Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/8QlFz5vNMVGw8sNU9iJogsoEpHU.roa
File: 8QlFz5vNMVGw8sNU9iJogsoEpHU.roa (raw, json)
Hash identifier: yYwB8AEN7vbVd9UeyiqiZfEREeJy9PJrZ0RYWHavo0k=
Subject key identifier: F1:09:45:CF:9B:CD:31:51:B0:F2:C3:54:F6:22:68:82:CA:04:A4:75
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 018CC26D066B9850559456AE8CD89CA07AD2
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/8QlFz5vNMVGw8sNU9iJogsoEpHU.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34636
IP address blocks: 94.139.176.0/21 maxlen: 21
94.139.184.0/22 maxlen: 22
94.139.190.0/23 maxlen: 23
94.139.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:06:6b:98:50:55:94:56:ae:8c:d8:9c:a0:7a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f10945cf9bcd3151b0f2c354f6226882ca04a475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:6a:e8:be:10:7d:60:5d:f8:04:94:1d:18:
69:86:c1:10:aa:07:9c:0c:e9:e1:03:f9:8a:b0:a0:
f3:63:a4:97:f1:f2:ee:f9:3f:2a:10:85:74:2e:e0:
ab:07:6e:bc:91:43:22:6d:71:de:b6:e4:12:9b:39:
34:09:06:f4:a4:b4:0e:0d:18:4c:90:e1:37:af:33:
92:65:e2:bf:6a:98:97:ad:89:93:de:c4:79:2c:8b:
ac:78:ff:93:02:85:14:51:6b:15:26:3d:e8:d7:f7:
ad:fb:bf:7d:c3:9b:17:a1:44:e2:83:4b:ea:f2:d2:
9b:5e:7a:29:48:68:05:bb:50:13:47:7e:cb:79:d5:
fa:be:4c:4e:03:2f:70:9f:04:11:eb:93:ef:d6:eb:
9d:74:d2:a9:84:13:e4:ca:e1:7d:01:61:68:ec:78:
05:d0:3c:b5:c4:a5:45:40:93:1e:b2:b7:51:65:ab:
1e:05:d2:67:77:c0:13:5c:ec:1f:9b:ff:ea:25:1f:
67:ed:d9:cc:fc:aa:40:19:63:32:5b:f2:ff:be:67:
83:cc:6b:fe:98:56:25:df:92:66:92:46:db:0d:c8:
85:3d:a3:ec:95:d7:f8:1a:a8:30:b0:2c:7c:28:15:
77:ca:49:01:da:3d:ba:3e:05:92:27:95:aa:8f:fe:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:09:45:CF:9B:CD:31:51:B0:F2:C3:54:F6:22:68:82:CA:04:A4:75
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/8QlFz5vNMVGw8sNU9iJogsoEpHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0-94.139.188.255
94.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:29:f5:f0:f9:c7:80:1e:b0:e9:50:26:1b:b6:21:25:20:53:
31:d7:85:df:b9:b4:4c:b2:5b:89:c7:f2:1d:8d:17:da:78:d1:
ed:a2:9e:0b:9e:cf:42:94:cc:98:74:6a:4f:66:54:4c:10:f7:
31:63:60:c8:58:a5:14:86:af:c3:4c:19:df:51:45:70:7b:78:
d4:89:f3:2f:50:9f:e2:0c:e8:54:1f:99:c6:76:cf:49:f9:5d:
73:e1:df:0b:a5:ea:ec:bc:66:56:94:5c:5a:2b:13:fc:9a:8f:
90:e2:00:8b:f8:49:3b:17:04:9c:9e:a1:20:00:53:01:77:62:
75:2b:e5:f7:27:a4:52:d9:77:25:05:c7:da:42:4c:21:b6:0f:
41:f1:55:69:fe:3e:50:18:d2:16:e1:b3:7b:40:2c:06:58:44:
6b:87:a9:dc:72:d0:ef:6b:78:67:08:4e:8f:7a:1f:b1:be:1f:
45:1e:e0:85:38:b0:91:09:8d:99:e8:f7:d2:85:89:49:fa:0e:
bb:08:73:53:72:63:7f:bb:17:98:fc:65:1c:5e:f8:f0:12:ac:
f2:85:c7:00:7b:ce:de:10:b9:93:dd:b2:ba:13:6f:e1:92:08:
80:04:fc:e3:95:5d:33:47:27:f7:f6:cb:c2:bd:4b:d8:e8:f1:
32:30:c9:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:11 2024 by rpki-client on console-fra.rpki-client.org