Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/7GmhVqN9jht0nkm1X0yHwhbC6YU.roa
File: 7GmhVqN9jht0nkm1X0yHwhbC6YU.roa (raw, json)
Hash identifier: JIMlgFu76yYnzDUPkAcJZEO5SET9Rg5p2+U1wW/T49g=
Subject key identifier: EC:69:A1:56:A3:7D:8E:1B:74:9E:49:B5:5F:4C:87:C2:16:C2:E9:85
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 018CC64B5EBBE34E5B534C32DF91CE945BC9
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/7GmhVqN9jht0nkm1X0yHwhbC6YU.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49036
IP address blocks: 81.94.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5e:bb:e3:4e:5b:53:4c:32:df:91:ce:94:5b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec69a156a37d8e1b749e49b55f4c87c216c2e985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:74:6f:65:fe:c6:31:c3:9f:28:82:98:0e:
52:19:3e:e8:01:bd:cd:d6:4c:86:a1:4a:38:a2:7b:
ca:c6:b7:5b:ce:35:d6:ab:3f:7f:0c:0b:fe:2a:97:
79:88:62:32:2e:ac:f5:ea:3d:70:22:b4:93:83:7a:
56:8f:2c:5c:46:b4:8a:56:ee:af:ce:84:8c:07:1e:
42:86:7a:fe:30:c5:26:21:cd:53:01:52:04:56:3d:
7f:81:31:77:3c:7e:ef:0a:98:46:d2:83:30:df:16:
80:8a:8f:a4:cb:7d:51:21:d2:78:8d:12:b0:4b:3f:
d4:7e:d4:05:c8:52:55:89:c2:1b:fa:98:1a:3d:8a:
f7:e1:49:2c:9e:97:68:03:63:88:ab:f2:10:ce:b5:
75:48:a1:e6:6c:1d:22:71:eb:55:0b:7a:3b:76:db:
12:86:e8:76:d9:06:08:c5:51:ad:82:2a:bb:67:02:
8c:ad:6e:ae:67:0b:79:ab:96:d7:38:1d:5a:70:71:
51:51:96:98:c3:09:8f:2b:b4:14:21:af:88:d4:6d:
2f:2a:1a:34:0b:3b:07:c4:76:42:a4:96:5c:61:4b:
15:60:20:6e:1a:6d:fb:ff:dd:12:5e:40:2e:ef:88:
08:d6:cf:41:1e:7e:32:b7:db:d7:5b:2e:f7:a6:b5:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:A1:56:A3:7D:8E:1B:74:9E:49:B5:5F:4C:87:C2:16:C2:E9:85
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/7GmhVqN9jht0nkm1X0yHwhbC6YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.238.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ab:55:06:7e:da:28:3a:bb:17:64:f6:28:98:ce:af:6d:ca:
7e:fa:f9:fc:30:0c:79:5a:0b:80:36:d5:ec:46:e6:31:62:93:
4f:ec:e5:3d:8b:c9:eb:17:b0:25:b2:42:48:a0:4b:92:9a:17:
0b:5f:95:21:f2:30:ad:89:87:10:68:3b:39:ea:ff:a4:3d:72:
83:18:30:b2:e3:32:be:4f:b8:29:0e:86:0c:2d:b5:6d:94:47:
38:1f:8b:65:c9:a6:f2:a4:b4:83:ae:2e:63:34:7c:7a:76:b7:
9d:2d:32:85:e3:eb:c1:32:78:5b:b7:47:67:1e:53:c0:cc:f5:
f7:06:77:56:0d:67:12:4b:17:ae:b5:1a:3b:81:21:34:2d:74:
77:57:81:12:d5:88:95:06:bc:87:13:ef:fb:96:81:b4:7f:ce:
dd:28:7e:f5:5a:ef:09:9f:ad:4c:62:50:c1:25:07:97:49:0e:
bc:7b:6b:db:c8:aa:0e:42:b0:cb:69:a0:8b:96:63:50:77:8f:
e2:49:b7:2f:3d:ce:6a:79:bf:82:53:69:6d:66:9d:b9:70:98:
df:a9:7b:50:a1:ae:00:9f:13:0d:8a:09:dc:31:38:ba:f0:98:
9d:c8:04:cf:5d:03:a8:82:0b:32:75:eb:7b:d2:4c:16:35:68:
e1:39:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 23:04:05 2024 by rpki-client on console-fra.rpki-client.org