Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/THsZ_VKERh7eGMCLsfelA_7xJzk.roa
File: THsZ_VKERh7eGMCLsfelA_7xJzk.roa (raw, json)
Hash identifier: ccqYWPVBS4RouAaP+aPJZJ8Rr4xH7oe8PFI0+Pvqauk=
Subject key identifier: 4C:7B:19:FD:52:84:46:1E:DE:18:C0:8B:B1:F7:A5:03:FE:F1:27:39
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B967AD07DD73B3751EFC5A39E8E11
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/THsZ_VKERh7eGMCLsfelA_7xJzk.roa
Signing time: Mon 01 Jan 2024 18:31:31 +0000
ROA not before: Mon 01 Jan 2024 18:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206118
IP address blocks: 188.114.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:96:7a:d0:7d:d7:3b:37:51:ef:c5:a3:9e:8e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c7b19fd5284461ede18c08bb1f7a503fef12739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:1e:e8:a2:55:c1:45:70:3f:05:d5:cd:ca:
d1:74:41:0d:9d:dd:6b:1a:33:96:23:98:6a:22:be:
65:27:bd:7d:d2:3d:b3:c7:db:6c:21:c9:ba:f1:1d:
5e:ae:be:7b:ff:e4:63:b3:94:18:d8:dd:c7:83:0a:
c8:d2:5c:9b:22:6c:30:90:93:2a:c7:e3:b9:e3:3a:
9f:62:71:fc:a6:aa:cb:91:e9:d0:e2:16:48:85:5f:
06:b3:04:37:49:d5:db:55:6f:d3:c1:c4:ef:19:70:
ef:e4:23:fa:3b:6a:8d:88:77:a3:c4:5e:8d:c2:c5:
43:ac:d2:e1:1f:3c:6f:34:ec:a0:8e:2a:ae:30:d6:
53:1c:45:2c:bb:30:4e:bd:b2:eb:45:ae:7c:55:f4:
e9:17:f1:a6:51:25:53:ca:eb:a8:6d:86:2d:6c:93:
21:ea:6c:7b:cf:89:a2:1e:94:2b:d5:b4:22:76:fe:
11:05:f5:4f:76:64:28:38:5c:00:2d:07:f6:4f:3a:
39:8f:51:8b:18:c0:24:3e:1b:ee:11:06:db:16:30:
ea:e9:5e:f6:21:d0:6c:5b:50:bf:47:09:2e:60:68:
2f:ea:65:89:e7:7f:5e:f6:ed:fe:57:57:85:6f:fd:
b2:16:75:28:c7:99:b1:80:f4:53:eb:64:81:cb:d6:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:19:FD:52:84:46:1E:DE:18:C0:8B:B1:F7:A5:03:FE:F1:27:39
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/THsZ_VKERh7eGMCLsfelA_7xJzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ad:d5:e1:dc:e1:a6:bc:45:65:1e:fe:d0:82:16:bf:eb:35:
be:37:b4:4e:0d:54:cf:41:04:94:ed:b4:3b:82:e7:89:86:13:
07:9a:16:d8:3a:2e:be:0e:5d:61:8c:07:b6:5e:10:bc:47:46:
34:9f:22:09:5f:53:db:20:01:13:7b:7c:88:c7:dd:50:50:40:
2f:66:d8:7b:59:3b:91:2f:cf:7b:a8:3d:81:e9:f1:78:46:1a:
7e:67:a8:69:77:a5:d0:40:41:d0:3e:5f:5f:21:c0:6a:ad:a7:
56:9b:85:4a:16:2a:3d:eb:d6:3b:7f:41:fa:c1:b5:e7:85:ca:
a1:5a:be:3a:da:00:4d:0a:29:b7:0b:ee:18:59:39:99:73:5c:
f0:cc:31:5a:06:ab:a8:1f:32:79:62:84:bd:42:f2:ad:dd:05:
ff:8f:86:0f:a5:03:e8:f0:8a:81:71:10:f1:01:90:07:2c:d4:
96:61:b1:34:f4:76:50:78:7d:b8:db:18:89:72:71:01:72:bf:
cd:93:f9:ae:a5:c1:5f:fe:53:66:b3:59:5d:08:03:e0:47:b8:
cb:14:3e:90:3e:80:d0:c1:53:f4:96:04:d0:1b:a8:2f:9e:33:
19:8b:1a:f0:34:79:ff:1e:ab:1b:89:3c:a1:42:e1:bc:e9:bc:
1f:cd:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org