Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/H7oUi6aOqiW7MSwnw2CkQbj9wsM.roa
File: H7oUi6aOqiW7MSwnw2CkQbj9wsM.roa (raw, json)
Hash identifier: IX8RWAqRXmsIbtiF9g0xcDt/k35RmGCyxnLfB1C37GU=
Subject key identifier: 1F:BA:14:8B:A6:8E:AA:25:BB:31:2C:27:C3:60:A4:41:B8:FD:C2:C3
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A89037B2204C5F5873D5817982118
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/H7oUi6aOqiW7MSwnw2CkQbj9wsM.roa
Signing time: Mon 01 Jan 2024 18:30:22 +0000
ROA not before: Mon 01 Jan 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208295
IP address blocks: 188.72.100.0/24 maxlen: 24
188.72.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:89:03:7b:22:04:c5:f5:87:3d:58:17:98:21:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fba148ba68eaa25bb312c27c360a441b8fdc2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:c8:40:19:4e:a7:30:8d:28:36:d9:93:4a:
7a:96:66:35:87:f6:10:a8:e8:39:80:44:aa:1b:77:
77:10:d8:16:70:82:31:34:86:14:dc:8c:f4:fc:a3:
17:d5:ad:a6:f1:b8:1c:d8:9f:0c:46:73:ad:5f:66:
9e:14:c5:79:04:1d:eb:fd:a6:35:9c:8b:57:f8:9f:
b0:41:4f:b1:67:8e:1d:b3:b2:c6:29:e9:c2:7a:e8:
db:cd:27:5b:9e:7f:1e:31:a8:d3:10:05:1c:95:16:
3c:16:8b:62:fd:5c:5e:7c:cf:bb:b6:76:3c:e2:72:
4d:e6:35:f6:4a:e0:ff:38:2e:dc:e3:f7:07:97:23:
20:26:ea:b4:1e:71:a1:4d:0f:ae:cd:7f:f7:c7:eb:
99:9e:87:9d:3b:dd:89:6b:fc:52:b6:cd:a0:4d:1f:
4b:05:3f:b5:ff:13:b5:6a:60:72:51:d2:5a:53:2f:
d2:77:8d:9c:1a:fd:2a:ac:c7:e8:e4:b9:cc:f1:e5:
30:15:3d:b4:80:f1:1a:02:30:e3:c2:e9:38:f0:ec:
fc:a2:33:00:b0:9c:8d:84:92:8b:b9:c1:c7:5b:9c:
f8:22:ef:1a:b0:0e:05:63:0a:ac:3b:03:74:34:9a:
a2:2f:f5:52:1b:2a:55:86:85:88:e2:7c:2a:97:aa:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:14:8B:A6:8E:AA:25:BB:31:2C:27:C3:60:A4:41:B8:FD:C2:C3
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/H7oUi6aOqiW7MSwnw2CkQbj9wsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.99.0-188.72.100.255
Signature Algorithm: sha256WithRSAEncryption
11:e1:4d:b7:a8:20:90:5c:a4:79:97:ca:45:47:86:a4:ee:cd:
42:f1:35:8d:9a:7a:8a:56:44:5e:6c:c6:41:0e:26:a1:a1:68:
8b:12:0a:81:4b:06:2a:72:38:db:43:12:1a:7a:98:16:dd:b8:
43:50:a7:e3:c7:03:f6:e5:a5:06:af:37:3a:92:d6:3f:43:d4:
1a:60:b1:b2:9d:19:80:7a:b5:47:6b:38:a8:1d:8f:07:a3:38:
db:0b:26:ab:6f:5d:d0:bd:ba:fb:2b:05:19:b3:f6:fb:6d:fb:
b6:6e:c4:d4:ad:c7:40:94:69:41:15:49:b4:ce:a7:7a:a2:5c:
42:4c:35:0d:05:cb:34:a5:a5:63:3b:2c:2b:c4:81:47:1c:27:
41:3e:18:b7:71:66:6f:9d:48:d0:83:b1:64:95:1c:54:61:bb:
cb:ea:48:83:d4:4c:89:37:d4:d4:54:05:6a:20:56:85:71:f2:
f5:48:ee:96:18:75:ac:61:db:96:42:70:3e:10:66:c4:85:9c:
0e:7a:40:c0:50:a3:a1:86:ea:e6:bf:bb:21:bd:50:2f:59:91:
c4:d9:e9:d2:95:0c:7c:48:05:90:ea:a0:1a:a8:d2:d8:a6:ce:
ce:86:c0:a8:9e:48:47:63:8f:ef:ae:af:b5:0b:96:aa:09:5f:
00:19:ef:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:20:30 2024 by rpki-client on console-fra.rpki-client.org