Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9n3yo5G7pjb-c9rp7wvXOMViSXM.roa
File: 9n3yo5G7pjb-c9rp7wvXOMViSXM.roa (raw, json)
Hash identifier: KhS/dKZB0G/OkO6uAq9Yk6ys7YZhSxkS7mzM+ij2b2s=
Subject key identifier: F6:7D:F2:A3:91:BB:A6:36:FE:73:DA:E9:EF:0B:D7:38:C5:62:49:73
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7956427D80FB741A3AF36B3DAC9C218
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9n3yo5G7pjb-c9rp7wvXOMViSXM.roa
Signing time: Tue 02 Jan 2024 00:31:45 +0000
ROA not before: Tue 02 Jan 2024 00:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62074
IP address blocks: 188.212.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:64:27:d8:0f:b7:41:a3:af:36:b3:da:c9:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f67df2a391bba636fe73dae9ef0bd738c5624973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:0a:00:04:f8:ce:ca:f1:c0:58:f8:ee:1e:
44:86:65:e2:c9:5f:96:bc:d8:9b:fb:d9:3d:c3:38:
11:46:34:66:91:f8:1e:43:2a:7a:81:79:37:91:56:
eb:ba:ce:de:e1:de:1b:a6:03:70:28:f2:7c:e8:72:
e1:c2:23:f3:4c:14:d9:18:e2:72:b4:a6:ba:bc:64:
a2:ef:14:1b:80:cd:4a:30:fb:ec:2f:9f:05:49:95:
04:ce:9e:18:e5:22:e5:92:75:4c:ab:f7:db:98:5c:
36:09:88:11:dd:39:e7:f8:bd:5b:ea:f4:a3:6e:81:
f1:23:5d:0d:48:32:79:02:de:91:97:bb:ee:79:cc:
83:63:8e:18:53:f6:33:17:2e:f0:4f:ca:43:fb:0a:
45:fd:b0:b8:d7:5e:89:8c:9a:b0:b7:35:4c:f2:fb:
3f:ef:3f:87:10:4f:40:bc:2d:a9:c7:57:98:58:10:
bb:b3:34:25:5a:e2:b9:43:f5:6b:d5:98:7a:d8:f9:
82:72:2c:b4:9c:8a:1c:31:a5:f4:62:2b:da:02:9c:
fb:87:23:c0:48:72:fd:5e:46:32:2e:21:8b:35:7e:
7f:4e:6c:1e:96:e9:33:30:bb:90:ac:d9:cb:59:a4:
1e:79:aa:b2:2f:50:77:2a:27:71:43:e8:dd:86:dc:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:F2:A3:91:BB:A6:36:FE:73:DA:E9:EF:0B:D7:38:C5:62:49:73
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9n3yo5G7pjb-c9rp7wvXOMViSXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:75:42:67:ab:24:d4:65:cd:9a:31:33:e9:4b:66:51:6f:92:
c7:b9:11:fa:df:86:4b:01:fc:98:67:08:df:90:37:77:7f:a0:
6d:45:aa:ae:83:e6:6d:87:5c:1f:84:06:96:bc:f6:25:de:46:
7b:d4:b3:69:bb:15:51:43:f2:1b:b3:de:bd:89:d6:59:42:4e:
02:b6:91:39:65:92:30:1a:a1:57:fb:c9:82:70:07:4d:47:96:
89:8f:2f:1f:8c:a9:fb:aa:15:64:82:a6:f1:aa:d6:92:e5:0f:
46:b6:63:d3:de:24:9d:56:8c:09:d1:c3:33:85:fe:6e:29:57:
db:c1:8f:09:70:ae:01:91:09:33:10:e9:88:87:e9:b6:ef:6c:
a4:7e:b8:26:05:6f:b2:a3:68:bc:af:50:1d:bb:b5:71:40:e6:
bf:96:31:12:14:12:1d:d3:f5:06:84:e6:a3:be:f1:80:d2:c7:
32:c1:83:81:28:1e:19:6b:65:00:fe:8c:95:8e:ca:06:d7:2a:
44:ce:b8:27:32:a1:fe:c3:68:ea:fc:cc:8c:e6:fa:37:c2:64:
a2:7d:64:7a:a3:f4:71:07:a7:0d:f3:12:b7:22:38:63:99:95:
78:09:a1:37:7e:c2:bb:c9:2b:51:92:d5:fc:68:27:9c:d7:52:
c7:9b:5e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:36:59 2024 by rpki-client on console-fra.rpki-client.org