Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/FS2lsR98pR75ViABEAlpdMiY6NU.roa
File: FS2lsR98pR75ViABEAlpdMiY6NU.roa (raw, json)
Hash identifier: JFgI4n4dvrtEvW3XQxXG7RBIw/AoHDMP52hfqYTfZpU=
Subject key identifier: 15:2D:A5:B1:1F:7C:A5:1E:F9:56:20:01:10:09:69:74:C8:98:E8:D5
Certificate issuer: /CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Certificate serial: 018CC871458ADB160735AB37438D5BBA38E5
Authority key identifier: 11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/FS2lsR98pR75ViABEAlpdMiY6NU.roa
Signing time: Tue 02 Jan 2024 04:31:55 +0000
ROA not before: Tue 02 Jan 2024 04:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34241
IP address blocks: 188.190.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:45:8a:db:16:07:35:ab:37:43:8d:5b:ba:38:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d9d7975b8cda9232a4247cc9de9a6dfdbc6069
Validity
Not Before: Jan 2 04:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=152da5b11f7ca51ef956200110096974c898e8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:93:b7:c3:b6:9a:77:e0:17:94:26:28:3e:
c2:b9:ff:67:76:28:d7:24:57:a4:4d:97:9a:d3:54:
83:c8:42:41:40:c6:50:82:85:34:b1:e7:66:3c:f9:
8f:1b:aa:ab:fc:14:8f:5f:03:9c:21:49:3b:01:b4:
ba:34:11:a0:6c:66:a2:01:38:d9:67:9d:76:3b:3f:
f5:e9:7d:be:ad:bc:d0:bb:e4:a0:9e:33:51:ff:47:
b6:f9:a8:24:cd:7a:c5:3f:59:29:e1:f1:5e:86:59:
25:de:4f:33:2f:2a:94:fa:73:bb:10:e8:fe:c3:c9:
96:70:a5:bc:f3:f4:63:12:40:71:91:41:7f:8a:a3:
2e:25:f5:ce:59:f4:0c:dd:8c:2a:9e:4f:93:5b:16:
a4:7f:4a:fd:09:b6:5f:11:24:b9:9e:12:e2:60:4d:
90:38:32:c5:04:1d:76:0d:3e:b7:6d:dc:ba:2b:80:
30:35:7e:7c:c9:86:41:2f:06:df:e1:bd:37:38:6b:
4f:ca:f7:f8:9a:d8:44:cb:bb:61:0e:72:07:b4:e3:
f8:fd:7f:a9:79:7b:c0:c5:5c:79:b8:33:e1:d3:43:
af:42:d2:6a:08:ad:06:41:4f:0c:cb:f5:c5:27:8e:
25:34:40:65:e5:df:a9:55:2c:f4:71:f0:5d:36:57:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2D:A5:B1:1F:7C:A5:1E:F9:56:20:01:10:09:69:74:C8:98:E8:D5
X509v3 Authority Key Identifier:
keyid:11:D9:D7:97:5B:8C:DA:92:32:A4:24:7C:C9:DE:9A:6D:FD:BC:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdnXl1uM2pIypCR8yd6abf28YGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/FS2lsR98pR75ViABEAlpdMiY6NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0668b-6ec2-4db4-a957-af7382395e00/1/EdnXl1uM2pIypCR8yd6abf28YGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.116.0/22
Signature Algorithm: sha256WithRSAEncryption
53:6d:20:6a:2b:3c:6a:3a:c6:00:72:45:47:77:1c:c7:69:e4:
e9:c1:ce:5f:90:54:f7:43:5e:e5:10:3c:f2:ae:43:01:10:b3:
d0:a1:8a:25:de:83:db:2e:16:32:c1:5d:bf:69:3e:3f:7d:26:
39:91:f8:d1:22:10:ea:d6:8e:6b:2d:b9:df:89:32:66:b9:2a:
e3:10:b3:aa:9e:d2:cb:2f:d7:e9:ec:3b:4c:9a:a2:6c:0d:a1:
b9:63:c6:b9:c9:fa:54:d5:e9:81:11:2c:1a:65:02:0a:1b:18:
60:6c:51:62:aa:a1:fc:4a:3b:50:4e:7f:65:9d:c5:0f:ab:28:
b8:49:c2:c0:a6:72:eb:6e:98:72:00:47:f0:f7:21:5e:6f:53:
4a:38:03:9c:49:2e:0e:b1:b0:7c:58:57:53:e0:a0:06:2d:30:
99:25:fb:d9:dd:63:87:c0:cd:99:47:92:57:39:df:7a:44:34:
32:e7:51:de:ba:76:21:13:53:cd:3c:b3:9c:a0:35:b9:90:1d:
35:04:df:8b:f6:ce:3b:8b:45:55:30:75:31:51:e9:72:bc:b8:
ae:ba:2b:b2:a0:7d:c6:60:98:be:c3:62:9e:da:fe:5c:87:18:
de:35:17:50:41:51:60:6d:37:c9:18:64:6e:19:80:18:97:45:
83:3e:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:43:30 2024 by rpki-client on console-ams.rpki-client.org