Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/8zrpwdZ0wLQC3Cb2lMKsXQFufCU.roa
File: 8zrpwdZ0wLQC3Cb2lMKsXQFufCU.roa (raw, json)
Hash identifier: LW2x+1WOfWUPEDmmVoU7Ap61eDwcN1BIcPwqHQ+xcKI=
Subject key identifier: F3:3A:E9:C1:D6:74:C0:B4:02:DC:26:F6:94:C2:AC:5D:01:6E:7C:25
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 018CC6B7C007E249D9177D67028A2A0FD7FD
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/8zrpwdZ0wLQC3Cb2lMKsXQFufCU.roa
Signing time: Mon 01 Jan 2024 20:29:40 +0000
ROA not before: Mon 01 Jan 2024 20:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42181
IP address blocks: 194.0.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:c0:07:e2:49:d9:17:7d:67:02:8a:2a:0f:d7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Jan 1 20:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f33ae9c1d674c0b402dc26f694c2ac5d016e7c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:1a:c4:9f:b6:30:1d:a1:f5:2e:0d:29:1e:
e9:87:75:40:90:5d:0f:13:a4:53:1a:90:e4:37:5c:
55:f5:d2:62:27:e9:50:24:e8:a4:33:be:04:75:96:
e3:59:d3:d6:cb:86:15:1e:21:b8:e0:4c:f9:26:c4:
5a:12:26:16:b3:33:c5:34:87:8d:38:b3:71:56:b0:
10:6d:d8:85:cc:c0:fb:4e:52:53:0f:9e:61:a7:bb:
13:6a:80:1c:43:c3:cb:53:de:3a:1d:e0:fa:31:9d:
d7:f6:b6:b5:60:ed:c1:e3:b5:0a:e3:b9:4c:87:30:
69:a1:cb:60:e3:46:f8:45:f6:8d:56:15:17:32:64:
b9:c5:73:bc:6e:ca:e2:ed:2b:59:c5:8b:8e:51:7c:
98:f2:25:d8:be:c4:e6:d4:96:e1:a4:77:74:ad:21:
c1:a6:36:8b:8a:4c:e6:a0:7a:ff:a8:73:eb:ba:1d:
f0:70:88:f3:b8:88:87:76:56:1e:75:a1:b1:43:85:
d0:2e:fa:b9:d1:81:97:40:7b:84:3e:21:d8:8f:81:
a9:80:70:9b:b0:84:cc:90:2c:c9:d5:fa:6f:2b:14:
84:e7:47:01:64:5b:bc:80:55:5e:69:66:d8:96:56:
da:f6:1b:3f:ec:8f:49:bd:fb:9d:db:e1:b3:3f:ac:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:E9:C1:D6:74:C0:B4:02:DC:26:F6:94:C2:AC:5D:01:6E:7C:25
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/8zrpwdZ0wLQC3Cb2lMKsXQFufCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.160.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7a:11:f6:a3:34:0b:7c:b7:b2:85:9c:6c:22:4c:21:11:82:
69:38:20:4a:ed:78:86:7e:8a:2d:29:e1:a6:0d:5c:07:c1:3f:
b1:c1:6f:6a:a8:30:d7:21:5b:b0:43:6e:33:0f:b2:c3:c0:9b:
5f:4c:4b:50:bd:b1:29:e3:1f:6b:b3:ae:fc:f0:23:2e:e5:4c:
e1:3a:cd:9d:b1:ef:97:ce:5b:91:37:c0:d1:5f:e7:52:10:37:
53:66:45:22:da:39:9b:61:58:65:02:e4:e6:3c:82:ba:e1:06:
57:0c:e3:fd:c2:31:8c:86:ad:bd:b9:c6:16:df:f6:1c:e2:27:
4a:7f:74:93:2d:6b:d1:33:f8:7a:fc:e5:bd:98:c0:c6:58:dc:
d8:5b:b5:85:95:8d:ba:8f:65:ef:9b:ca:a6:31:4c:db:60:8f:
5b:0c:b6:26:39:df:f0:34:62:cd:c0:59:24:65:eb:d4:56:c3:
26:fb:50:11:ea:a0:0a:bc:6e:55:ed:f5:63:26:06:a0:1b:06:
c0:a0:11:2a:33:95:c9:c3:59:8e:08:49:d9:a6:77:6b:79:d7:
b6:c4:30:14:ef:23:93:02:71:39:fb:e5:9f:12:de:c5:f8:d9:
77:d2:d7:a6:87:58:60:6e:3f:4f:7a:9a:da:b1:bd:37:ff:4e:
b0:0d:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:41 2024 by rpki-client on console-ams.rpki-client.org