Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/8L-s256CoqP7935QRr6m6IIIGAo.roa
File: 8L-s256CoqP7935QRr6m6IIIGAo.roa (raw, json)
Hash identifier: eSXho7qOQ472VAeuCxNiHMxPDN6EGzJOm3l57JWdN0w=
Subject key identifier: F0:BF:AC:DB:9E:82:A2:A3:FB:F7:7E:50:46:BE:A6:E8:82:08:18:0A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0192349B59300E04E5FA89F8E2E0DF863C7B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/8L-s256CoqP7935QRr6m6IIIGAo.roa
Signing time: Fri 27 Sep 2024 17:50:49 +0000
ROA not before: Fri 27 Sep 2024 17:50:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 195.254.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Dec 2024 15:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:9b:59:30:0e:04:e5:fa:89:f8:e2:e0:df:86:3c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 27 17:50:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0bfacdb9e82a2a3fbf77e5046bea6e88208180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:17:d0:63:b9:db:52:08:c0:c0:12:44:41:
72:b6:d2:a5:57:63:a5:eb:71:84:ca:11:dd:3e:76:
12:be:1c:95:4a:42:78:23:6e:fa:61:fd:ba:c4:47:
8d:9a:28:7e:26:d2:95:fe:32:6a:eb:bf:48:38:65:
61:36:eb:1d:ae:c8:ac:30:a8:99:f1:29:be:d8:7a:
c1:f8:d3:67:10:9f:4d:cf:1f:ec:f0:2d:46:e9:ad:
d6:b6:f1:ca:c4:d2:fa:67:ae:4e:fa:c7:a0:75:b1:
87:c3:da:18:bc:ee:50:c1:20:2a:9b:ab:86:25:3c:
8b:fe:40:b8:94:a4:25:7a:19:e4:e4:43:02:f6:2e:
e0:70:89:b5:d0:d0:ff:6f:73:90:6b:4a:ee:f1:ac:
ec:25:77:44:7c:cb:9a:de:7c:0e:5d:ea:33:bb:90:
6b:5b:56:3c:49:1e:90:02:5d:0d:e6:5f:bb:00:23:
90:99:84:eb:ab:1f:89:96:f1:52:e1:fe:10:ce:c2:
08:2b:c1:da:1c:92:04:9d:0a:78:37:86:f8:b7:8e:
1e:b6:61:cc:29:70:af:ae:75:31:86:85:b3:24:0a:
5a:00:1f:9b:ac:2e:26:e4:d2:d9:ec:b1:dd:af:ec:
eb:b4:fa:f2:61:57:51:3b:82:83:a6:38:cf:0f:24:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:AC:DB:9E:82:A2:A3:FB:F7:7E:50:46:BE:A6:E8:82:08:18:0A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/8L-s256CoqP7935QRr6m6IIIGAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
14:95:7c:0b:c3:0f:0b:32:f2:36:c5:19:7f:95:01:ab:63:2f:
66:53:17:ab:0f:50:6b:1c:df:4e:61:23:8a:1d:75:88:c0:91:
59:8a:34:c8:08:8c:f5:d8:1c:bb:e7:26:7b:33:50:b5:55:86:
52:e0:46:bb:3c:5f:2c:88:0d:79:c1:ec:0a:52:cc:fb:8f:7b:
c0:a5:5c:3c:80:6c:e4:5f:f3:b1:f9:e3:cd:bb:ad:e6:44:84:
e2:7d:c0:53:67:56:4c:48:b1:41:41:f6:9c:69:b6:3b:cb:0a:
eb:d6:d5:d8:92:18:bc:63:c3:cf:8f:77:a4:6a:53:3b:49:d3:
01:c0:b3:55:11:26:fd:73:1f:95:ef:dc:a9:9d:83:e3:02:02:
50:08:88:ed:25:6e:94:cc:f6:00:9f:c5:16:29:aa:54:a7:78:
3c:b3:47:64:a6:9f:dc:4e:4c:44:4d:87:48:b5:f6:22:5c:ed:
c6:61:62:22:49:bb:bf:7e:21:ed:58:51:e8:6b:fd:c5:1a:b1:
75:de:95:4e:2c:ae:51:22:a1:74:38:dc:7f:f3:f9:a1:e7:4e:
13:24:5f:ff:75:81:0d:14:22:14:85:c7:24:e1:d6:f1:92:62:
64:cc:a6:c4:57:cb:62:26:e2:45:07:77:77:ae:a4:51:5f:ee:
19:2c:dc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 01:04:54 2024 by rpki-client on console-ams.rpki-client.org