Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-ITuPG8JfXNxF-c32aFOHRh9114.roa
File: 1-ITuPG8JfXNxF-c32aFOHRh9114.roa (raw, json)
Hash identifier: f5Eoy4ARlLM6wbIKTSdYDw3KWmDkOKwqBmqa1BDlEIs=
Subject key identifier: F8:84:EE:3C:6F:09:7D:73:71:17:E7:37:D9:A1:4E:1D:18:7D:D7:5E
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018D5975A9953DB774590A38D6BEC2C32B14
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-ITuPG8JfXNxF-c32aFOHRh9114.roa
Signing time: Tue 30 Jan 2024 08:21:39 +0000
ROA not before: Tue 30 Jan 2024 08:21:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 188.215.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:75:a9:95:3d:b7:74:59:0a:38:d6:be:c2:c3:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 30 08:21:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f884ee3c6f097d737117e737d9a14e1d187dd75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:28:86:29:f2:1e:da:0d:57:f1:26:fe:c2:
71:26:48:3a:c1:a7:71:e5:0b:19:f6:71:52:93:46:
75:5f:cd:6e:52:95:77:5a:32:ae:97:08:ea:a9:db:
87:fa:90:3b:51:e1:a3:9f:da:28:a2:15:5b:36:40:
9c:10:1a:4c:8b:77:15:6d:12:c5:7f:be:cc:74:5d:
01:bd:e0:da:4a:65:13:5c:04:84:87:5f:86:0b:d0:
99:18:1f:e2:2c:2a:a0:b3:30:56:84:19:1e:b9:50:
11:e8:b8:2c:75:b0:d8:41:26:55:0c:ea:96:ff:48:
b5:a9:28:da:0f:20:ce:c0:88:6c:27:65:13:ca:a4:
5b:91:6e:f9:d2:53:fa:39:6c:48:69:fe:ed:31:ca:
bf:de:a4:2f:9f:70:48:14:db:55:e9:c3:fd:d9:e4:
10:f0:62:90:4e:9d:7d:c0:5c:25:15:52:dc:e7:9b:
a7:a6:b3:51:3a:58:b3:d9:7d:75:6c:38:4a:ad:a5:
4c:3c:db:54:82:95:20:93:eb:e3:6d:f7:c1:03:e7:
4e:bb:e7:ef:2e:d1:c4:86:c0:ec:f1:5d:15:90:e1:
c0:75:b5:d7:ca:f9:4f:4b:00:43:ec:48:41:9b:b4:
25:c2:ad:66:9a:a2:e7:e6:d5:6b:b0:94:28:07:32:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:EE:3C:6F:09:7D:73:71:17:E7:37:D9:A1:4E:1D:18:7D:D7:5E
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-ITuPG8JfXNxF-c32aFOHRh9114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:64:c8:a8:37:f4:c4:9c:82:3b:d9:8c:66:98:d6:8d:7a:6b:
c9:09:ed:65:77:62:eb:49:e3:25:94:be:cc:61:26:13:15:43:
26:4c:eb:24:35:a1:93:df:ce:53:c0:1c:d3:d8:20:84:b0:3b:
74:39:a7:88:59:b7:89:ed:18:bf:bf:9d:b1:86:16:e3:89:c7:
e5:de:2d:27:93:1c:c7:98:6a:98:50:ef:2d:3d:6a:20:62:97:
d1:9a:92:62:cf:a4:57:9f:e4:17:69:09:34:6c:26:23:fa:87:
95:75:29:54:73:e2:97:1c:c8:5c:d3:a5:cd:0f:7a:f3:62:0f:
63:a0:dc:e9:54:d4:ed:81:f6:71:39:d2:13:b8:bf:08:1d:fb:
c8:57:6c:b7:5b:36:c1:e1:71:87:59:c3:10:e6:8d:01:95:ea:
3a:1a:c1:d1:57:b8:bc:4a:74:b0:ec:da:a6:bf:38:7f:27:65:
e6:1a:05:4e:a1:97:ca:8f:a7:40:d2:f8:22:7d:53:92:e0:6b:
e2:eb:0b:16:0a:0b:ad:36:1b:6e:26:83:01:14:ac:67:e6:ca:
41:9d:59:11:a0:f4:d9:7d:3c:c0:c4:e9:26:ce:ca:25:91:7a:
b8:25:93:22:bb:13:c8:c4:f2:62:09:f4:67:28:ad:e0:7f:9d:
bf:c8:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:31:22 2024 by rpki-client on console-ams.rpki-client.org