Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/eI9UCnO1-gNugRsBOkNvUpYuQlw.roa
File: eI9UCnO1-gNugRsBOkNvUpYuQlw.roa (raw, json)
Hash identifier: aB+eKRm87g05jMDiz+YeK3YNXOfRXe+lWDWcxn+GqcI=
Subject key identifier: 78:8F:54:0A:73:B5:FA:03:6E:81:1B:01:3A:43:6F:52:96:2E:42:5C
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 018F14C5F4B355CBA656719AE7340F98276B
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/eI9UCnO1-gNugRsBOkNvUpYuQlw.roa
Signing time: Thu 25 Apr 2024 10:21:08 +0000
ROA not before: Thu 25 Apr 2024 10:21:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 145.243.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:c5:f4:b3:55:cb:a6:56:71:9a:e7:34:0f:98:27:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Apr 25 10:21:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=788f540a73b5fa036e811b013a436f52962e425c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:b3:1b:0f:8e:27:26:3c:8f:7b:eb:4b:c3:
0e:4d:cc:6e:7c:f2:dc:81:dd:e9:ba:3d:33:51:73:
89:07:73:87:c1:ef:fd:c0:20:cd:1f:c3:20:27:01:
a8:95:78:41:14:a0:f7:4b:e5:4e:f5:82:c3:8e:db:
c9:4d:84:3e:5b:a1:b4:c3:5d:51:65:49:3f:2c:fb:
70:21:26:36:57:a4:20:1c:18:cf:8b:0f:ef:4c:f4:
18:70:65:51:6d:78:2d:54:2d:53:7a:7f:66:e3:cc:
4a:57:ff:d6:b0:e8:33:4d:cd:eb:1e:14:5a:41:69:
83:7a:50:d1:a6:5c:0c:56:94:59:8e:37:3b:23:3d:
b5:9a:9f:5c:b1:53:7a:b8:2e:2e:1f:85:2f:76:77:
45:49:b1:db:4a:d4:7c:27:6a:9d:0d:50:7a:44:9c:
ef:4c:e0:fc:78:45:fe:b9:f6:4c:a4:17:00:2b:77:
e5:cb:b9:d0:db:af:9a:75:4a:64:4f:29:55:c1:25:
58:f8:67:50:0c:2a:fc:d8:bb:6b:97:11:94:c4:40:
15:17:76:6c:80:04:fb:e6:ec:77:19:3d:87:3e:06:
1f:41:d8:40:30:bd:b2:30:de:b2:31:72:df:a1:5a:
53:99:aa:1a:c9:29:db:0c:d0:8c:56:88:1c:70:89:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:54:0A:73:B5:FA:03:6E:81:1B:01:3A:43:6F:52:96:2E:42:5C
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/eI9UCnO1-gNugRsBOkNvUpYuQlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.243.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:71:ef:5f:41:44:36:17:2d:bd:56:a0:2e:90:99:12:01:ba:
cc:b4:d3:88:c1:f6:00:a7:f6:04:7d:4a:4d:bd:80:50:1b:e9:
51:c7:9f:8c:d1:6c:41:e8:0d:34:5b:01:2d:ff:c1:a2:3b:7d:
59:eb:37:7b:1d:ae:42:67:2a:a9:17:f3:86:bf:16:67:41:11:
dd:b3:9f:58:e6:05:72:57:2e:71:69:c0:ce:8b:4e:66:e7:40:
e4:d4:59:97:34:d1:a1:78:a5:f7:7c:8b:ed:f7:85:55:85:4e:
4d:8f:46:b0:cc:ce:77:5d:e5:c0:34:1f:62:41:70:57:22:f1:
54:eb:aa:70:90:f8:a0:35:11:1d:d0:c0:fd:8c:8f:79:54:1f:
ba:66:55:28:e6:7e:9a:9d:92:22:25:86:8f:e5:8c:1d:69:68:
5e:49:84:18:ec:ee:37:af:64:2e:1f:3b:5a:04:fd:ef:18:05:
b6:2f:68:75:f1:82:47:d7:f3:99:ab:2e:d7:7f:2e:34:35:0f:
d0:11:58:b9:41:a0:df:2b:b3:01:2d:38:fc:9f:0a:29:7b:4d:
b1:1b:6f:7e:f0:e7:08:7c:9e:f9:e7:ac:19:63:8b:7e:f4:a3:
9c:58:cd:c7:d8:05:6c:45:aa:f2:0c:13:07:ee:15:ed:eb:03:
3a:7d:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:16:53 2024 by rpki-client on console-fra.rpki-client.org