Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/iBIauvxNmzThktaKDuOQfhluoSo.roa
File: iBIauvxNmzThktaKDuOQfhluoSo.roa (raw, json)
Hash identifier: n8e+L1x6X67/uIiMugwZTCoDQQ5pfeFAdmT0nh0jmfQ=
Subject key identifier: 88:12:1A:BA:FC:4D:9B:34:E1:92:D6:8A:0E:E3:90:7E:19:6E:A1:2A
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190A7F8BB787071B5ED0072EF1D32E77B95
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/iBIauvxNmzThktaKDuOQfhluoSo.roa
Signing time: Fri 12 Jul 2024 17:23:34 +0000
ROA not before: Fri 12 Jul 2024 17:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 94.154.32.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:f8:bb:78:70:71:b5:ed:00:72:ef:1d:32:e7:7b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 12 17:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88121abafc4d9b34e192d68a0ee3907e196ea12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:de:5c:48:ee:45:0f:39:d4:3e:0f:0c:f5:
31:50:22:fa:aa:0c:aa:48:1a:8c:03:fe:d1:f6:bd:
27:1a:6c:f3:df:29:d8:8f:23:fb:b5:06:8e:93:1e:
f2:1e:9f:ed:12:2f:6e:42:1c:be:2a:2a:1e:5b:d6:
c8:e9:09:4c:4d:6d:b6:b2:76:32:08:e5:2b:5d:05:
a1:43:30:19:eb:e8:95:69:fb:d2:54:e8:12:2a:41:
0f:1d:68:6f:fc:da:c3:9a:cb:51:86:b7:09:02:44:
e7:ab:7b:b0:18:87:62:2f:9e:18:5c:80:5c:e2:8f:
e9:32:1e:2f:00:42:2d:f8:cc:2d:d7:8c:e1:92:65:
a3:23:a4:05:02:ad:f2:cd:14:80:bb:95:0c:37:a4:
45:8b:d6:a3:48:95:8b:3f:2b:53:69:fb:7f:bc:a7:
fe:ac:9c:1d:ab:93:5a:fa:41:b5:7d:cd:53:4e:2b:
0e:da:a4:e0:6b:c3:0d:77:59:a6:17:61:09:88:9c:
33:52:81:54:4f:f6:e8:f6:84:78:53:cb:27:ac:17:
05:14:cf:f3:bf:7c:ef:ae:c1:c6:d2:a3:61:16:44:
7f:92:f6:41:eb:e2:f6:fa:fb:95:dd:89:42:1d:1a:
ba:3d:d8:1c:82:7c:72:39:9d:cb:91:a2:65:38:5c:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:1A:BA:FC:4D:9B:34:E1:92:D6:8A:0E:E3:90:7E:19:6E:A1:2A
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/iBIauvxNmzThktaKDuOQfhluoSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.32.0/24
94.154.34.0/24
Signature Algorithm: sha256WithRSAEncryption
55:28:ea:74:40:e9:92:cf:b4:09:fc:5f:5f:dd:c2:98:bd:76:
47:6b:64:51:1d:17:58:9f:23:c4:b4:1a:03:7d:a8:d4:82:d8:
a9:2a:27:0e:64:a0:39:d0:5d:5c:18:ae:af:c5:8d:69:f4:9c:
17:e7:44:6b:4e:42:15:fc:a4:dd:88:a7:48:44:ff:d0:71:cc:
0f:f1:8d:81:50:e7:0c:75:06:ea:35:9f:32:20:89:61:a0:94:
7d:5e:4f:56:f9:ae:69:e8:b8:e6:dc:e9:27:a1:d1:28:d3:7f:
2a:fa:e6:ba:77:cc:75:94:40:84:40:6f:26:fb:17:91:1c:12:
58:27:ff:30:9c:0a:2d:21:7f:8c:ad:49:16:63:2e:e8:ba:66:
ea:fb:3a:a4:77:ca:bc:58:84:a2:f4:ed:d1:b1:69:1b:47:ad:
00:47:35:54:e3:24:de:9b:87:0a:74:bb:d8:7b:c0:75:29:4a:
45:26:cf:e3:f9:5f:8e:6a:2a:d6:c5:af:46:1d:a3:a4:fe:57:
a9:9b:eb:7c:b7:e6:1f:0c:0f:76:5a:ea:dc:23:4e:87:43:63:
b6:8d:ba:e3:b2:8d:fb:9b:e7:ad:53:4b:72:f7:5d:6b:d9:88:
46:77:e9:4f:fd:f6:f3:ca:76:aa:6a:dd:03:7f:57:a0:60:d4:
2c:ab:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:10:33 2024 by rpki-client on console-fra.rpki-client.org