Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/hL4ambauJl2jntmn-hlkh1Hfw74.roa
File: hL4ambauJl2jntmn-hlkh1Hfw74.roa (raw, json)
Hash identifier: Yd/kfUct8fpMzdIUyT3O3kd876X63dCXgTycz80TlXg=
Subject key identifier: 84:BE:1A:99:B6:AE:26:5D:A3:9E:D9:A7:FA:19:64:87:51:DF:C3:BE
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018EA9A51CB06F9A653182DA5AD520A0E661
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/hL4ambauJl2jntmn-hlkh1Hfw74.roa
Signing time: Thu 04 Apr 2024 15:05:54 +0000
ROA not before: Thu 04 Apr 2024 15:05:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 188.209.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:a5:1c:b0:6f:9a:65:31:82:da:5a:d5:20:a0:e6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Apr 4 15:05:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84be1a99b6ae265da39ed9a7fa19648751dfc3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:51:7a:15:4c:77:10:f9:45:7f:6d:4d:98:
9c:73:9b:53:a2:f1:8b:a1:33:5c:2d:a9:ce:7a:3b:
15:b2:76:9d:3e:1e:64:46:20:3a:c9:b9:1e:b4:8c:
18:d9:3a:ca:5e:b6:ea:76:46:b2:70:51:58:37:ee:
20:d6:0a:88:8c:11:6d:e9:9f:79:c9:74:55:c3:81:
73:97:8f:f6:25:f9:4a:6f:74:f1:b6:e5:d0:12:6f:
e3:45:53:63:76:b0:8f:37:54:d1:a2:aa:ba:c4:ca:
7e:c3:7d:2f:d6:df:c1:4d:32:79:86:d6:93:3f:64:
ec:96:60:aa:15:9d:7f:ad:04:a5:b7:99:d7:1a:04:
d7:63:a0:83:75:ac:7c:5a:99:40:e5:65:fa:07:9c:
64:95:5e:3c:dd:60:13:ba:49:69:5f:5a:02:3e:72:
95:f3:1d:38:2c:85:38:03:17:e7:bb:df:7b:de:9b:
37:2e:e9:86:e2:6e:35:4b:d9:03:e0:e1:fa:63:e1:
af:da:a4:4e:e2:ee:c6:a7:eb:86:f1:89:5e:a5:38:
d7:f6:7f:b4:66:d1:ce:d6:a5:fa:0c:18:19:a7:0e:
14:cf:53:95:52:7f:61:41:db:1c:8b:c4:ba:fd:5c:
fd:b0:ab:91:1f:5d:62:27:08:e0:d8:68:26:46:f2:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BE:1A:99:B6:AE:26:5D:A3:9E:D9:A7:FA:19:64:87:51:DF:C3:BE
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/hL4ambauJl2jntmn-hlkh1Hfw74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:85:2a:b8:fe:d1:9f:e0:cd:a7:4d:0f:9f:60:33:8c:2d:76:
0b:d7:bc:c0:3a:c1:d4:6c:a4:a8:de:dd:47:ca:5f:1e:1d:73:
e9:98:94:2c:e0:d3:9a:e0:07:63:f7:e8:5c:7c:e3:84:d0:34:
5b:d3:c9:60:43:2d:07:0d:6f:8d:df:3d:e4:4b:4c:d2:b9:6b:
d4:a0:ea:a4:fd:95:29:c7:bc:2c:fe:e5:a9:6a:ae:e8:59:d0:
b3:5b:f6:16:b4:1d:9a:03:9f:80:60:f9:78:85:3e:5f:aa:ef:
ef:70:d9:25:04:ec:41:13:d0:e8:db:60:20:b9:20:45:d7:80:
46:c3:df:a8:fd:45:0f:26:50:70:45:57:78:ac:ee:01:99:c8:
dd:75:08:3b:23:22:65:d5:b9:7a:ed:bc:4a:1c:a1:e7:f0:6f:
99:ba:20:59:b3:a4:79:7b:12:21:0a:e3:72:3b:2a:ed:55:05:
f0:83:ca:e5:bc:6f:32:c9:d5:26:50:b5:fe:8b:88:58:44:e5:
28:ed:22:bc:cd:8d:f7:b8:1f:34:61:5d:f2:98:7b:67:6e:4d:
54:16:54:aa:65:0a:95:11:93:4a:a9:f5:0b:3d:e7:dc:d4:00:
15:29:3b:e5:f3:12:de:ab:ed:98:01:04:11:8a:f8:4e:3c:c1:
81:c4:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 13:32:37 2024 by rpki-client on console-fra.rpki-client.org