Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/11JfQIhEPdLJKy944lQJvjY1dNI.roa
File: 11JfQIhEPdLJKy944lQJvjY1dNI.roa (raw, json)
Hash identifier: MYHJEbG8QqHWHZJbEWZ3/r/cNM/H27WkpzWAqIZWdio=
Subject key identifier: D7:52:5F:40:88:44:3D:D2:C9:2B:2F:78:E2:54:09:BE:36:35:74:D2
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8FDB988660B7F2726CC0F2B50283
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/11JfQIhEPdLJKy944lQJvjY1dNI.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201113
IP address blocks: 188.114.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8f:db:98:86:60:b7:f2:72:6c:c0:f2:b5:02:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7525f4088443dd2c92b2f78e25409be363574d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:b6:f0:86:a0:63:b1:e4:5c:55:4f:55:00:
a8:3a:97:d2:0f:b8:f4:68:1b:1e:da:5d:c9:5f:93:
67:68:10:4a:45:11:37:c1:d0:b5:71:3c:0b:b9:da:
91:47:92:46:b3:f3:66:a2:6c:2c:0c:8b:24:f1:8b:
57:63:c4:e0:73:22:f6:57:bc:c8:a5:e3:11:80:97:
6a:37:0a:78:db:bd:2f:3e:34:9d:bc:26:a7:b1:76:
f2:18:35:39:b5:4f:b2:19:6c:6f:1c:8c:56:5c:e7:
b6:7a:e5:28:f2:23:f4:ec:7d:18:52:2d:a7:ae:06:
3f:02:90:bc:f5:33:b0:ad:98:e7:c9:1b:fc:8d:be:
20:cf:f9:98:8c:f5:17:73:32:c2:e8:12:62:55:a3:
69:25:81:5e:1d:4f:34:d6:6d:89:4f:67:cc:a0:9e:
e5:54:21:9b:e9:43:e5:96:73:19:05:37:4c:7b:af:
1d:fb:bf:fc:67:ef:16:21:20:1c:21:72:23:70:76:
a8:b7:2a:74:73:14:cc:3b:87:0e:82:86:f9:c4:77:
4c:fe:46:fe:0c:fa:55:eb:49:fd:d2:98:66:f0:bd:
c6:fe:e7:3d:fc:b3:23:7d:9e:17:49:5f:3f:df:35:
00:5b:57:f2:e2:07:34:83:ab:08:47:86:c6:f0:dc:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:52:5F:40:88:44:3D:D2:C9:2B:2F:78:E2:54:09:BE:36:35:74:D2
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/11JfQIhEPdLJKy944lQJvjY1dNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.66.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7c:80:0c:48:2e:9a:a7:84:e7:a3:8f:46:d8:a9:43:33:1e:
3f:52:74:40:e9:89:89:8c:3b:48:69:df:d9:f1:a9:87:4b:30:
5b:0d:a3:64:2b:13:eb:5f:2e:ec:cd:05:10:2b:f0:41:f6:34:
77:1e:6a:01:31:9c:58:90:7c:8e:d5:22:ec:49:54:42:59:6a:
82:18:e7:a3:76:41:64:1c:1f:e6:48:77:b4:86:06:09:fb:c0:
bb:a1:fb:d2:1e:db:f7:f4:82:0f:ba:2b:94:84:5a:f2:64:a0:
5e:7a:c6:71:0a:e8:64:61:36:ef:a9:bf:54:93:ec:c9:cf:c3:
b6:e2:e9:02:2c:a2:4c:5d:24:87:b8:50:5b:ce:5c:ae:46:a0:
8e:67:1f:a0:d6:72:6f:a3:73:9a:5e:c4:df:cd:ae:e9:db:eb:
e5:39:29:3e:f6:88:dd:e8:16:3d:cd:46:a9:d8:c3:88:ee:dd:
e8:66:a2:3f:bf:97:3d:08:27:5e:84:33:66:59:fe:e5:f5:86:
cf:aa:17:07:77:a6:f4:39:7d:d6:62:3f:49:7b:b0:86:bc:06:
8b:fd:29:1c:eb:48:71:e3:68:2f:a8:6d:72:fb:29:01:d7:14:
62:9c:bc:be:47:89:e8:4b:7a:a8:7a:c8:cb:4e:c3:4e:5c:88:
20:7d:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org