Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8cCyvAK19jANjzgnFMtNO3aIAMM.roa
File: 8cCyvAK19jANjzgnFMtNO3aIAMM.roa (raw, json)
Hash identifier: wKXtbdGZTpMOIRvIW9+AYV6877lxFHF3+ucTnJ33ZgU=
Subject key identifier: F1:C0:B2:BC:02:B5:F6:30:0D:8F:38:27:14:CB:4D:3B:76:88:00:C3
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018CC2DABE3A7517B4FE6906B1A126E984CE
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8cCyvAK19jANjzgnFMtNO3aIAMM.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39281
IP address blocks: 194.35.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:be:3a:75:17:b4:fe:69:06:b1:a1:26:e9:84:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1c0b2bc02b5f6300d8f382714cb4d3b768800c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:2a:2e:75:81:60:77:17:2c:8b:64:49:78:
b4:9b:09:2a:d6:d0:ea:dd:00:2f:21:9f:5f:19:35:
ed:a0:3b:28:d4:12:74:16:b7:27:73:05:f5:e4:5d:
b2:27:38:fe:a7:e6:ad:8e:51:82:a8:79:af:25:0e:
34:20:82:eb:e0:a1:9c:e5:91:66:09:5c:6f:2c:b9:
e0:fe:91:7e:17:3f:b8:97:a5:0f:7b:46:9c:2b:d8:
6e:6b:4a:5a:e6:63:a6:c1:6a:78:9a:29:f4:79:66:
11:ea:29:6a:b5:d6:e2:ec:e9:d5:ac:b7:7b:18:39:
04:e5:cc:63:b2:03:28:e7:1e:76:f3:bc:a3:21:4c:
58:3b:f6:e5:b6:a0:f6:f6:fc:d1:b7:37:17:2c:de:
03:89:5a:64:bd:21:68:ba:51:62:ab:1d:df:24:97:
cf:65:a7:70:76:ca:f5:24:ce:45:0c:5c:93:f9:58:
00:89:c9:b2:d2:28:8d:65:83:6c:51:cb:82:c4:b1:
10:b6:e8:5f:b5:c1:0f:e6:95:ac:13:52:3b:6b:34:
97:cf:93:1e:71:1e:01:7a:68:91:03:78:f8:2c:be:
f4:22:13:f2:90:87:86:58:f6:53:0e:7b:e6:ca:a3:
a4:7a:2e:bb:b0:1e:08:25:26:65:f0:49:6a:02:0d:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C0:B2:BC:02:B5:F6:30:0D:8F:38:27:14:CB:4D:3B:76:88:00:C3
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/8cCyvAK19jANjzgnFMtNO3aIAMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:fe:28:fe:49:20:5b:d2:57:8f:35:44:87:1f:b6:d8:9c:76:
4c:fd:1c:2f:ae:da:21:e4:96:e9:c6:71:9e:02:2e:bc:9b:1c:
38:ef:e5:37:45:6b:1c:5d:fd:bd:49:a6:78:29:25:9b:b7:7a:
da:00:3a:c2:21:f2:26:7d:72:d0:c8:9c:b5:e8:46:59:b0:03:
af:b3:5a:34:31:61:a2:5d:9e:2e:a8:34:da:06:c1:d4:2b:8f:
d4:21:b4:2c:ff:c3:3b:28:09:37:c2:40:68:e7:65:19:dc:a6:
46:2c:a8:80:91:0b:10:ce:13:ea:16:d3:47:90:9e:ae:88:a6:
a4:3e:86:8f:67:9e:5b:91:69:aa:44:c3:ab:0c:2e:1a:7b:cd:
1d:32:30:01:cc:8c:25:6e:58:97:b3:56:8e:75:85:4e:b5:21:
2e:c2:64:b8:86:36:4d:fa:61:39:83:38:e1:38:da:6a:3c:60:
58:86:dd:ec:0f:74:76:8d:95:d0:ff:e5:79:32:95:6a:56:70:
a5:b0:79:82:b6:da:ca:47:2a:d4:38:61:f8:51:de:03:9a:82:
75:a3:04:9e:38:1c:1e:c5:0e:d4:b3:88:1c:aa:5d:26:22:70:
fa:e3:fd:f0:a9:74:8e:59:7c:f2:ee:44:8b:b0:9d:bf:d2:f2:
59:c8:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:58:16 2024 by rpki-client on console-fra.rpki-client.org