Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/tRlTk6NHJcqoWf0Ue3BAIwvwaKU.roa
File: tRlTk6NHJcqoWf0Ue3BAIwvwaKU.roa (raw, json)
Hash identifier: h1inCClgzWVKlfk+HODC6UeqrCAVpPyWrYNtbp9UFog=
Subject key identifier: B5:19:53:93:A3:47:25:CA:A8:59:FD:14:7B:70:40:23:0B:F0:68:A5
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018CC348F8913FFFB3D008D4F66E4C1C5861
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/tRlTk6NHJcqoWf0Ue3BAIwvwaKU.roa
Signing time: Mon 01 Jan 2024 04:29:48 +0000
ROA not before: Mon 01 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47692
IP address blocks: 188.172.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f8:91:3f:ff:b3:d0:08:d4:f6:6e:4c:1c:58:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5195393a34725caa859fd147b7040230bf068a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:be:d3:7f:1e:fd:cb:6f:c3:a7:60:54:a3:3f:
98:de:77:2e:a2:f1:a4:34:3b:6d:26:52:7d:34:32:
13:15:03:19:d5:3b:17:3b:7c:f3:d3:dc:b7:bc:c0:
b9:4f:b4:0c:be:dd:a9:26:01:f9:e8:7b:f5:46:03:
1a:4b:64:12:d5:c7:70:86:8c:a1:26:10:d1:7e:97:
2a:2d:88:4c:1a:9b:04:5f:eb:83:e4:17:a8:a3:83:
db:26:c7:45:b7:8d:2a:27:65:2f:16:df:d3:7b:c9:
12:6a:85:5b:f2:85:dc:52:0f:7b:1d:30:c6:c9:51:
c5:84:3d:ff:f5:78:fa:20:cd:60:49:f7:7e:b1:2c:
35:3e:e3:18:db:57:34:5b:24:39:46:44:df:a6:70:
df:b2:1a:49:ee:fa:e8:fb:6d:31:10:6c:c4:84:52:
b7:43:7f:7d:45:c0:60:99:b0:9b:97:aa:79:04:7a:
bc:fc:df:96:dd:8f:00:84:57:4e:7a:08:a0:c2:be:
bd:0d:db:a0:13:27:df:7f:17:f0:23:b3:35:38:23:
d5:d7:a0:2a:3c:a9:ea:25:a1:f3:40:f3:b3:4a:ad:
7e:10:37:2b:dd:ab:4f:9b:c0:f7:9c:7d:a7:a3:71:
ff:b7:1d:00:ea:3b:78:b4:2c:89:df:4b:5a:ea:7d:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:53:93:A3:47:25:CA:A8:59:FD:14:7B:70:40:23:0B:F0:68:A5
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/tRlTk6NHJcqoWf0Ue3BAIwvwaKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.196.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:64:13:92:6f:f5:b3:93:b3:0d:c7:23:b1:a4:06:51:ce:5c:
07:e9:2a:99:20:d0:f4:22:dc:df:92:13:23:b9:6d:fe:1e:70:
88:17:df:a5:33:1c:a1:5f:ea:ff:bf:8c:36:65:52:92:c9:48:
5b:47:bc:79:38:18:90:75:f3:9c:96:1e:d6:60:14:47:53:40:
57:5e:42:ef:d5:8a:a2:4d:15:3a:08:0a:23:90:77:55:da:e8:
8e:80:f2:92:cd:cd:d4:6b:51:17:d6:22:99:cc:9c:d7:05:24:
b4:44:5b:d4:83:54:b4:8b:d7:a4:20:5a:55:8d:fd:08:e3:8b:
68:e4:f0:12:65:cf:57:56:cc:78:f9:26:d8:14:58:0c:6f:d0:
70:4a:43:d0:23:3b:cf:d8:76:e4:96:6c:39:00:7b:ca:7e:64:
1a:93:0b:c5:40:77:ca:0a:27:e1:86:01:bd:61:9d:1a:44:ec:
66:95:2f:35:e7:e1:72:a2:18:77:c2:66:d7:b7:54:33:1e:3d:
25:ab:d4:f7:e0:ca:37:05:4e:69:7e:b1:63:bf:e3:96:ed:27:
bd:f7:94:9c:4e:9a:a2:10:f9:11:d0:07:2e:6d:fc:3e:37:b9:
1d:3c:48:fd:d1:f2:c6:3b:f6:dc:6c:e8:65:f3:bd:4d:89:74:
8f:15:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:34:55 2024 by rpki-client on console-fra.rpki-client.org