Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/88UDdfBBGZBOFNtdFK496LNDNJc.roa
File: 88UDdfBBGZBOFNtdFK496LNDNJc.roa (raw, json)
Hash identifier: i/97+LZzxnJIfWtIWAA+ASM2Qgu5PB6EKzjCRek9KOk=
Subject key identifier: F3:C5:03:75:F0:41:19:90:4E:14:DB:5D:14:AE:3D:E8:B3:43:34:97
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 018CC86F6896098D07764909C1E356121231
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/88UDdfBBGZBOFNtdFK496LNDNJc.roa
Signing time: Tue 02 Jan 2024 04:29:53 +0000
ROA not before: Tue 02 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.18.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:68:96:09:8d:07:76:49:09:c1:e3:56:12:12:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 2 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3c50375f04119904e14db5d14ae3de8b3433497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d9:62:91:ea:03:0a:5b:da:52:e3:45:fb:6b:
d5:fc:c3:2e:8a:7d:91:6d:54:d0:84:d7:00:0f:87:
96:00:dd:51:40:90:95:b1:fb:21:70:6a:ea:45:ac:
0f:0b:86:c3:1f:34:10:3b:06:21:06:28:55:c6:99:
f8:9b:ff:2a:6b:b1:f4:c9:7f:fa:b6:53:f8:02:0a:
58:50:d0:68:85:39:ce:b1:d7:c9:97:2c:e1:71:75:
62:b6:a9:d7:dc:aa:d3:3c:db:66:c0:df:1f:a9:cf:
fb:71:43:a3:a2:ae:19:2b:e2:51:27:82:71:99:c2:
b2:2a:b7:7d:b0:61:62:3c:30:02:08:34:73:f4:25:
09:9d:b3:38:a8:c4:ef:ee:21:98:7c:39:53:d6:b8:
79:44:c5:f6:aa:7c:e0:9f:d3:22:80:44:f1:8e:93:
c4:23:b4:66:4f:87:21:c2:44:cb:4a:a8:71:d9:85:
7e:a8:55:8e:9d:0c:d1:38:a6:2d:3b:34:cf:91:1c:
d7:b7:5e:84:ab:59:60:a7:2b:58:59:d1:ed:3f:27:
bd:d5:12:ef:98:e6:a7:13:82:9f:c6:eb:c2:40:63:
f5:59:21:15:69:95:2a:a4:35:b1:91:4e:b0:0c:a9:
39:4f:01:65:29:a7:83:85:e2:67:ce:c8:0e:31:32:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:03:75:F0:41:19:90:4E:14:DB:5D:14:AE:3D:E8:B3:43:34:97
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/88UDdfBBGZBOFNtdFK496LNDNJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.123.0/24
Signature Algorithm: sha256WithRSAEncryption
91:82:da:24:73:cc:2e:b2:54:0a:06:a1:3e:22:37:71:f3:d2:
4f:44:d8:72:94:d4:24:96:8f:30:3b:51:fa:8c:c8:16:06:e2:
07:06:f8:91:6c:1b:47:b2:88:f7:c2:06:78:67:e6:8a:83:2f:
8d:b4:52:c8:00:5b:27:09:00:db:de:01:69:37:ba:b3:ad:12:
7d:fd:d6:68:7c:04:75:a8:88:77:10:2f:d8:24:71:88:a4:65:
88:31:08:77:1d:d9:d9:74:2e:b4:9d:96:6a:77:dd:39:eb:76:
30:b5:a9:e6:22:28:d2:01:13:26:e3:0f:8e:84:42:d5:03:e1:
ab:a6:d5:c7:56:1e:61:9e:68:8a:b6:2e:10:da:fe:af:2e:b1:
82:65:d4:ef:89:cd:a1:22:26:5f:2e:c1:26:ba:f5:b1:47:f9:
72:88:80:07:82:fd:a7:7d:47:d2:72:1b:c5:2c:d6:5a:09:d1:
38:d2:28:bf:ae:e4:f5:06:b4:7e:66:ce:2a:d3:9d:7f:10:8c:
97:bf:ab:c6:bd:68:a0:56:f7:2a:2a:8c:48:a2:d1:1d:89:55:
b0:b7:38:50:97:cf:8b:2d:d8:f8:86:da:c1:b0:08:77:03:42:
4d:ab:3c:48:07:36:36:bf:ca:ba:09:dd:87:a3:f7:23:30:ed:
73:0e:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:44:39 2024 by rpki-client on console-fra.rpki-client.org