Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/h2Deq6PpMb3krBk54oKE67UOKU4.roa
File: h2Deq6PpMb3krBk54oKE67UOKU4.roa (raw, json)
Hash identifier: at37EEqw3LRlDclhWgySCYhp5bADxYq+69wnFqjnxjA=
Subject key identifier: 87:60:DE:AB:A3:E9:31:BD:E4:AC:19:39:E2:82:84:EB:B5:0E:29:4E
Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial: 018CC3B6A479CF543C9BB97B06D999B611FA
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/h2Deq6PpMb3krBk54oKE67UOKU4.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31017
IP address blocks: 194.102.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a4:79:cf:54:3c:9b:b9:7b:06:d9:99:b6:11:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8760deaba3e931bde4ac1939e28284ebb50e294e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:68:ac:13:22:46:4c:c6:69:59:6d:ca:2b:
13:ac:da:aa:a0:e0:38:c5:1f:91:ea:13:1f:3b:ad:
a6:13:de:32:f3:0d:a8:ac:e6:05:8b:3a:bf:75:4e:
88:66:1c:f3:41:7d:7f:3d:10:c2:f5:44:68:8b:57:
70:a9:d3:3b:9f:f1:54:fa:83:1a:ea:44:06:c1:ee:
67:cb:a0:b2:ad:3b:db:07:70:7f:19:d4:e6:68:d9:
05:1c:ae:02:d8:52:91:17:d4:d3:53:1e:e2:48:16:
0b:93:2f:54:da:d7:df:11:d2:33:be:88:71:32:5c:
a9:88:95:d5:77:35:71:75:c7:79:45:8a:66:2f:17:
e3:7a:bc:d0:31:cd:2c:0c:17:43:9e:7f:83:c5:a0:
67:82:86:63:9a:9b:ff:ad:7d:82:98:c2:27:25:93:
a6:48:56:35:87:79:fd:77:f0:c1:b4:19:8a:5c:95:
93:18:a5:fc:0d:55:f0:c5:a0:f6:ad:4c:71:0d:20:
af:ff:63:a9:4a:0f:85:8d:67:46:5a:80:8d:c3:4a:
15:eb:6f:01:32:ca:80:b8:9e:0a:7c:a0:2b:35:7c:
b0:6d:e7:4c:54:13:f5:eb:9c:79:56:e3:9c:06:7b:
8d:51:57:24:a2:5d:21:ec:34:3b:db:bd:21:43:5b:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:60:DE:AB:A3:E9:31:BD:E4:AC:19:39:E2:82:84:EB:B5:0E:29:4E
X509v3 Authority Key Identifier:
keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/h2Deq6PpMb3krBk54oKE67UOKU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:68:d1:b6:00:f5:1c:68:3a:86:5d:73:c9:ff:7d:8f:ac:4c:
6e:e3:f6:4e:a4:de:a8:79:69:2c:d3:72:55:92:35:1e:b3:49:
09:f8:f4:b6:f3:7d:28:66:60:84:a0:38:b8:bf:fb:2a:1f:51:
58:21:ab:70:71:b2:07:b9:1d:d2:b1:f2:b7:56:c8:69:97:4e:
26:8d:84:8d:8e:e3:78:dd:0c:f3:85:32:31:0b:2a:21:35:90:
36:82:66:74:1b:36:8b:db:46:e3:7c:77:84:80:7f:f5:66:c7:
13:f7:a8:67:b0:10:84:50:70:78:2e:7b:3f:7d:b0:50:26:6c:
bf:25:9b:f4:27:70:be:42:6a:55:8e:85:db:33:0b:3d:11:d1:
e5:7b:23:f1:6f:28:47:09:22:00:af:34:19:50:fc:59:5d:7b:
ed:b4:1f:3f:f0:d4:5c:7f:1b:1f:f6:09:8e:7d:85:77:17:e8:
3f:0e:6d:1a:fc:49:ac:90:7c:53:91:b7:60:ea:33:cb:64:8c:
59:55:a7:96:fb:65:f0:ba:21:34:56:20:22:82:a3:ab:ab:8a:
c4:37:b7:18:86:a5:b6:19:0c:66:2e:8b:6c:ed:59:b4:1b:cf:
ff:da:d3:de:da:ae:e3:b1:73:ef:6f:d8:e3:3e:b3:62:f0:c2:
68:bc:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:56:51 2024 by rpki-client on console-ams.rpki-client.org