Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ghX1ypJwA1Xf35Hr15tNF4xm7-w.roa
File: ghX1ypJwA1Xf35Hr15tNF4xm7-w.roa (raw, json)
Hash identifier: Ax+DGp6eAYETfoLT2Xl0+P8H+a15nTssEKJ/YsTuTHo=
Subject key identifier: 82:15:F5:CA:92:70:03:55:DF:DF:91:EB:D7:9B:4D:17:8C:66:EF:EC
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0192B397674AB09A062861E12262992C5823
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ghX1ypJwA1Xf35Hr15tNF4xm7-w.roa
Signing time: Tue 22 Oct 2024 09:38:16 +0000
ROA not before: Tue 22 Oct 2024 09:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215081
IP address blocks: 188.253.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:97:67:4a:b0:9a:06:28:61:e1:22:62:99:2c:58:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 22 09:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8215f5ca92700355dfdf91ebd79b4d178c66efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:b9:ee:fd:0a:ec:84:2c:dc:3d:af:d0:91:
ac:35:f5:c2:0b:ac:3f:ed:c5:bb:0d:a1:3c:3e:41:
e2:83:65:0f:a9:82:74:cf:a2:97:a9:1b:92:14:4a:
52:f6:00:d7:95:af:db:49:62:7a:02:c1:67:a1:ef:
4f:b6:de:be:03:f5:ff:1f:8d:f9:3c:56:14:99:7a:
a1:f3:98:b5:fc:ad:ba:76:a9:7b:57:21:16:e8:c4:
86:7c:13:58:a5:74:39:55:dc:de:7c:6b:ba:34:80:
21:89:8a:39:16:b0:af:cb:e9:2c:d8:ec:89:51:48:
28:dc:f9:4d:6d:16:7b:cb:0d:39:d8:ba:b3:94:da:
e9:33:14:65:77:c7:78:9e:e6:b4:4c:7b:a4:b3:42:
01:59:89:71:d1:9c:7b:3f:41:a1:13:25:ea:1a:f7:
76:5f:f1:1b:f7:ed:70:cf:98:d4:a9:66:90:d7:87:
c0:0d:20:ec:24:7e:8f:35:84:c5:29:eb:64:4c:32:
75:0a:76:6c:30:e3:6e:03:c7:62:8a:c1:e4:06:94:
ab:c2:d7:97:81:01:17:7b:c8:a6:d1:67:df:50:23:
f6:f1:c2:d8:cd:bc:b9:f3:42:e7:e9:26:9d:e3:0b:
8a:e6:c0:45:a9:c6:bf:ac:88:4c:7c:55:b6:8c:23:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:15:F5:CA:92:70:03:55:DF:DF:91:EB:D7:9B:4D:17:8C:66:EF:EC
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ghX1ypJwA1Xf35Hr15tNF4xm7-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e5:f4:e5:c2:fc:65:e7:7c:e5:1d:00:7a:75:83:51:67:30:
c5:c5:4e:a1:78:45:f7:55:1e:a9:74:fd:4c:f9:ba:53:6b:cc:
72:2a:95:ea:5b:1f:7b:5a:43:92:ea:39:8a:b4:01:f4:f7:c1:
01:1b:39:61:41:c5:a1:d8:4b:14:25:74:25:12:25:ab:d4:d3:
c2:21:fd:77:c6:3f:5f:3b:77:a6:6b:65:ac:ef:5c:56:de:80:
1a:89:c0:28:c6:b3:70:1f:ff:8f:8d:df:67:cb:2b:a2:a7:bf:
3a:71:32:80:3c:c1:be:1f:83:15:2f:86:b4:c5:a4:3b:c5:02:
15:c9:9e:a7:ae:af:6a:0d:14:ce:c0:16:c1:73:3a:c6:91:f6:
76:3b:cf:7e:c9:01:a2:64:27:b2:e7:bc:83:ee:96:7d:eb:9a:
69:1f:ad:91:18:15:d5:f5:5d:93:ac:80:25:7a:e5:e0:01:5d:
3d:be:36:51:42:9b:d7:24:f1:a1:57:61:b1:56:ee:4f:9e:af:
d3:66:d4:d3:df:a9:53:00:ca:d6:c9:1c:b0:7b:bf:31:38:46:
47:55:4a:af:81:26:84:96:d6:06:06:e7:a9:b5:f8:d2:e6:f0:
e1:a5:ff:59:7f:2b:37:f8:80:d5:d0:2f:38:a0:79:2c:4d:24:
ba:4a:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:10 2024 by rpki-client on console-ams.rpki-client.org