Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/eU9DpB9WG3VMaUYxRnssLSSPOBg.roa
File: eU9DpB9WG3VMaUYxRnssLSSPOBg.roa (raw, json)
Hash identifier: eC27puyGDsbNTcoSFkgVMARUWvVloovfdYC8qKeuXNA=
Subject key identifier: 79:4F:43:A4:1F:56:1B:75:4C:69:46:31:46:7B:2C:2D:24:8F:38:18
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCBF6D0D1B96FFB9F3FE29A77DDE8E
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/eU9DpB9WG3VMaUYxRnssLSSPOBg.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204993
IP address blocks: 194.224.165.0/24 maxlen: 24
194.224.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:bf:6d:0d:1b:96:ff:b9:f3:fe:29:a7:7d:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=794f43a41f561b754c694631467b2c2d248f3818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:1c:cf:ae:d2:9e:32:04:c4:10:89:ad:18:
a8:f5:61:8b:21:15:16:cc:f4:04:15:f2:2e:cf:67:
a5:4d:a4:5a:a2:bc:c7:be:00:67:bf:95:34:5d:d1:
96:b5:e6:5b:80:1e:b5:b5:3e:a7:fe:52:44:2b:bb:
8d:60:a5:f2:5f:1b:56:9d:42:15:a9:d4:c1:48:41:
9a:97:1d:b4:59:9a:aa:ad:f2:f5:62:47:42:22:55:
d1:3f:56:7f:df:5e:81:3e:cb:ff:23:a0:c7:c8:4f:
c5:21:58:54:8e:cf:ca:74:bc:fa:c4:11:2e:dc:bc:
c3:e5:eb:9e:74:5a:a5:f1:0e:fb:e5:96:6d:58:f7:
f2:f0:c8:cd:94:88:bb:50:21:46:47:92:90:eb:67:
80:9c:7f:97:a1:40:e3:d1:78:fc:74:44:b1:6d:2d:
53:d0:46:24:df:03:4e:48:63:d8:b0:30:d7:f7:a6:
3e:67:00:ab:42:2e:00:67:31:0b:d6:fc:a6:d2:77:
4c:1f:d6:3e:76:e3:27:34:df:89:b7:da:9a:da:bc:
4f:05:35:3c:d3:4b:4d:c0:03:9a:e3:45:4d:83:bd:
92:a0:a0:30:bc:99:2c:a9:48:47:3f:2d:8a:67:0b:
ca:d8:15:49:98:ae:98:7c:b5:71:0c:0a:58:d8:e7:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:43:A4:1F:56:1B:75:4C:69:46:31:46:7B:2C:2D:24:8F:38:18
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/eU9DpB9WG3VMaUYxRnssLSSPOBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.224.72.0/24
194.224.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d0:3d:29:e5:99:22:54:6b:9f:9d:d2:5e:d1:e8:d9:01:8a:
a7:73:a0:58:94:50:d7:fb:63:cf:48:49:c7:06:a8:cc:02:65:
34:2e:6e:b2:5d:2c:b6:d8:46:fc:9c:41:fc:bf:e6:02:4f:c9:
d2:46:5c:d6:c4:c1:86:f6:a1:ff:23:87:de:36:c8:74:19:23:
63:54:c4:b3:d2:1e:fb:87:84:fd:cc:01:50:9f:ae:84:46:1a:
cd:78:04:f5:3b:3f:e9:25:29:8d:b3:88:32:fe:86:7f:fb:c5:
47:66:d4:6a:b5:f9:4a:b3:44:a0:e8:8b:92:cc:6a:f4:66:26:
50:a0:f4:16:00:fa:97:ef:cd:64:d5:c1:0d:8f:f7:c8:21:28:
dc:29:03:22:af:0e:0f:81:5c:61:2e:af:36:a0:40:1d:6c:f0:
e9:00:d1:42:0c:79:dc:22:55:90:ca:9b:6e:41:57:a3:78:61:
b4:63:e6:1e:a9:c2:d1:8a:36:95:c6:5a:20:23:bb:09:ea:82:
f4:05:8d:6a:22:7a:b2:aa:49:43:70:13:b8:ef:9a:91:38:c5:
6a:bf:4b:63:49:e2:dd:59:c7:a9:3c:9d:44:c4:d2:5a:e9:bd:
a8:52:1d:9f:34:2b:45:65:8f:64:a1:44:89:93:8a:3f:db:46:
7b:c2:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:00:53 2024 by rpki-client on console-fra.rpki-client.org