Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/7vo8zoFpy5lPQTg-PqsS7Uh9x-8.roa
File: 7vo8zoFpy5lPQTg-PqsS7Uh9x-8.roa (raw, json)
Hash identifier: yFuAylcjFhfwI7lj2y2jMW5pRcHUjLX+AzJFprv9xq8=
Subject key identifier: EE:FA:3C:CE:81:69:CB:99:4F:41:38:3E:3E:AB:12:ED:48:7D:C7:EF
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500B08F81BAD20477B807573812DFB6
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/7vo8zoFpy5lPQTg-PqsS7Uh9x-8.roa
Signing time: Mon 01 Jan 2024 12:30:05 +0000
ROA not before: Mon 01 Jan 2024 12:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 92.61.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b0:8f:81:ba:d2:04:77:b8:07:57:38:12:df:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eefa3cce8169cb994f41383e3eab12ed487dc7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:58:4c:24:b1:ef:92:13:94:75:e5:ab:a7:
45:d6:b4:6f:4c:60:21:53:68:b1:f1:2d:39:4e:a4:
17:5d:9c:d9:7c:1f:36:fc:d6:62:bc:13:6b:e2:83:
5d:97:f5:06:aa:e8:3a:57:be:46:5b:c5:9b:23:d0:
3d:80:cc:d5:f6:6e:4a:d2:e8:ec:c5:d3:06:00:86:
9b:2c:22:c4:c2:9c:ee:69:6d:8c:d9:23:eb:4b:15:
66:fc:8d:1f:5a:79:38:ab:a5:be:eb:d6:5a:d4:f6:
a5:04:4c:ee:60:71:b7:7f:46:40:ca:ab:ba:b9:4a:
c3:03:c9:bb:85:2b:89:46:57:2a:46:b5:ef:77:01:
9e:36:fd:cb:76:69:a7:9e:f4:c4:ad:f5:a9:1c:07:
3d:32:60:ff:4e:d1:a1:cc:82:5e:e0:d3:64:02:d2:
7f:1e:1a:f4:a7:f3:49:9d:73:4a:da:6d:5b:66:7e:
42:d4:16:db:df:5f:2f:5b:f4:2a:18:1b:88:f8:ef:
24:bc:a0:94:a3:44:d8:34:2e:70:92:4e:97:4e:db:
cc:3d:6d:38:fc:fb:99:79:62:1f:ff:94:b0:80:9a:
a1:67:ec:d1:a7:77:a7:3b:62:13:be:9c:c3:d3:0d:
6f:5d:89:6c:0e:89:90:21:c8:5a:0e:75:be:73:06:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:3C:CE:81:69:CB:99:4F:41:38:3E:3E:AB:12:ED:48:7D:C7:EF
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/7vo8zoFpy5lPQTg-PqsS7Uh9x-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.108.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c6:b3:48:74:42:f2:97:02:10:43:e1:4a:4a:f8:07:67:03:
98:9b:72:3e:38:59:7f:9d:6a:0c:4e:0c:43:6b:36:1e:c7:51:
9c:7a:99:0f:03:32:57:93:14:92:1e:4a:01:c0:1f:e7:82:9e:
d6:fe:61:5d:5c:4f:f7:21:56:e0:15:52:71:41:26:ee:fb:34:
3f:35:07:5a:17:58:66:e7:5e:fc:26:b2:4d:81:b2:6e:57:f0:
1f:20:36:40:4d:30:fd:86:fb:df:90:9c:47:f6:86:ae:88:62:
d2:6c:2f:be:9a:fe:21:76:65:ec:ea:de:14:34:93:62:4d:d5:
85:9f:4c:cd:d8:90:03:92:5f:41:b0:ab:67:55:7a:31:85:c9:
d1:50:dd:a4:b0:4f:e2:a1:d8:41:c9:41:f4:f9:87:67:07:5d:
da:e3:c9:c8:7e:7b:df:bd:5d:d1:5f:20:81:c3:f2:49:15:4d:
f5:2b:61:da:a4:87:a7:ff:59:ac:bd:0a:88:25:db:49:7d:39:
f3:6f:78:d8:01:fb:19:ea:26:09:4c:c0:26:9c:86:6b:52:fb:
72:8a:a6:35:8d:63:ef:6d:cb:64:32:d6:65:29:38:b6:8e:f3:
09:b2:aa:6a:6c:73:85:7d:b5:75:a5:e6:b1:40:96:37:70:9f:
95:83:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:43:34 2024 by rpki-client on console-ams.rpki-client.org