg3pU8O5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.173.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d2:4f:a7:ce:e5:4e:9b:67:1e:8c:bd:da:ee:62:6a:ef:a1:
87:37:44:60:37:99:7b:94:93:c3:15:e5:b1:be:8a:b8:24:89:
ff:99:f7:80:8d:b3:43:2c:aa:a8:b0:37:c1:44:a7:fc:ce:aa:
1b:75:a0:07:d1:15:63:14:ff:8e:79:ea:68:58:8b:0d:49:6f:
c4:1b:af:02:f8:8f:8f:8a:80:a3:97:98:a9:bc:8a:d9:c1:78:
cf:66:c6:f1:3f:e7:2f:74:60:db:89:3b:de:9a:e8:8a:8b:23:
17:8a:69:09:ea:36:a6:6a:ab:2e:7b:66:95:5c:17:16:b9:06:
e8:b3:db:cc:8f:2a:3d:c9:f3:03:4e:1d:51:54:f4:16:38:22:
a3:ac:a8:c5:a2:2e:e9:51:89:d5:72:2d:05:50:0f:7a:65:20:
03:d0:29:50:a3:5d:3c:e8:55:f3:64:76:8c:06:85:0f:ef:ec:
ec:c4:dc:06:7c:b8:21:ac:f2:e6:9d:3c:ac:2c:6e:14:d6:e7:
26:01:c0:26:8c:da:49:b9:ad:91:ca:d1:c1:81:e8:8d:b7:a1:
93:b1:3b:da:c5:6d:e2:04:61:19:67:36:b2:ca:af:63:37:8e:
28:d3:0c:68:61:81:4a:82:52:98:41:52:ca:90:65:2f:f4:06:
bf:d2:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:17:50 2024 by rpki-client on console-fra.rpki-client.org