Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/j4iK8X4eDkrdOGm5iVsoO01Biu0.roa
File: j4iK8X4eDkrdOGm5iVsoO01Biu0.roa (raw, json)
Hash identifier: 0OZtdf9nGjEDUXjaW78Vz1GDfgvz9nXwvG0zWdK9V6Y=
Subject key identifier: 8F:88:8A:F1:7E:1E:0E:4A:DD:38:69:B9:89:5B:28:3B:4D:41:8A:ED
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 018CC5DD39118CBDC722062DA918156BF34C
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/j4iK8X4eDkrdOGm5iVsoO01Biu0.roa
Signing time: Mon 01 Jan 2024 16:30:58 +0000
ROA not before: Mon 01 Jan 2024 16:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31132
IP address blocks: 178.249.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:39:11:8c:bd:c7:22:06:2d:a9:18:15:6b:f3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jan 1 16:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f888af17e1e0e4add3869b9895b283b4d418aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:29:ce:91:6c:76:56:f4:6b:9c:43:99:0a:
b7:78:ae:a3:9a:fd:da:50:be:a7:3e:7f:e9:f1:2c:
dd:ae:85:ec:25:64:39:ae:45:20:ae:48:93:b7:79:
d3:b2:e1:72:f9:b7:35:98:85:15:e9:db:57:5d:06:
34:fe:0b:0a:0d:06:6f:1b:f0:20:2c:12:e3:1b:ff:
80:0e:f9:30:6e:59:b6:06:98:52:da:98:9e:4e:9e:
d8:82:50:c3:08:0d:d1:09:00:28:86:0a:25:1b:b9:
00:a7:5e:9c:40:8f:c6:ca:b0:02:cd:29:d0:5e:87:
68:a1:07:63:d4:2b:6e:47:a8:7a:52:6e:18:92:9c:
72:27:56:7b:f5:d4:16:13:5f:48:79:2f:ac:e1:7a:
f0:8d:39:44:99:66:d2:9b:c5:71:84:10:9a:e7:9a:
18:f9:f4:d0:ec:96:aa:25:be:2b:bb:da:02:cb:d8:
3b:b3:47:d5:ac:e8:ea:0d:cd:78:c7:33:5e:e7:0b:
3c:52:5f:68:2c:15:61:25:64:8b:20:ab:00:d1:de:
88:68:2c:94:b8:3f:42:c5:18:58:a6:a4:b9:dc:78:
af:16:c8:00:8c:df:ba:73:59:69:59:02:84:fc:6d:
66:de:a7:31:39:28:d7:b3:67:62:eb:ad:7a:e5:e0:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:88:8A:F1:7E:1E:0E:4A:DD:38:69:B9:89:5B:28:3B:4D:41:8A:ED
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/j4iK8X4eDkrdOGm5iVsoO01Biu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.164.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ea:44:30:b2:02:ac:e6:84:6b:41:25:08:7b:c0:68:cf:43:
08:31:d9:5d:6a:6c:51:d0:86:94:85:d5:bf:25:2b:7e:e7:d3:
d1:44:1d:5f:4d:3d:8a:a9:ef:ca:12:d0:4c:49:97:9d:5c:7e:
a0:09:72:d8:cc:d5:14:c9:c6:8a:bd:9c:32:8e:f9:e7:59:e8:
da:7e:24:5b:a4:10:74:0c:3a:7c:14:bc:06:85:a4:5c:13:05:
34:04:1b:5e:b7:0c:d6:51:c4:88:99:ba:98:1d:ee:23:b1:c0:
10:22:55:17:95:15:38:e7:0e:1e:37:2e:f8:36:45:60:4d:15:
11:f2:de:78:25:6c:94:0f:19:9f:34:ed:14:ce:22:bd:6b:99:
5d:3b:1c:e8:c6:f4:fd:a3:5a:3a:1d:ba:ee:dd:27:01:e6:da:
73:e9:63:ff:a6:a9:f7:34:29:3f:b6:5d:36:ca:23:ab:81:41:
2e:dc:a1:03:e2:b7:68:fb:5e:40:ec:f5:09:3b:99:1a:9a:5d:
40:dc:be:6d:fe:a5:05:02:0a:01:bb:71:ec:9f:d7:20:04:94:
e5:6e:d3:97:0f:ff:6a:9d:00:8e:00:03:86:aa:bb:32:1b:c6:
38:e2:c2:27:e2:f1:ed:1c:f1:64:e1:60:ea:46:6d:96:c6:06:
17:da:0f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:58 2024 by rpki-client on console-fra.rpki-client.org