Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ocf8_bBQVwxOEJVROIu1z_nxnOE.roa
File: ocf8_bBQVwxOEJVROIu1z_nxnOE.roa (raw, json)
Hash identifier: XFbLIWZ1E/nDbpkPFSVa1AU3i2QSGwpfZMfzzTjiPqY=
Subject key identifier: A1:C7:FC:FD:B0:50:57:0C:4E:10:95:51:38:8B:B5:CF:F9:F1:9C:E1
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC801FE7A5225A600B8FF33F569E88284
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ocf8_bBQVwxOEJVROIu1z_nxnOE.roa
Signing time: Tue 02 Jan 2024 02:30:22 +0000
ROA not before: Tue 02 Jan 2024 02:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8848
IP address blocks: 176.211.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:fe:7a:52:25:a6:00:b8:ff:33:f5:69:e8:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1c7fcfdb050570c4e109551388bb5cff9f19ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:68:2e:1f:4c:0d:5b:a7:25:7e:a9:3c:b5:56:
a2:04:ac:78:10:b3:8e:c0:ad:e9:d9:f9:6f:49:a7:
72:af:af:31:df:e0:15:6c:1c:84:dc:65:ef:03:6e:
24:5e:6e:ab:2c:d2:8e:98:79:60:a8:61:25:75:e9:
cd:9a:cd:4a:2d:ce:b5:bd:e1:da:37:21:94:fc:83:
81:23:97:69:2e:5a:c8:b6:ce:7b:8f:2f:8b:08:d3:
c3:e6:61:5a:ea:c8:59:de:b0:b8:59:19:2e:70:61:
4a:ca:c6:44:05:a6:81:b1:51:67:04:f8:03:f7:0c:
9b:ba:2c:6d:04:82:16:ef:e2:30:a3:3f:bc:9a:91:
8c:b6:29:84:32:c3:41:f0:57:8f:40:0d:80:63:78:
aa:ce:09:4a:26:29:2c:d4:41:34:c2:4f:6c:71:0e:
62:0d:ba:20:be:db:c4:83:ef:a1:ab:d2:40:61:c7:
79:ef:59:4e:cf:40:91:c1:4b:c7:22:f1:51:9d:df:
66:2f:f9:35:54:5c:32:35:01:ee:7f:ce:48:3a:18:
fc:42:e3:8c:d6:16:4c:c0:12:e6:b4:cf:c6:d8:a6:
f0:49:c8:63:52:15:f9:61:ff:ee:3f:e4:7c:d9:67:
96:31:f1:c2:c6:b8:5f:19:78:98:d9:98:aa:3f:64:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:FC:FD:B0:50:57:0C:4E:10:95:51:38:8B:B5:CF:F9:F1:9C:E1
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ocf8_bBQVwxOEJVROIu1z_nxnOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.211.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:05:4a:e4:78:b2:3e:9e:c9:67:76:06:d4:10:0a:5c:aa:9e:
ae:4c:51:e8:0f:c4:3b:63:97:40:59:eb:cc:bb:ee:db:dc:6a:
9f:5c:83:b9:4d:c8:59:b3:8c:c9:dd:3c:c2:5d:18:f1:a3:1d:
9d:cb:2e:88:b0:56:c7:80:b3:ef:24:3a:24:5c:3f:ff:b2:59:
c9:7e:c8:b9:95:09:8d:e9:19:b1:d4:9e:bb:37:73:90:72:4f:
6f:28:29:a0:79:ec:cc:93:6d:79:05:6c:b3:e8:8b:b0:3c:9b:
86:1d:b2:32:64:f2:35:98:3f:a4:9d:8e:74:07:b4:a3:c9:59:
cf:0a:46:35:33:b6:99:e3:dc:63:46:dd:07:cf:c9:f7:cb:69:
1e:2c:c9:13:a3:79:86:55:7f:7c:fa:7d:e5:81:45:b7:f7:1d:
ad:77:a3:92:2f:a9:94:5f:53:41:ff:78:53:f3:2b:db:71:e7:
bb:69:ef:40:ba:ae:30:4a:26:d2:1c:72:e0:36:f5:63:8e:b9:
e5:50:8a:74:03:08:9e:18:0a:99:d7:18:b0:e1:91:d7:b2:eb:
2d:52:2c:32:cc:7d:62:3a:03:e7:f5:a7:2a:1e:96:5c:b6:24:
84:5d:64:63:26:cd:ce:b6:13:0e:a5:d0:ca:58:d9:ec:eb:50:
4d:02:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:49:28 2024 by rpki-client on console-fra.rpki-client.org