Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/i4h2fkkBo371b86xWL3gNVEI1v0.roa
File: i4h2fkkBo371b86xWL3gNVEI1v0.roa (raw, json)
Hash identifier: /CisSReDAOp4j9wh0Torz6Ob1dcjIePOkcdlxLKmfMc=
Subject key identifier: 8B:88:76:7E:49:01:A3:7E:F5:6F:CE:B1:58:BD:E0:35:51:08:D6:FD
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 018CC2DB4BA6A95EB666C1E521FA47702538
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/i4h2fkkBo371b86xWL3gNVEI1v0.roa
Signing time: Mon 01 Jan 2024 02:30:00 +0000
ROA not before: Mon 01 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44398
IP address blocks: 194.93.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4b:a6:a9:5e:b6:66:c1:e5:21:fa:47:70:25:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b88767e4901a37ef56fceb158bde0355108d6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:87:c0:4b:98:fa:a4:03:9b:41:ce:ae:d4:
b7:a2:3a:a1:f0:be:4e:c9:a2:5d:47:28:21:58:03:
b1:46:c4:f0:65:05:86:1b:9f:42:59:22:a7:ae:76:
2c:24:11:8d:9f:4b:33:15:24:31:af:d7:86:d5:79:
4e:7c:ca:df:99:43:a8:43:11:91:c4:66:0d:a6:d8:
ca:9b:11:85:51:d3:2f:68:ea:18:7c:51:03:75:49:
8e:e5:61:5c:5d:70:b1:94:78:cc:c2:97:36:23:81:
b7:2a:10:77:f1:0a:4a:59:61:f5:b1:1c:a9:10:07:
a8:66:7a:db:37:19:4e:a8:ba:5b:7b:33:4a:d0:a3:
7d:72:ba:03:d5:ad:59:ef:2b:d0:40:ef:73:f5:13:
32:fe:e5:6c:30:25:0d:26:4f:e1:f5:c3:86:05:1f:
03:e4:0f:b1:97:6b:82:c1:c5:af:51:fa:f7:1a:e3:
9b:e9:c7:46:77:67:d1:fb:88:e6:d8:02:9f:06:f4:
52:d6:98:f5:01:97:c1:b2:9a:82:ba:d7:c3:7b:13:
66:0e:e9:23:3d:c9:85:07:40:b1:41:04:4a:51:37:
db:c9:2e:2c:bc:29:2f:5e:b7:d4:28:a1:ed:b5:04:
31:a5:d4:2f:b1:b5:01:68:3c:07:20:c5:18:14:41:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:88:76:7E:49:01:A3:7E:F5:6F:CE:B1:58:BD:E0:35:51:08:D6:FD
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/i4h2fkkBo371b86xWL3gNVEI1v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.75.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4c:c3:84:32:a3:79:bb:2b:7c:ef:05:b5:83:59:99:9c:7b:
cf:4a:4c:d2:18:b7:8f:1b:0a:35:e5:4b:93:11:02:01:ad:ad:
4f:20:78:b6:38:85:04:2e:62:b5:74:1d:97:f8:e3:e7:68:d8:
79:a0:d1:0a:20:75:2d:09:6a:27:45:c8:b9:bf:0b:21:57:71:
ec:4f:a8:a0:6a:ad:06:ef:03:5c:0e:67:ba:5e:5f:0b:4f:4d:
2e:a4:15:be:3c:07:d6:5f:05:50:d1:26:8d:ef:9c:46:fc:4e:
7b:a3:59:aa:c5:a2:8e:be:cc:2f:10:76:1f:e7:bc:da:0f:7e:
17:2a:de:1d:24:73:c1:ef:07:e6:83:18:11:d6:6b:40:42:89:
ce:07:a3:1a:29:b3:8e:fe:0e:66:9f:41:3f:1f:cf:d4:15:f4:
17:21:03:ab:41:55:c9:07:bd:98:c8:fe:be:6c:26:17:b4:77:
4a:b8:17:26:45:38:b3:33:65:5a:db:30:31:b0:1c:73:8b:3f:
d2:37:58:fc:f0:d5:56:fe:16:c9:07:2b:9c:38:8e:ab:70:5f:
4a:37:b9:da:51:ba:69:9e:af:3f:14:d3:d4:58:c9:df:cd:ab:
e5:18:db:e5:7d:f5:49:d8:24:37:47:a3:a6:6f:28:cf:d9:1e:
d9:a0:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 05:27:56 2024 by rpki-client on console-fra.rpki-client.org