Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/g3vAXDU3V0pjcx3jqHuZe8vkFv8.roa
File: g3vAXDU3V0pjcx3jqHuZe8vkFv8.roa (raw, json)
Hash identifier: xwrPupJyTSgtXq8WEJv2cqH3UIl7MRXc3Rvae7hOpfU=
Subject key identifier: 83:7B:C0:5C:35:37:57:4A:63:73:1D:E3:A8:7B:99:7B:CB:E4:16:FF
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018CC7958FE590A8864223CCEB7022831D2C
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/g3vAXDU3V0pjcx3jqHuZe8vkFv8.roa
Signing time: Tue 02 Jan 2024 00:31:56 +0000
ROA not before: Tue 02 Jan 2024 00:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35106
IP address blocks: 194.69.104.0/23 maxlen: 24
2a01:110:9008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8f:e5:90:a8:86:42:23:cc:eb:70:22:83:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 00:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=837bc05c3537574a63731de3a87b997bcbe416ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:5b:41:60:16:29:e7:dd:de:9f:da:c1:37:
30:be:eb:65:82:eb:81:64:21:74:6d:83:ef:ac:41:
9d:c5:d1:4e:62:b7:cb:ed:df:cd:60:d2:e1:7e:2f:
0b:fe:09:6c:66:ff:54:56:0c:ba:ea:e6:08:bc:8f:
2e:a2:91:db:f7:d0:d4:a8:f6:83:64:f7:f2:d9:9f:
78:f2:a0:a4:d5:9c:de:17:2f:e7:c0:88:7e:9a:85:
44:57:e3:bb:1e:8f:74:3a:ce:6a:15:08:96:0b:07:
ba:82:4b:d3:13:d2:11:41:7f:b8:1d:cc:c1:c1:c5:
0e:24:b9:aa:28:e9:19:c4:a8:e4:0e:83:63:00:5d:
21:6b:f6:b4:76:94:4f:7d:d3:6a:73:01:a6:43:f7:
2c:46:a1:a0:4f:e3:e6:a0:ed:54:7f:49:f0:a2:69:
16:a4:ed:cc:6c:b4:65:c2:78:fc:33:42:f1:22:1b:
b0:d9:fd:cf:d6:cc:45:6a:c8:8f:8e:a4:2c:a5:ef:
f2:1a:ea:dc:09:5e:93:b8:aa:04:b7:62:a3:37:56:
55:1b:f8:75:52:80:8f:87:40:77:5e:42:2b:46:95:
d6:40:d8:e5:89:17:20:fa:25:06:96:0c:00:5f:14:
56:58:18:34:5b:d9:64:13:87:35:0d:5b:ef:18:fc:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:C0:5C:35:37:57:4A:63:73:1D:E3:A8:7B:99:7B:CB:E4:16:FF
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/g3vAXDU3V0pjcx3jqHuZe8vkFv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.104.0/23
IPv6:
2a01:110:9008::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ca:c1:c8:1f:4b:66:0c:b2:83:fd:e5:3f:01:06:0a:fd:f4:
60:1b:b9:55:24:63:bc:0f:33:05:74:a2:d3:a6:10:68:11:e3:
4f:1c:75:ef:81:95:54:b5:7d:31:04:20:29:30:80:76:70:e7:
8f:98:1a:f5:c8:bd:af:6d:7e:31:40:5e:5a:87:29:9d:b2:fe:
dd:90:e8:ac:27:86:f3:f4:aa:24:77:6f:f5:2c:b7:0e:f4:e9:
86:8a:e6:9f:f6:da:43:d4:0f:1a:5b:22:1d:58:28:58:3a:fd:
14:00:79:83:7e:7f:1b:83:42:aa:c4:be:4e:1d:fd:5c:5d:66:
d4:c0:44:17:78:85:95:ee:9c:41:1d:a8:3c:53:0d:94:05:ea:
1f:8c:2a:08:85:14:50:ce:96:2e:0a:1f:92:64:8e:10:3e:f9:
07:e2:e2:c9:56:44:18:d2:f7:5b:56:05:75:ca:b8:95:2b:55:
0a:87:1a:74:4a:4e:92:17:e7:77:25:f2:40:1e:3f:5d:c2:c4:
ae:c0:ee:5c:96:d1:d3:be:6a:83:ed:38:c4:7d:1b:be:6b:85:
5d:2c:d1:36:1c:06:29:c6:4c:02:dd:95:d4:45:9c:c4:99:56:
8a:17:4f:e0:4b:80:30:5b:7e:9d:2b:b6:5e:c6:f8:ac:8a:0b:
9b:c7:a4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 22:17:45 2024 by rpki-client on console-fra.rpki-client.org