Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/x6HmUl9ddc6S8Syg7M_DrF1PaMg.roa
File: x6HmUl9ddc6S8Syg7M_DrF1PaMg.roa (raw, json)
Hash identifier: sajuSO2iQ/5NDl9JYTojatVJisKYD7uB5Uk7UJfq5iY=
Subject key identifier: C7:A1:E6:52:5F:5D:75:CE:92:F1:2C:A0:EC:CF:C3:AC:5D:4F:68:C8
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 018CC3B6A9219291268C81933830DCDC4271
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/x6HmUl9ddc6S8Syg7M_DrF1PaMg.roa
Signing time: Mon 01 Jan 2024 06:29:37 +0000
ROA not before: Mon 01 Jan 2024 06:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60651
IP address blocks: 194.38.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a9:21:92:91:26:8c:81:93:38:30:dc:dc:42:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jan 1 06:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7a1e6525f5d75ce92f12ca0eccfc3ac5d4f68c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:a7:bc:18:16:30:d1:9a:0c:b6:ba:61:3f:
27:19:c7:58:16:f3:af:e6:eb:59:ff:6d:c4:0d:20:
f5:c0:e7:1c:9d:bf:82:cc:d5:e4:21:6c:2d:af:75:
18:34:2d:14:62:68:98:ef:2e:f6:33:db:80:3b:1a:
18:c5:e5:79:e1:15:9e:2d:18:f8:fd:13:c3:7a:dd:
62:9d:ea:86:d7:29:13:f3:53:df:bc:2c:91:9b:05:
8b:00:2b:b3:79:84:f5:60:6f:c6:65:dc:01:e1:4d:
f8:7e:f8:a3:b4:c9:20:2f:0d:95:f3:70:de:de:c8:
07:9b:26:23:fb:6c:2c:11:1a:4d:53:bc:3d:56:ad:
4b:41:79:da:41:7d:91:b5:0a:07:d1:04:26:5f:f1:
05:ed:1c:ec:9e:f2:85:a7:e4:da:1e:49:04:c0:5b:
9b:3d:b7:e2:fa:0a:96:d1:ab:86:4a:79:c2:56:6d:
b9:91:d0:52:9c:3e:a5:97:06:9e:67:77:31:72:4d:
d1:55:8e:5f:64:6d:79:d0:57:17:e6:16:1f:d5:0d:
f0:1b:ef:cf:2f:2e:15:d8:a3:67:2d:1a:1c:ba:4e:
fa:c8:0c:50:9b:40:52:46:d6:2f:da:db:b3:3c:52:
3c:fe:e9:b3:cd:7f:72:88:aa:63:4e:f0:7f:65:6e:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:E6:52:5F:5D:75:CE:92:F1:2C:A0:EC:CF:C3:AC:5D:4F:68:C8
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/x6HmUl9ddc6S8Syg7M_DrF1PaMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.8.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ef:32:3d:ee:22:fd:bd:0d:d5:38:c5:9a:2f:7a:37:e4:bd:
bb:6c:43:ad:ba:8d:e3:75:b8:2e:75:75:cd:8b:35:74:8c:0d:
b4:47:84:51:aa:5d:10:8a:ab:4f:6c:a3:49:ed:42:12:21:17:
6f:86:d8:9f:7e:10:8f:a7:52:81:73:05:8e:95:26:a3:44:20:
4c:51:b1:7e:a8:8a:a2:55:46:59:65:7c:fe:ce:51:9b:75:81:
47:8f:3c:4a:5b:d8:9f:97:88:b2:25:8c:2d:0e:a4:83:e5:2b:
63:d5:ff:73:b0:cc:d3:6c:cc:11:ec:fb:0b:fd:3a:24:4e:1e:
3b:fb:1e:32:be:6c:e9:88:c0:bc:ca:f8:39:80:c4:ec:d9:99:
42:d1:8e:96:9f:50:1a:ed:59:17:c1:fc:41:51:24:3e:27:e6:
87:a2:47:d7:06:f6:1b:23:7a:91:e4:70:ba:55:95:01:3c:3a:
70:df:66:25:98:99:e1:f4:a8:dd:df:f3:4f:a3:20:87:11:25:
38:3b:63:60:3b:59:4b:9a:60:bf:c6:c6:70:4a:3f:8c:5e:0b:
d2:d7:0a:3a:78:72:2b:a2:d6:be:45:00:63:bf:d4:29:ea:28:
68:07:e1:5a:d6:b0:ce:1b:61:23:fe:d2:e0:94:5d:f9:9e:8e:
f1:14:ee:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:02:49 2024 by rpki-client on console-ams.rpki-client.org