Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/8HrJMj-3EwbTe5PAP7uaZzeYyQs.roa
File: 8HrJMj-3EwbTe5PAP7uaZzeYyQs.roa (raw, json)
Hash identifier: 1JYvv4Rir5akvH5mwtJdbVQ2jo8/LZ2rB9ucMwrxWao=
Subject key identifier: F0:7A:C9:32:3F:B7:13:06:D3:7B:93:C0:3F:BB:9A:67:37:98:C9:0B
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC4938B60035CC9083954AD684A604B27
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/8HrJMj-3EwbTe5PAP7uaZzeYyQs.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400486
IP address blocks: 185.161.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8b:60:03:5c:c9:08:39:54:ad:68:4a:60:4b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f07ac9323fb71306d37b93c03fbb9a673798c90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:27:47:c6:8d:bf:d0:bf:5f:1a:78:d1:29:
d9:0e:c1:62:34:98:87:34:5c:3a:e9:b9:3b:44:89:
24:9b:2b:f6:65:9a:f7:3e:51:fe:2e:71:db:8d:b3:
4b:f0:87:89:3c:71:1c:44:3c:f4:61:a9:a0:ea:e1:
fa:34:29:7b:e9:06:2a:04:61:d8:61:d9:50:9e:15:
be:c6:77:d0:0a:c6:c1:48:2d:dd:4e:df:e5:38:67:
eb:69:5c:df:dd:be:11:4b:5d:18:1f:f7:57:eb:36:
3b:64:88:d6:64:c3:d7:ba:eb:30:b6:de:79:15:8e:
7e:73:f0:b6:eb:64:82:6f:20:41:8d:ca:2f:d7:31:
45:12:9e:dd:dc:be:e4:cc:f2:c9:fe:e7:42:2a:f0:
6a:a6:7a:9d:4c:d9:e6:e6:ef:87:4c:6c:4e:25:ab:
30:80:ce:38:45:ce:e0:f2:ea:7d:f7:d0:56:87:03:
5f:f2:ef:75:a3:77:33:89:0d:56:da:2f:a6:61:cf:
dd:9f:d4:26:3a:02:af:a4:34:4f:50:46:1a:7f:a1:
5c:64:f0:32:a3:f7:d6:64:50:1a:df:37:91:06:6f:
8e:3f:6f:36:b1:dd:de:d6:58:c0:37:f8:56:c6:5e:
d1:65:87:2a:f3:51:1d:f3:cd:c7:97:00:ab:51:1c:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7A:C9:32:3F:B7:13:06:D3:7B:93:C0:3F:BB:9A:67:37:98:C9:0B
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/8HrJMj-3EwbTe5PAP7uaZzeYyQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.189.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b0:f6:0b:17:cc:d1:8e:57:fd:9d:10:da:48:77:3e:22:1c:
37:b7:2e:9c:61:6d:24:5f:94:33:d6:54:6f:38:68:17:7a:c8:
dc:4f:f1:24:5e:bb:cf:da:6f:27:3d:34:ba:58:9c:d7:21:9f:
ca:d5:70:01:cc:23:0d:a9:7f:14:26:67:b1:36:92:4b:59:88:
1a:3c:83:2e:69:ab:07:00:02:5e:9d:16:0a:26:a0:e7:ce:ca:
70:fc:97:14:98:d7:12:72:1d:0c:86:f3:49:d7:d1:5f:15:1f:
79:bb:8e:60:a4:6b:78:5b:47:6e:a7:9e:54:54:17:e9:2d:3f:
12:fa:8f:e5:ed:67:1e:52:5f:66:cc:a2:3d:ec:e3:de:c8:c1:
46:a4:8d:96:5d:c8:d2:ca:d1:71:36:cf:b2:a0:18:47:e9:39:
06:55:fa:28:40:43:7b:7f:17:99:93:73:e7:33:aa:82:32:34:
4b:69:0b:f6:f5:91:3a:7d:b6:89:7c:20:6a:7a:ca:8f:92:8f:
52:72:2c:50:5d:fa:1c:5e:85:bf:91:2d:c9:65:49:84:9c:df:
2d:59:b9:13:c6:ef:2f:b2:f3:ea:03:c3:8d:b6:84:5e:87:3f:
56:d5:b6:74:d6:7c:3a:dd:14:28:19:99:81:42:9c:09:4f:30:
dc:2f:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:27:42 2024 by rpki-client on console-fra.rpki-client.org