Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/j8ITAB9Pg34RHnq8S02XxLdYoL8.roa
File: j8ITAB9Pg34RHnq8S02XxLdYoL8.roa (raw, json)
Hash identifier: BvlHDdVeTg6vkfBBcvyRWN7Ij3Ogo1Jzy/wyqY3y9ok=
Subject key identifier: 8F:C2:13:00:1F:4F:83:7E:11:1E:7A:BC:4B:4D:97:C4:B7:58:A0:BF
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 018CEED9CE808E350BF212D2B39E1E313EDA
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/j8ITAB9Pg34RHnq8S02XxLdYoL8.roa
Signing time: Tue 09 Jan 2024 15:31:40 +0000
ROA not before: Tue 09 Jan 2024 15:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209961
IP address blocks: 95.141.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:d9:ce:80:8e:35:0b:f2:12:d2:b3:9e:1e:31:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Jan 9 15:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fc213001f4f837e111e7abc4b4d97c4b758a0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:17:2d:24:a8:e1:0c:36:95:af:2a:df:3e:76:
6d:3c:1b:2d:77:80:da:2f:14:e6:3b:54:b7:ec:8c:
e5:57:42:4d:37:82:f8:24:f3:6e:b3:dd:e2:60:e9:
b4:47:b9:f5:30:93:19:8b:a6:40:a6:14:e4:a0:bf:
c0:48:df:9d:a6:0e:3d:b1:58:41:b9:09:68:28:53:
8a:e8:cf:91:6e:1f:ce:e4:99:91:57:06:e3:e8:3b:
72:ca:11:d0:d1:e1:14:75:d5:8f:c3:9d:c0:39:25:
64:f3:6f:3f:9e:69:f4:ee:da:3c:97:c5:6b:34:ab:
51:c6:42:00:52:f2:4f:0e:e6:49:fc:65:ca:2d:46:
d5:e9:72:46:54:98:87:a6:f8:ee:bb:8a:e3:6f:f2:
54:76:9a:98:ad:a1:c0:d4:8c:27:43:d0:97:3c:de:
35:b7:d4:64:b7:2e:e2:e5:be:19:68:3e:46:b0:15:
c7:c1:5d:70:d7:95:50:11:53:a0:f8:a2:89:65:3c:
54:02:e3:12:a1:97:c9:84:a6:91:7c:6e:dd:74:19:
dd:31:b3:49:23:1e:19:b9:bc:90:0f:04:95:3e:a7:
bc:83:45:b7:45:03:62:d7:08:89:61:cc:ed:a0:6e:
6c:aa:c6:b1:e5:c5:6c:20:5b:e2:b2:ed:31:56:62:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:13:00:1F:4F:83:7E:11:1E:7A:BC:4B:4D:97:C4:B7:58:A0:BF
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/j8ITAB9Pg34RHnq8S02XxLdYoL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f5:d5:13:13:aa:06:87:c8:32:d7:67:4f:9a:2c:63:7f:4a:
30:c8:6b:0a:09:70:85:d6:58:75:fa:55:86:9d:00:a9:48:e9:
a6:5e:d5:7a:a0:1c:38:79:0d:70:66:29:c2:f3:0e:ca:5e:54:
e8:42:c3:f8:21:df:83:3d:04:0c:66:a2:3b:18:b5:32:a4:d1:
3f:a3:57:bc:6e:ea:68:f5:28:be:f5:ee:32:e0:06:b5:e8:a7:
0e:c9:39:7d:78:77:80:7c:67:96:72:90:19:d6:82:79:46:86:
83:09:a8:e6:5a:1b:6d:aa:1e:18:43:0f:70:f3:0c:fb:a5:60:
07:a7:78:fe:45:63:56:23:5f:bd:fe:35:8f:a7:ea:e1:d2:ff:
b2:71:3d:0c:b9:ff:cc:eb:8f:18:5b:ce:7d:3c:61:98:31:64:
40:3a:bd:cf:35:03:1f:58:4e:3c:cb:78:2b:45:08:1b:43:30:
e0:33:81:3a:b9:52:3a:8e:e2:ff:48:c5:e7:d4:de:9d:73:0d:
26:8f:36:09:a6:9b:e6:b6:8f:ac:21:00:d2:52:7b:83:57:aa:
be:ac:ae:68:18:45:6e:21:aa:5a:a4:9e:c6:4e:e5:8d:44:e3:
4d:f5:62:ef:4d:f6:0f:c4:f9:4c:5e:10:d7:81:ac:9a:c3:8b:
0d:05:05:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:21:25 2024 by rpki-client on console-fra.rpki-client.org