Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3Eyee6LaoRqNrFU-ClEFFAk6Gd8.roa
File: 3Eyee6LaoRqNrFU-ClEFFAk6Gd8.roa (raw, json)
Hash identifier: zrt9bFkJgf6ckPxUfUs9NtIfHlr3fLHwCwtNaJVeM+Y=
Subject key identifier: DC:4C:9E:7B:A2:DA:A1:1A:8D:AC:55:3E:0A:51:05:14:09:3A:19:DF
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B98126FB96D415CD720633ACBC80A
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3Eyee6LaoRqNrFU-ClEFFAk6Gd8.roa
Signing time: Mon 01 Jan 2024 18:31:32 +0000
ROA not before: Mon 01 Jan 2024 18:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207854
IP address blocks: 188.114.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:98:12:6f:b9:6d:41:5c:d7:20:63:3a:cb:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc4c9e7ba2daa11a8dac553e0a510514093a19df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:b0:ca:8e:84:0d:17:47:ba:97:cf:18:9b:
17:a7:e9:74:5e:61:aa:0a:01:31:73:e7:35:69:30:
6b:46:05:72:e6:60:31:37:f3:e0:c7:c8:06:6a:ff:
4e:45:2e:6e:77:a8:c0:d8:6a:5b:dd:5d:72:21:aa:
7a:30:41:06:f5:2c:a2:2f:94:42:95:dd:3a:03:63:
65:d7:f6:c9:8f:92:d7:9d:b4:40:d9:77:59:0d:40:
0d:70:1a:19:45:d4:6f:6f:33:87:bd:78:ec:84:8f:
4f:03:fd:c9:dd:fd:49:77:85:5c:a8:8e:61:61:3c:
98:70:d3:f6:1f:b6:d0:bc:0c:ee:5b:89:ee:34:fb:
44:13:8a:e2:83:4b:7d:0e:ab:96:bf:c8:52:59:c0:
19:e3:08:eb:b6:ff:3d:0a:71:48:a5:4d:eb:35:7f:
c0:96:01:9e:05:bd:87:20:15:bc:29:96:51:25:a1:
7c:5f:23:73:5d:2e:08:6f:fa:ab:b0:c8:d9:e1:5f:
c0:9b:8f:11:d7:3b:56:ec:c7:df:62:79:fd:bc:ac:
b2:e2:c1:f9:3f:35:af:4c:21:ba:37:79:3e:7f:1c:
19:61:7e:88:52:8c:aa:19:34:91:d7:7a:0a:fe:82:
26:9b:c0:f2:e3:e7:9c:e9:0c:34:1b:ce:ea:00:02:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4C:9E:7B:A2:DA:A1:1A:8D:AC:55:3E:0A:51:05:14:09:3A:19:DF
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/3Eyee6LaoRqNrFU-ClEFFAk6Gd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.65.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e8:3d:f5:96:69:56:f1:99:f3:91:d3:06:7b:59:6e:7a:40:
c4:9b:c0:c0:f7:98:dc:f0:0b:f3:68:ff:5a:6d:86:2e:19:ac:
9a:55:4f:01:ba:d0:e1:f4:cb:49:4d:5b:a4:08:89:85:64:a9:
a9:8a:e5:74:a9:28:7b:63:86:d7:d2:4d:f6:e4:3a:b3:a4:93:
7f:a7:7f:df:5e:8f:0b:7c:79:7d:d7:8a:f6:12:f3:84:a7:cc:
ba:96:c7:d7:fb:aa:eb:e9:e6:59:df:4f:3f:65:ea:e4:0a:17:
b3:9a:3c:05:7f:56:f1:1c:3e:dc:3c:00:b5:b2:75:61:29:d7:
f3:af:59:dd:b3:17:6a:08:5f:1a:15:0b:ef:2e:2d:b0:c1:c4:
bb:39:a6:e6:c1:b5:ea:7f:f4:af:8e:62:66:eb:d7:69:f7:5e:
5d:2f:eb:4c:c0:e7:09:18:4a:b1:db:56:ab:c2:8c:3b:25:97:
b6:a2:93:4a:19:f4:1c:8b:c7:2f:25:d3:35:4c:09:ed:a9:7b:
b1:c9:0c:bd:1f:c9:fc:ec:ec:b0:1a:80:8e:8b:a5:a6:87:66:
52:27:cf:a5:26:07:65:d7:27:48:d1:6e:cf:aa:97:3f:57:44:
aa:31:54:9c:10:7c:0c:a3:d4:76:72:8e:bd:48:9b:d0:e7:69:
ad:41:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:06 2024 by rpki-client on console-ams.rpki-client.org