Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kCFK5KVTZ-oBpbpUm6gWRufqphY.roa
File: kCFK5KVTZ-oBpbpUm6gWRufqphY.roa (raw, json)
Hash identifier: auwcGtcgRGQzg15U/5lm2/LPsOIbOGKKP/uRfEXPYiA=
Subject key identifier: 90:21:4A:E4:A5:53:67:EA:01:A5:BA:54:9B:A8:16:46:E7:EA:A6:16
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018DD50BAB3AABC8D61508E116FEE39C28C5
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kCFK5KVTZ-oBpbpUm6gWRufqphY.roa
Signing time: Fri 23 Feb 2024 08:18:48 +0000
ROA not before: Fri 23 Feb 2024 08:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 188.66.25.0/24 maxlen: 24
188.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:0b:ab:3a:ab:c8:d6:15:08:e1:16:fe:e3:9c:28:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Feb 23 08:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90214ae4a55367ea01a5ba549ba81646e7eaa616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:30:0f:36:d6:2d:56:6b:59:e3:48:8d:fb:
30:8f:02:3e:cc:cb:25:f8:2b:80:1e:30:9e:c7:b3:
aa:d5:d9:dd:38:cc:56:ff:02:b2:69:70:29:cb:d2:
c9:77:d7:51:a8:84:ff:f9:1d:0b:9f:e6:eb:be:43:
dc:8c:1a:54:3b:af:ec:1b:c3:f3:d0:6a:7e:2d:11:
4b:b5:0d:0b:e2:3d:07:d4:5f:5b:a3:ea:9f:c0:2d:
ed:d0:6b:93:8d:52:93:d2:cd:0d:d8:8c:3d:c3:1f:
88:c1:27:8d:6c:9d:4c:e8:b7:44:1a:e4:02:be:91:
55:7b:11:dc:da:c7:e0:a8:10:d0:31:83:10:a5:31:
90:37:ae:a0:23:d9:b2:79:3f:9c:46:b7:ef:83:d6:
03:1c:36:78:80:a9:a3:df:38:d0:da:3a:f4:67:85:
37:a8:27:a7:f8:1a:be:70:b3:f3:2b:c3:12:03:1d:
59:5b:61:d7:de:8a:53:10:39:83:b9:33:af:27:1e:
4e:25:4d:d6:43:f7:99:b2:9e:69:82:00:4d:05:9b:
1d:d2:9e:62:bd:7a:04:fe:8b:8b:fa:6c:75:75:11:
91:b8:1a:2e:07:07:bb:bf:81:10:ef:85:52:52:03:
80:7c:04:73:c8:24:d3:1b:60:6d:22:5f:59:b7:2e:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:21:4A:E4:A5:53:67:EA:01:A5:BA:54:9B:A8:16:46:E7:EA:A6:16
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/kCFK5KVTZ-oBpbpUm6gWRufqphY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.25.0/24
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
16:13:1c:c1:d3:54:a7:07:e5:52:9c:8f:48:0f:7e:78:06:b5:
05:c0:d9:20:af:b5:1f:9f:ca:2a:f5:d0:3d:15:b2:bd:a6:0c:
96:7b:c3:26:18:b1:28:8e:03:ef:d2:56:98:52:43:49:e0:29:
a5:ff:00:0e:61:3e:06:27:bc:44:5b:2d:b5:e3:c7:84:b9:2e:
4a:01:f9:d6:68:77:85:83:27:b1:4d:19:9e:75:ca:88:f6:c4:
59:90:c0:fa:61:76:b1:15:19:e7:15:45:0d:03:9b:8f:a1:12:
29:69:0c:cf:25:06:80:2e:e4:e6:ed:77:79:5f:31:a0:8a:87:
56:96:8a:b7:cb:9b:15:5e:94:b4:4f:a8:bf:26:a1:24:2b:aa:
93:d2:3e:a4:f5:af:c6:09:19:03:b2:f4:2d:31:54:5b:1f:ce:
a5:5a:03:1e:05:78:25:85:20:c1:bb:c2:98:76:73:16:71:cd:
bf:15:ca:f3:ff:3e:68:c6:5f:37:96:62:57:8f:02:af:bf:17:
18:30:e1:28:6c:ea:2e:ca:ca:91:c7:7d:3d:5f:87:63:e7:ae:
dc:fa:c1:c4:c8:c5:06:57:0d:13:fd:1b:89:d8:15:db:07:7d:
71:ff:1e:1c:c6:ad:c0:ec:01:23:99:10:16:59:3f:69:ed:be:
44:52:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:42:26 2024 by rpki-client on console-ams.rpki-client.org