Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/Hv4v9AKkNvSFrJq4-_EcOusuo6k.roa
File: Hv4v9AKkNvSFrJq4-_EcOusuo6k.roa (raw, json)
Hash identifier: hVSkIC2QDOrkjAmApq3LuHdMRn3xKec+LohAZ0lT+WM=
Subject key identifier: 1E:FE:2F:F4:02:A4:36:F4:85:AC:9A:B8:FB:F1:1C:3A:EB:2E:A3:A9
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 0190F37BA4267CE6EF9E2C03A486087FD457
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/Hv4v9AKkNvSFrJq4-_EcOusuo6k.roa
Signing time: Sat 27 Jul 2024 09:18:04 +0000
ROA not before: Sat 27 Jul 2024 09:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52221
IP address blocks: 188.92.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f3:7b:a4:26:7c:e6:ef:9e:2c:03:a4:86:08:7f:d4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: Jul 27 09:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1efe2ff402a436f485ac9ab8fbf11c3aeb2ea3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:b5:a1:4c:59:05:a3:2a:8b:b9:88:49:6a:
e9:02:91:5d:8c:d6:d3:a4:64:44:59:fe:4b:19:e9:
43:72:3e:1b:b7:0f:12:13:4c:08:63:38:92:26:d8:
62:8c:a3:1e:87:0e:bc:09:ef:ff:53:b7:53:d7:7e:
c4:19:b8:7c:18:0a:f5:85:ec:cc:a5:c8:4a:b8:8d:
4c:c4:29:9d:57:e1:5d:56:86:15:f5:51:81:2f:d8:
8f:2b:e4:4b:94:0c:15:d7:97:c2:bc:3d:17:cf:d8:
71:ed:be:7b:77:20:bf:27:46:3b:6f:2c:5b:a6:fa:
38:6a:ef:eb:84:44:a8:41:a8:43:61:d6:c9:55:09:
3c:4c:a4:56:0a:48:f3:b8:38:58:17:4d:f0:46:b2:
0e:f9:9b:37:3a:b4:1d:41:e5:fd:28:f8:d7:4e:5d:
55:75:c7:54:be:b4:b3:a5:2d:9b:54:f9:3e:dd:6f:
f8:88:fe:9a:0f:e5:5a:27:57:80:1a:d8:4f:84:ae:
5e:13:c0:42:c7:e9:0f:4b:20:0c:51:84:cb:8c:5c:
a0:d3:c5:77:bb:32:40:da:e2:7c:e1:e2:a0:fe:2f:
d3:bd:37:ab:be:c6:38:0c:3c:54:42:67:fc:ef:02:
63:88:a9:0a:12:0a:05:c3:9d:40:07:0e:3f:9b:eb:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FE:2F:F4:02:A4:36:F4:85:AC:9A:B8:FB:F1:1C:3A:EB:2E:A3:A9
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/Hv4v9AKkNvSFrJq4-_EcOusuo6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f4:68:91:3e:58:06:28:35:bd:41:90:65:50:c1:20:80:1f:
58:79:9b:32:0f:d4:21:46:c0:68:5a:c5:16:ab:64:d7:93:f6:
9a:0e:f5:2e:f9:ee:20:60:06:34:7e:70:9f:c5:95:fe:6e:9a:
83:4f:e6:cc:a7:e9:6a:44:91:db:fd:36:2e:95:77:09:05:39:
db:12:2f:c3:0a:e3:07:b9:af:26:36:9b:0e:ba:68:36:ff:84:
e6:ad:df:80:f1:a4:e4:1e:f0:d9:21:ae:82:8d:63:86:61:5c:
6a:9c:47:ef:f6:dd:0c:08:57:99:8d:4c:92:90:21:2f:f0:2c:
43:b5:f8:e7:fa:72:09:9d:29:5b:97:4e:43:c6:66:94:0f:cf:
c6:b2:39:73:c0:2d:91:9e:81:8f:ab:78:b0:d6:8a:02:2f:91:
7a:5d:0a:18:80:20:34:7c:4a:86:50:52:4b:dc:e7:5e:5e:fb:
1b:7e:37:b9:00:f3:77:24:23:00:e6:2a:73:ec:a6:18:32:c7:
4e:4f:a0:e4:77:d3:08:07:53:62:0c:52:15:a5:60:bf:db:08:
29:b8:fd:0c:dd:a3:89:c8:16:89:a7:18:32:02:ee:e2:f5:e8:
90:ea:3a:60:42:e1:78:bc:dd:78:b4:0f:70:49:2e:5d:c2:ce:
b0:03:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:04 2024 by rpki-client on console-ams.rpki-client.org