Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/grtFJjBSNddPQjW-jiZI32-5GYc.roa
File: grtFJjBSNddPQjW-jiZI32-5GYc.roa (raw, json)
Hash identifier: bG7nGFglBCTkU5Hmqlb4SIeZ1i2406kRwH/LGTnNSSQ=
Subject key identifier: 82:BB:45:26:30:52:35:D7:4F:42:35:BE:8E:26:48:DF:6F:B9:19:87
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29D62B9782278C2C1D0E8388C47D1C
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/grtFJjBSNddPQjW-jiZI32-5GYc.roa
Signing time: Tue 02 Jan 2024 12:33:08 +0000
ROA not before: Tue 02 Jan 2024 12:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204957
IP address blocks: 185.88.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d6:2b:97:82:27:8c:2c:1d:0e:83:88:c4:7d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82bb4526305235d74f4235be8e2648df6fb91987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:b9:e6:8d:6b:8d:32:98:42:6c:5f:c1:7d:
27:91:48:02:c3:e1:f6:c8:f1:76:d3:ba:b0:d5:4b:
2a:fb:ba:82:44:0d:b2:3a:38:15:ae:91:f8:2b:36:
ab:96:f8:b8:ad:d3:ec:97:07:dd:2b:26:d9:80:cc:
02:00:3f:d7:d2:2c:96:e0:e9:33:81:f9:5c:c4:f4:
f3:53:1b:dd:7c:e2:30:70:df:0f:64:11:37:d6:64:
6e:87:25:4f:0a:4d:ba:da:de:4d:d3:de:7a:e6:fd:
84:ed:ec:2e:b2:62:f0:ed:ff:09:4a:02:3c:33:59:
ae:6a:39:75:ff:94:78:f6:69:6f:72:a2:b9:f7:5f:
de:53:1f:b9:e6:ea:c4:b7:31:c6:ad:32:ad:44:36:
75:98:d7:88:a2:d0:2b:3a:24:c1:c2:41:39:7b:6f:
2d:26:7e:41:42:0b:94:91:7e:8c:02:4f:d0:ad:99:
e5:a1:6d:a9:94:cd:da:46:e1:1d:2a:40:f9:45:c8:
d5:c6:60:89:50:2e:83:6a:d0:de:48:74:ea:76:fc:
11:b9:34:c2:7e:7e:ef:69:a6:5f:62:23:73:9c:64:
09:fe:c8:e9:cc:f9:c7:56:32:91:d4:35:ce:a1:c7:
6c:b9:8c:ba:cd:0e:5c:66:14:9d:52:73:45:9e:d2:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BB:45:26:30:52:35:D7:4F:42:35:BE:8E:26:48:DF:6F:B9:19:87
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/grtFJjBSNddPQjW-jiZI32-5GYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.38.0/24
Signature Algorithm: sha256WithRSAEncryption
79:64:ac:62:46:6f:c3:1d:44:be:31:b2:e3:a2:f3:3a:78:22:
ca:15:ce:a8:56:28:d2:ef:cc:d1:f5:85:75:f5:d7:e6:be:2f:
ab:bc:a3:ca:44:e9:c0:26:b5:4c:ca:f0:f1:15:3e:39:3c:49:
55:5f:c5:95:fd:0a:f0:52:a1:5f:c6:96:f5:90:18:a5:74:58:
58:25:54:cf:b1:9f:92:65:c9:f8:20:90:75:3a:0e:91:ab:fd:
88:63:ce:c1:99:54:e2:a3:ac:63:39:c4:4e:64:75:47:b9:9b:
0c:7d:c2:88:aa:3a:16:13:d8:fe:d1:33:37:27:1e:9b:b0:50:
7d:e6:4e:00:0c:ea:36:a0:ad:1b:c8:cf:61:4e:13:7f:06:20:
9b:08:be:37:73:84:5d:b4:0b:f7:b2:0d:f2:42:90:03:32:46:
06:21:31:9c:33:3f:1b:37:5a:e4:e9:78:28:64:51:62:53:17:
d4:56:4a:99:f2:18:11:3e:11:2a:16:22:81:1a:56:d0:c2:a6:
a0:03:6a:6f:22:33:f2:d6:fb:06:1b:32:fd:5c:bc:0a:d4:e1:
2a:88:0b:f8:05:1b:a5:ce:b7:62:b2:cf:1d:92:d5:c6:17:45:
c9:ce:48:60:da:18:59:01:06:6e:76:32:87:53:52:5e:9c:05:
fa:3c:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 11:38:09 2024 by rpki-client on console-fra.rpki-client.org