Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/8Tgf0LJfTLdifUbVqj8azDyvVz0.roa
File: 8Tgf0LJfTLdifUbVqj8azDyvVz0.roa (raw, json)
Hash identifier: FY1iupxukY2NtQOs4d1O9TNwcJt/oCDXRWG9z4Jhzew=
Subject key identifier: F1:38:1F:D0:B2:5F:4C:B7:62:7D:46:D5:AA:3F:1A:CC:3C:AF:57:3D
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 01908E38B15B60F1E02263FC0A544C7ED739
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/8Tgf0LJfTLdifUbVqj8azDyvVz0.roa
Signing time: Sun 07 Jul 2024 17:23:18 +0000
ROA not before: Sun 07 Jul 2024 17:23:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 94.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8e:38:b1:5b:60:f1:e0:22:63:fc:0a:54:4c:7e:d7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jul 7 17:23:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1381fd0b25f4cb7627d46d5aa3f1acc3caf573d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:58:6a:08:3a:77:08:8b:90:3b:8e:ed:1d:
00:c9:75:a8:bd:0a:c9:ec:0f:9f:b7:1e:74:ad:c7:
8c:05:8d:41:a6:4b:24:6b:bf:12:f1:d2:dd:67:dd:
2c:16:cf:bb:2c:98:45:dd:fb:ef:b3:b3:00:99:92:
94:33:14:36:0f:fd:14:d9:6d:ed:cf:d5:a6:7b:18:
fc:91:6c:0c:27:fe:e0:0e:d2:c5:c4:5f:a3:06:bf:
f4:98:61:1c:48:5d:81:09:20:1f:de:05:91:f8:8b:
df:09:c4:6b:c8:ce:75:be:2f:35:12:c3:83:05:f3:
13:6a:4d:41:dc:fe:30:13:b5:94:22:fc:9d:a2:9e:
f4:ef:68:6f:5c:b5:fd:85:bc:f7:85:53:e4:88:16:
9c:36:2c:7f:2c:7e:fe:7d:36:d5:4c:94:7b:f8:29:
57:bd:31:61:ed:4e:80:8a:04:b6:90:c7:f3:83:ed:
98:b4:ff:ca:ec:d8:61:85:56:6a:01:23:eb:93:83:
90:ce:d6:0b:fb:d2:16:c2:e8:7a:4e:98:e1:66:a4:
6c:df:ed:ea:b5:5d:10:ea:e0:cd:88:12:ed:6c:6d:
f3:9d:4f:93:8c:3e:95:c8:ec:de:7d:cf:67:3d:bd:
2c:df:da:e6:43:92:e4:0c:3b:84:fd:f2:1f:7e:98:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:38:1F:D0:B2:5F:4C:B7:62:7D:46:D5:AA:3F:1A:CC:3C:AF:57:3D
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/8Tgf0LJfTLdifUbVqj8azDyvVz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:1e:ac:ac:59:60:f8:8f:ef:b3:32:52:d8:78:aa:e3:8c:72:
53:f1:6c:94:fc:ef:9f:66:c4:b0:54:b2:40:f5:cf:db:44:1a:
b5:c4:b7:0d:6b:e6:4c:d7:25:2a:9d:86:28:e6:77:ee:d7:3a:
0a:f9:45:16:f1:40:61:eb:55:69:83:97:39:bc:c7:4c:73:15:
a0:ff:c8:c2:14:34:2d:50:1a:e2:dc:48:12:54:e7:f9:1d:c7:
aa:6f:a1:06:b9:c4:6f:44:00:ad:e0:2b:bc:e8:81:8d:40:ad:
26:de:8d:0b:f4:85:28:73:5b:7a:b5:cb:a9:ea:6d:30:ea:96:
5c:d3:94:b8:81:52:7f:cc:e0:c4:61:72:02:82:1f:37:9a:38:
ee:68:22:df:96:53:6d:d9:23:cc:82:53:74:73:3d:ef:58:8f:
80:99:5c:70:6b:56:f7:9b:2f:f2:62:42:a8:87:c7:a2:33:47:
96:7b:8d:a5:b7:f2:b0:ac:29:60:f3:13:1f:73:69:19:1a:c6:
20:33:b3:61:9b:7c:50:c4:cb:79:ea:37:32:d3:88:1f:fa:8a:
ff:38:c0:26:b5:4f:59:56:33:bf:b6:28:8a:58:75:1f:79:ea:
3e:e6:03:c3:a4:25:10:a1:65:5e:cb:a4:78:c5:73:ff:98:f9:
6a:72:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:53:39 2024 by rpki-client on console-fra.rpki-client.org