Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/86JagjSUqFx5iU7JyYqVGMUMlLM.roa
File: 86JagjSUqFx5iU7JyYqVGMUMlLM.roa (raw, json)
Hash identifier: 3O8h0DPKnJ4Sc2rcWcirn52ASjEgO8R0qssX+ZcGPsM=
Subject key identifier: F3:A2:5A:82:34:94:A8:5C:79:89:4E:C9:C9:8A:95:18:C5:0C:94:B3
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018E1909DF9B4558226073030601D5029875
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/86JagjSUqFx5iU7JyYqVGMUMlLM.roa
Signing time: Thu 07 Mar 2024 13:11:01 +0000
ROA not before: Thu 07 Mar 2024 13:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198584
IP address blocks: 188.209.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 20:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:09:df:9b:45:58:22:60:73:03:06:01:d5:02:98:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Mar 7 13:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3a25a823494a85c79894ec9c98a9518c50c94b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:bd:4c:77:99:6b:84:67:68:fd:48:fc:68:
1e:2f:01:43:6d:16:74:fa:d4:fa:cd:0b:3b:fe:c1:
99:02:aa:03:74:49:ac:4a:2a:78:7d:a3:18:70:b7:
99:47:fd:6b:96:d1:21:a7:c9:32:00:4e:09:c5:a1:
5a:74:1c:6f:43:c9:eb:5d:77:b9:6f:8b:69:46:ef:
b7:a8:d5:35:e5:eb:b7:88:c2:9f:6b:2d:da:cb:8a:
ef:68:0f:8f:3a:1e:f2:87:c9:51:ae:5f:ed:57:da:
b4:49:61:be:4f:24:ab:2b:12:a8:e6:0c:74:98:bc:
aa:f7:79:20:e9:52:bc:89:fa:b7:3c:0c:b4:de:05:
35:d1:8b:79:4c:be:13:10:0d:4b:2e:b0:4c:e4:a2:
94:ba:4b:d0:cb:88:c1:4b:6a:72:cb:a4:df:c4:da:
a0:86:8d:c9:5d:e5:03:1c:61:47:0b:07:4f:d1:a6:
46:47:5b:7f:4c:a3:ea:2d:dd:e8:4a:46:04:e9:a3:
eb:30:79:06:1d:3b:d8:ad:07:c2:62:93:66:a3:00:
16:bc:f4:da:b6:3e:5e:61:a1:73:fd:4c:71:44:e7:
72:f5:5b:6a:3d:d9:2a:b4:7d:da:3f:aa:31:f6:cb:
7a:63:58:40:29:78:ee:53:c1:c4:11:04:c0:4e:f7:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A2:5A:82:34:94:A8:5C:79:89:4E:C9:C9:8A:95:18:C5:0C:94:B3
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/86JagjSUqFx5iU7JyYqVGMUMlLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
87:20:4e:fb:9c:c2:b7:ef:cd:3c:0b:a4:14:38:cc:ea:81:2c:
86:be:c8:fb:61:eb:18:c5:2f:f1:6a:d6:bc:d1:8e:49:f8:42:
db:1a:a6:e6:ee:2a:7b:5c:56:4e:55:f4:fd:fb:5d:2b:18:c7:
ca:d5:d9:07:5b:6f:d1:85:5f:d3:aa:12:23:64:b0:61:72:94:
10:78:57:6d:d9:3e:11:36:23:da:5a:9a:05:98:65:46:42:83:
a0:a7:ab:40:0f:21:09:58:5b:93:b6:7c:49:72:aa:3b:c0:fe:
b4:ab:0a:70:b9:71:d0:c4:cf:ec:54:7e:c1:d3:cd:a3:2c:82:
56:8d:b0:21:2e:d7:2c:fc:be:95:2b:ec:46:dc:30:2c:3c:1b:
7b:f8:0b:ed:2b:37:da:d3:20:57:68:f9:33:d5:79:a1:5a:7c:
96:48:87:ba:0d:22:72:63:e1:28:cd:3e:08:29:cb:13:0f:05:
ca:d0:74:5a:6a:3d:a8:e0:5b:91:9c:cc:5a:b8:81:cf:2f:0e:
6d:3f:27:b2:b3:38:0b:7f:6c:7e:8a:ae:8d:90:77:a0:9f:22:
ab:f7:37:54:ca:5c:5a:d7:8b:90:bb:6f:12:5a:9e:4b:70:31:
ff:71:95:24:9d:fe:ca:65:d2:24:75:e7:99:d8:85:2e:db:cc:
ce:90:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:55:45 2024 by rpki-client on console-ams.rpki-client.org