Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/a8aH5EHui-2aqhaEgJq_RtfrhII.roa
File: a8aH5EHui-2aqhaEgJq_RtfrhII.roa (raw, json)
Hash identifier: ulRy2fUFeg0u+r2F46yQMden45+npTyggAJGnSkuiFk=
Subject key identifier: 6B:C6:87:E4:41:EE:8B:ED:9A:AA:16:84:80:9A:BF:46:D7:EB:84:82
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018CC79425BAC1DC7128E2813A030EDA23DB
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/a8aH5EHui-2aqhaEgJq_RtfrhII.roa
Signing time: Tue 02 Jan 2024 00:30:23 +0000
ROA not before: Tue 02 Jan 2024 00:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198651
IP address blocks: 195.12.189.0/24 maxlen: 24
195.12.190.0/24 maxlen: 24
195.12.188.0/24 maxlen: 24
195.12.191.0/24 maxlen: 24
88.119.176.0/22 maxlen: 22
88.119.176.0/24 maxlen: 24
88.119.179.0/24 maxlen: 24
88.119.177.0/24 maxlen: 24
88.119.178.0/24 maxlen: 24
2a00:1eb8:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:25:ba:c1:dc:71:28:e2:81:3a:03:0e:da:23:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 00:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bc687e441ee8bed9aaa1684809abf46d7eb8482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:eb:0a:5d:3d:ce:f2:df:9b:ed:b1:dc:49:
67:ad:80:ae:96:4a:bc:eb:87:4a:1e:51:c2:81:b2:
37:b5:7d:25:e7:2d:3a:49:5f:3f:d6:33:64:97:7d:
1a:ad:f7:ea:69:a0:c7:7f:28:d7:4f:cb:0a:bf:43:
d9:81:b7:8e:46:45:c7:ea:b4:d9:b3:66:ba:7d:11:
58:0d:9d:ca:40:69:93:0a:5a:4f:2a:af:b5:ac:5f:
19:88:9f:6d:d0:c1:a4:71:59:fe:86:15:6c:ec:d8:
78:d4:9c:50:5a:93:3d:a1:17:2d:d5:d4:a3:08:b4:
d8:c7:e7:13:01:02:39:4b:a8:b0:81:16:c0:cd:6f:
cf:5c:a6:7f:55:f7:a8:f4:b3:34:af:ed:00:4a:1d:
41:93:81:d7:80:ae:7a:2a:20:cf:2b:18:c1:e1:87:
06:4c:aa:24:06:d6:6f:44:b5:7d:14:4d:ef:40:19:
f3:58:f4:73:d9:a0:9b:77:be:93:4c:b9:b3:02:34:
78:34:fd:f4:33:5a:d8:a4:fc:03:53:e4:29:45:b8:
1f:32:e7:36:e4:96:e2:e7:c3:30:3b:8f:a1:86:bc:
91:14:fb:a5:98:f4:71:35:af:a8:bd:bd:96:9e:ea:
f7:a3:a7:06:ad:db:5a:ab:dc:76:07:c4:3d:6a:7d:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C6:87:E4:41:EE:8B:ED:9A:AA:16:84:80:9A:BF:46:D7:EB:84:82
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/a8aH5EHui-2aqhaEgJq_RtfrhII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.119.176.0/22
195.12.188.0/22
IPv6:
2a00:1eb8:c000::/48
Signature Algorithm: sha256WithRSAEncryption
48:a7:20:e9:5c:97:81:53:c9:7a:ca:8e:9d:f8:61:eb:26:a5:
6c:60:be:d9:d4:33:b4:7c:4c:1d:01:f5:1e:1d:4b:27:d7:ad:
13:d5:4e:fd:bf:82:a6:7d:d6:a0:75:f3:58:fd:e2:80:48:81:
99:88:0b:8f:2f:46:62:f5:5e:e6:51:11:4d:4a:e2:c7:56:16:
36:bb:02:3f:e2:5d:d5:3f:73:e3:4b:78:69:db:64:e3:97:98:
e3:15:b0:da:f5:0d:64:e4:17:3e:ff:d8:71:57:72:e9:98:96:
71:d2:0a:2a:f6:bd:b8:eb:d3:4c:24:d5:3a:d9:44:26:6f:cc:
d4:e2:f2:17:7c:62:94:3f:10:5f:c3:79:ed:ce:f6:f0:97:1e:
49:18:5e:f6:5c:64:f5:23:d6:bc:a2:04:e9:bd:f6:a8:dd:98:
d4:bf:1c:7c:25:48:f6:0f:e5:36:50:df:94:85:f8:e3:f3:5a:
b7:5c:2c:b6:82:46:01:19:37:ad:e0:0c:c2:5c:2e:2d:95:5c:
2b:68:74:78:cd:6b:ea:8d:95:46:e9:34:60:3c:70:55:6b:c1:
93:c7:fb:d9:c6:eb:f3:85:07:ee:2d:b2:be:53:18:3c:fd:56:
ee:93:7c:ca:83:8d:fd:ba:e9:ce:e4:68:3f:80:5e:cf:40:5e:
5d:d4:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:28:42 2024 by rpki-client on console-ams.rpki-client.org