Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/14fJuAVHvfq_JsQgJUPP5ajIMdQ.roa
File: 14fJuAVHvfq_JsQgJUPP5ajIMdQ.roa (raw, json)
Hash identifier: NeaQJq4z/YBxjgE/iQHAMshtSGcvrJqk3sCA0E4M/LI=
Subject key identifier: D7:87:C9:B8:05:47:BD:FA:BF:26:C4:20:25:43:CF:E5:A8:C8:31:D4
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF85478BC70454B836B666FEF949ED
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/14fJuAVHvfq_JsQgJUPP5ajIMdQ.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203285
IP address blocks: 188.132.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:85:47:8b:c7:04:54:b8:36:b6:66:fe:f9:49:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d787c9b80547bdfabf26c4202543cfe5a8c831d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:64:e0:15:0f:ff:0d:f4:58:b2:e5:b8:47:
1a:04:6f:b7:25:25:b7:17:8a:b2:ee:42:b4:4d:14:
68:f2:5a:93:76:91:a0:55:3a:af:68:7e:01:2e:45:
e7:c3:69:de:32:63:54:bd:99:df:62:25:b0:e4:48:
ae:6b:56:41:cb:da:f5:4c:e2:68:d9:13:d5:74:93:
11:29:68:1d:e4:8d:f9:e7:30:75:4f:73:6b:a4:41:
77:f0:6b:10:85:ba:72:f6:ad:36:ac:d4:10:1e:c7:
e3:12:fd:6c:ee:c4:3c:7b:e2:a6:f1:99:96:a6:14:
fe:f3:0b:13:bb:ca:d4:a8:97:45:07:70:9e:66:15:
0b:ee:eb:fb:b6:a8:44:5b:44:83:55:8b:18:b9:4f:
58:10:89:be:55:cb:55:e1:88:ef:19:05:d3:c7:44:
b8:0b:f9:98:d0:75:28:3e:f4:d2:9b:74:ae:48:f8:
d3:97:e7:8b:06:16:bc:48:36:d2:c1:b7:c0:1c:2a:
8c:b9:40:69:67:05:bd:e4:df:51:83:d5:4d:62:70:
7d:d6:30:95:87:41:59:d2:5e:93:25:63:96:82:8f:
39:a7:40:90:60:2e:b3:99:96:07:87:17:19:7b:31:
1b:0b:99:33:c3:b2:5c:f7:4d:d9:26:09:36:e2:5d:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:87:C9:B8:05:47:BD:FA:BF:26:C4:20:25:43:CF:E5:A8:C8:31:D4
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/14fJuAVHvfq_JsQgJUPP5ajIMdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.171.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1e:e9:0d:2a:09:03:69:64:31:8e:bd:e4:37:6a:98:8e:69:
aa:b0:c6:dd:d8:cb:0a:ae:2b:ef:a4:67:42:99:87:81:b0:34:
2f:af:5e:5c:53:bc:1d:57:25:01:9e:6e:0b:24:f2:e0:12:5c:
74:9b:cf:2d:4f:2c:58:31:7f:0a:24:4b:bf:29:a6:92:70:16:
6b:7b:d0:a8:5f:8f:42:ff:21:9d:29:f0:e8:1d:8c:08:d4:e5:
84:a0:85:1c:4e:8c:cc:8e:43:5a:28:e1:9d:39:20:d0:59:83:
2b:90:b9:a0:9e:bf:98:4f:7a:d5:1b:c4:32:b9:4b:12:4f:83:
88:75:cf:b8:b6:8b:17:ae:13:e4:90:98:74:a4:9d:ed:ef:40:
6f:08:28:5e:2f:be:dc:6f:a3:78:96:1d:85:70:f4:20:03:3d:
84:dc:e3:fe:56:68:fb:34:cd:6b:b3:4c:fc:48:0e:9c:24:34:
4c:38:5b:4d:59:4c:b1:fa:5d:8b:b5:d6:cd:ac:c7:2f:e0:6c:
bd:6d:ee:cf:29:56:c5:02:61:d6:16:81:fd:0c:36:0c:63:a3:
bf:f3:14:75:c9:ed:5b:94:81:49:25:0d:57:84:42:6a:e8:67:
fe:11:9e:8f:e8:0c:38:85:4c:4e:bf:e3:85:a8:c7:15:9b:cf:
8c:4e:8b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:12 2024 by rpki-client on console-ams.rpki-client.org