Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/d_ceRa9Ha7ojPYMzZL3UDShBgKA.roa
File: d_ceRa9Ha7ojPYMzZL3UDShBgKA.roa (raw, json)
Hash identifier: 8oDJEoly8hBHzsMeI7yAZU5RwNw6fst5gixjavMb7AY=
Subject key identifier: 77:F7:1E:45:AF:47:6B:BA:23:3D:83:33:64:BD:D4:0D:28:41:80:A0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0190FD60E82329A4726CA3D9F640FE7AFDC6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/d_ceRa9Ha7ojPYMzZL3UDShBgKA.roa
Signing time: Mon 29 Jul 2024 07:25:04 +0000
ROA not before: Mon 29 Jul 2024 07:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395374
IP address blocks: 193.8.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:60:e8:23:29:a4:72:6c:a3:d9:f6:40:fe:7a:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 29 07:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77f71e45af476bba233d833364bdd40d284180a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:e2:a6:6e:78:68:58:6f:aa:1a:82:1c:a6:
3f:b3:87:09:51:b1:07:c2:a2:d1:25:0f:c0:27:d9:
b4:71:76:1d:bc:d8:c2:27:3e:3b:50:c5:9d:32:21:
39:28:bd:b6:32:6e:45:64:fc:d6:3a:b3:45:c3:3e:
90:5f:69:54:95:f0:e0:3b:a5:0d:f6:46:ba:e7:ba:
d6:5a:23:e4:19:e8:44:17:bd:5c:07:c6:16:92:41:
0c:c8:d3:16:77:38:0d:96:90:57:0c:88:dd:0e:d1:
33:af:ed:c0:a2:b8:25:6a:8c:dd:9a:ad:32:07:d7:
98:9d:11:43:4d:47:bd:4a:69:48:6e:bc:d7:00:29:
bd:84:67:c9:b4:68:d9:a4:d4:92:98:1c:1c:43:57:
fb:79:12:6c:cb:9f:db:2d:ee:0c:5c:de:cf:c5:f3:
94:08:16:df:39:99:77:e0:d4:6b:2c:58:1d:16:2c:
6f:bb:68:bf:bc:58:c1:a0:3a:ec:1b:5a:64:f8:40:
d4:2b:9c:7a:2e:af:19:45:87:f9:ca:2b:96:eb:d2:
50:11:81:ed:3f:5d:b1:a6:38:be:81:b8:74:c2:af:
03:ee:05:04:a9:af:49:4e:d6:11:48:52:14:f3:8f:
a7:72:27:d6:4c:56:fb:f9:55:56:de:9b:93:37:5b:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F7:1E:45:AF:47:6B:BA:23:3D:83:33:64:BD:D4:0D:28:41:80:A0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/d_ceRa9Ha7ojPYMzZL3UDShBgKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:81:21:5b:7c:a6:3e:eb:cf:db:3e:95:d2:83:85:c1:28:53:
e7:1d:42:1d:87:50:ae:8d:0c:59:69:d4:f7:c8:31:b2:ec:c7:
4d:64:72:46:bf:7e:07:09:ac:45:27:bc:5c:29:27:14:d6:fc:
f1:0a:f8:e9:10:2c:29:7b:c3:c3:ae:9c:b6:fa:b9:08:da:92:
21:74:ad:34:a7:3b:d6:4c:a4:99:ab:89:bb:c7:6a:57:f9:4a:
b4:38:b2:7b:81:9a:5d:25:64:bf:7b:60:61:0c:67:0d:59:0e:
cd:e3:e4:60:67:47:10:ee:37:3c:68:d7:2e:c3:0e:2b:9e:b7:
e7:89:f0:ef:fa:a6:6d:2c:19:ea:fc:b8:72:bd:ca:51:b0:e5:
e7:9c:52:9b:0a:ae:d2:20:b8:96:eb:fe:21:36:b5:2b:40:8f:
6d:b8:a6:5c:84:49:b2:42:3c:5b:a0:f5:ce:0a:19:e8:2f:ae:
8b:8e:69:0a:28:88:9a:e1:9e:65:2a:81:00:bf:e9:ec:1b:a3:
ab:b5:59:72:ee:95:17:82:a7:1d:f3:de:2f:9b:bd:12:05:2a:
28:91:0a:c2:5d:65:98:27:c7:24:8b:6b:af:43:a6:51:5f:2b:
1f:dd:d2:fd:e0:53:94:4b:09:24:66:3a:8b:01:5e:69:3b:bf:
41:61:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:31 2024 by rpki-client on console-ams.rpki-client.org