Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/drsVMIKZZFG5_1wKGYzVEExXyDg.roa
File: drsVMIKZZFG5_1wKGYzVEExXyDg.roa (raw, json)
Hash identifier: yosNGfX1gKFmGBNX0Gf6qt1fP6PIk6ieKL7LVQtEGvw=
Subject key identifier: 76:BB:15:30:82:99:64:51:B9:FF:5C:0A:19:8C:D5:10:4C:57:C8:38
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 018F14A4FFA1954412FFBDAEA7AB85D30374
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/drsVMIKZZFG5_1wKGYzVEExXyDg.roa
Signing time: Thu 25 Apr 2024 09:45:08 +0000
ROA not before: Thu 25 Apr 2024 09:45:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.150.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:a4:ff:a1:95:44:12:ff:bd:ae:a7:ab:85:d3:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Apr 25 09:45:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76bb153082996451b9ff5c0a198cd5104c57c838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:ac:a3:37:96:a9:cf:2c:c1:6a:c8:8f:23:
21:74:9f:7d:98:bd:2d:02:69:b9:db:80:f3:86:65:
c0:54:22:4c:87:1d:f3:a7:4f:f8:af:35:b3:a3:dc:
fc:98:5b:01:2e:7d:f0:ea:84:b6:c1:06:59:dd:41:
6d:ca:0f:6a:dc:bf:47:ff:ac:44:28:fd:cf:81:3e:
91:1a:ff:be:5d:ea:df:87:6b:cf:b1:58:59:ed:16:
83:ff:9d:9d:1a:51:14:f9:d4:d6:8a:57:c9:31:c8:
e0:a6:48:80:7f:ac:50:a5:f6:f2:12:d8:05:5c:91:
7c:55:c6:65:be:7e:89:8e:8a:da:20:6f:f2:46:73:
98:86:ec:83:ca:97:c6:39:77:4c:33:cb:71:b4:21:
8b:cb:f7:e8:b5:7e:39:36:17:9f:9c:65:66:cf:e9:
7f:c4:c8:f1:4a:f5:0e:c9:25:e8:9d:fa:3f:b2:8c:
61:ee:d3:70:4c:3d:e0:44:51:f8:a0:a8:69:52:87:
2d:31:60:75:d3:a0:4e:71:c3:10:3c:1a:a3:f9:26:
fe:83:e4:35:3f:52:34:2f:0b:bb:f4:93:11:c2:2f:
3c:ac:c4:70:35:db:17:e3:36:16:ce:29:c8:ad:06:
9e:15:9b:7b:df:fb:b0:2f:bc:43:a8:76:8b:b8:00:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BB:15:30:82:99:64:51:B9:FF:5C:0A:19:8C:D5:10:4C:57:C8:38
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/drsVMIKZZFG5_1wKGYzVEExXyDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.193.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d4:67:8d:bf:ee:70:a6:34:e2:73:fa:c5:01:18:f4:34:4c:
64:42:56:11:23:e0:8a:fe:90:de:06:dd:39:05:79:db:b2:ba:
22:e9:df:95:f0:b5:06:00:34:5c:80:25:17:3d:4b:5b:99:57:
f5:e3:c6:2d:06:ec:bd:21:f6:d6:d2:8b:26:45:ba:93:cd:75:
c1:86:90:01:d5:c4:99:7c:44:e4:25:27:d8:b0:ce:3f:63:93:
9e:02:97:14:3a:57:a6:ab:75:37:1a:68:f6:f7:a8:67:f6:a9:
63:0b:7f:76:ed:ae:0e:12:88:51:d8:ab:3c:42:f3:69:1b:f3:
78:4a:22:85:a5:5a:55:07:32:27:17:6d:bf:ab:9d:14:f8:c3:
93:00:c1:f9:a4:99:2a:5b:8e:ca:c8:e0:58:14:00:1a:b0:e0:
1e:52:3f:59:78:b6:1d:74:b3:65:35:b5:21:f9:f8:61:11:4b:
2c:e2:e5:27:ff:18:c2:5a:bc:7a:89:ca:82:b9:09:77:3e:dd:
c9:ea:e4:8e:5f:30:30:7e:71:9c:96:bf:fa:c2:95:a1:88:c3:
b7:5e:6d:61:40:45:3e:af:d2:7d:35:fb:c5:d7:37:c9:60:87:
de:f7:52:23:9c:b7:de:34:72:67:c3:b1:26:67:ba:2a:04:8f:
09:10:8a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:54:21 2024 by rpki-client on console-fra.rpki-client.org