Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jq6BUp8qRXi9WZlu6Mpzg7onYA8.roa
File: jq6BUp8qRXi9WZlu6Mpzg7onYA8.roa (raw, json)
Hash identifier: QsG0L/3n53moamyMOk3mtCgXk373tb1SvjXwKGfc8Mg=
Subject key identifier: 8E:AE:81:52:9F:2A:45:78:BD:59:99:6E:E8:CA:73:83:BA:27:60:0F
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018CC726A270F227C52F591107D4E9A5EFDF
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jq6BUp8qRXi9WZlu6Mpzg7onYA8.roa
Signing time: Mon 01 Jan 2024 22:30:47 +0000
ROA not before: Mon 01 Jan 2024 22:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 87.254.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a2:70:f2:27:c5:2f:59:11:07:d4:e9:a5:ef:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 1 22:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8eae81529f2a4578bd59996ee8ca7383ba27600f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:61:ab:b3:48:0c:6c:07:5b:d7:85:e2:1e:
36:35:d3:ba:bf:50:59:af:92:73:3e:7c:c3:6d:5d:
2b:6e:a8:68:8f:58:aa:3e:d5:94:77:1f:cc:62:d5:
71:31:b7:74:8a:d7:da:ea:8b:32:42:55:01:6b:2f:
ee:76:b7:38:08:9c:7a:c3:48:d5:5c:38:60:f0:b2:
8d:c9:26:fb:8d:02:61:15:88:b2:8b:0c:0e:46:f4:
2a:28:51:de:07:b6:a1:97:02:3e:f7:39:21:94:e6:
98:74:f4:85:56:cd:f4:7e:bb:3b:04:10:bb:6c:f6:
97:c0:c9:a6:fa:b5:6f:2a:4a:85:1b:f3:09:14:74:
b2:3b:80:51:c4:b5:d8:14:a2:f9:4e:84:95:ed:36:
d2:a6:10:03:46:cf:59:62:92:de:a3:1c:7d:57:8e:
57:75:3f:65:29:c0:05:c8:1e:a7:d3:cd:18:4b:ba:
ff:6f:f8:79:30:2a:23:dc:59:94:92:99:ed:15:38:
e0:6c:c1:14:cb:d3:80:f8:b5:33:07:9f:6f:ad:11:
e5:4a:2d:1a:a6:18:69:8d:64:7c:b2:48:01:8a:b2:
66:35:9f:1e:e4:7f:85:2f:5b:b2:9e:6e:71:ce:21:
88:16:33:b3:0f:ad:e2:82:83:3d:97:35:6c:4f:d0:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AE:81:52:9F:2A:45:78:BD:59:99:6E:E8:CA:73:83:BA:27:60:0F
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/jq6BUp8qRXi9WZlu6Mpzg7onYA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.29.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e1:a8:d0:33:56:f9:66:b6:1c:59:47:95:20:2c:13:94:5b:
e6:b6:73:f8:4c:44:fb:5f:4f:de:04:5b:77:e7:d3:e6:26:6b:
f7:3d:51:bb:05:14:ad:e5:93:ec:ce:f3:b8:76:c1:d3:51:06:
93:7a:e7:a8:c2:eb:68:7c:20:76:e0:92:c7:a6:91:50:27:9d:
5d:ae:92:19:a8:10:59:03:a9:87:6d:43:a3:95:3d:73:59:94:
8f:e9:f1:bd:16:dc:77:32:99:bb:67:ca:a8:25:fa:15:07:2d:
73:43:37:a0:8f:f7:76:af:48:ea:1b:b6:7e:b6:54:05:38:28:
c2:1f:79:f7:26:6e:61:cc:0a:ae:0a:d4:bd:a0:fc:92:2d:0b:
d7:08:b6:65:12:e1:d2:23:49:14:dd:6f:8e:a8:ac:84:73:7c:
b5:6f:6a:21:ff:7e:1b:fe:88:e1:4a:23:79:76:e4:62:c6:db:
89:61:7e:07:6f:59:7f:11:12:73:62:17:1d:88:95:fa:81:1d:
c2:f5:e5:18:36:b8:f6:35:1f:a0:9a:a2:70:22:ff:48:3a:73:
dd:27:3f:0a:5d:11:c6:35:c4:3d:93:26:34:ca:d6:b3:7f:b7:
66:09:e3:a7:7e:fa:f8:d6:22:b8:58:aa:3a:23:a6:b6:1d:d4:
1d:39:d4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 07:42:38 2024 by rpki-client on console-fra.rpki-client.org