Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/8T-3kj-ea0P6832Po8m37l7g5i4.roa
File: 8T-3kj-ea0P6832Po8m37l7g5i4.roa (raw, json)
Hash identifier: DIuLz4hzZyXpmZuN+HLumeezsf/kGkCUT8yIXGW4xCY=
Subject key identifier: F1:3F:B7:92:3F:9E:6B:43:FA:F3:7D:8F:A3:C9:B7:EE:5E:E0:E6:2E
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018CC8DEDFAAEC22DDFD32C4C19B55AC0D6F
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/8T-3kj-ea0P6832Po8m37l7g5i4.roa
Signing time: Tue 02 Jan 2024 06:31:38 +0000
ROA not before: Tue 02 Jan 2024 06:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204259
IP address blocks: 212.110.159.0/24 maxlen: 24
185.76.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:df:aa:ec:22:dd:fd:32:c4:c1:9b:55:ac:0d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 06:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f13fb7923f9e6b43faf37d8fa3c9b7ee5ee0e62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:1e:22:21:8c:f8:eb:37:aa:79:8f:87:c3:
d2:3a:79:5b:92:8f:05:52:1f:eb:12:a7:b0:a1:67:
32:2a:e0:40:37:55:99:64:c7:d7:14:c7:16:8b:65:
e9:49:2d:14:8b:56:74:bf:f4:e8:e4:34:d4:da:42:
86:a5:44:a6:fc:fe:47:82:02:16:d4:7e:0e:1d:de:
fc:ae:37:ca:62:b3:35:73:ca:61:70:f0:b7:72:91:
16:40:dd:cb:58:60:41:44:8e:51:5f:47:d9:06:0c:
45:bf:e7:7f:7f:62:6b:6c:10:06:1f:72:0e:ba:f0:
0d:16:ab:99:84:fb:b7:91:1c:ec:b8:24:2b:fc:7a:
97:11:d9:d1:61:a8:94:34:a1:e4:f4:2d:ee:b4:fe:
b6:be:0a:2a:7b:11:95:6c:2c:ab:38:ac:93:02:38:
2d:73:b0:b1:d1:aa:dd:aa:aa:bc:1c:62:6f:b6:70:
f7:26:8b:0c:38:3f:ba:0b:68:9a:71:dd:0d:05:36:
b2:0c:1a:bc:65:36:dc:41:27:d3:25:ff:72:90:32:
f8:2c:8c:ce:04:73:f9:3f:79:cc:4f:59:41:34:0f:
c7:16:8e:91:68:d2:0f:96:ce:65:3f:60:4e:c4:65:
5d:3f:6b:a3:9c:f8:e4:ad:40:59:37:0c:7e:4d:30:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3F:B7:92:3F:9E:6B:43:FA:F3:7D:8F:A3:C9:B7:EE:5E:E0:E6:2E
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/8T-3kj-ea0P6832Po8m37l7g5i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.83.0/24
212.110.159.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f6:30:e9:ff:90:21:32:71:da:82:46:54:b2:b2:06:96:c3:
f0:6b:73:70:88:cf:0a:a3:21:f5:ee:69:90:96:bb:20:c4:3b:
e6:bd:67:f8:77:ea:27:22:af:68:43:a6:b2:6b:4c:34:55:b0:
56:90:4d:7b:7d:51:4e:32:7e:58:88:69:28:7d:ef:f8:cf:2a:
51:67:ab:43:33:a9:30:c7:38:39:c5:a2:4c:c0:89:d0:73:f3:
ab:a4:86:ba:4c:d7:3e:74:9c:42:4c:03:37:17:0c:b2:a5:de:
6a:b2:e8:3e:fe:1c:9f:39:ed:e2:0f:45:5a:fc:bc:c0:c1:07:
1e:b2:88:eb:4d:20:5d:d4:47:c3:67:c6:9b:4a:61:ca:3d:ef:
89:88:20:b4:1b:f3:0b:35:13:82:36:bf:9e:75:87:8e:75:e2:
f6:12:71:d6:6f:80:6b:8b:0f:b0:1f:f5:ea:97:77:d1:41:b0:
b3:4b:68:11:48:38:f4:8f:97:41:c8:5f:2e:a9:87:ae:9f:b1:
3e:70:c9:b3:9c:57:40:2e:70:f6:f4:ee:1f:53:97:68:d8:73:
23:c4:86:ef:a4:da:12:ec:33:67:ee:07:b3:7d:5f:36:6d:dd:
e0:7c:f8:92:2f:8f:f1:ae:77:24:93:03:2e:28:01:64:04:2d:
b1:dd:1f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:18:03 2024 by rpki-client on console-ams.rpki-client.org