Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LQ3vy6WL7lMpyWWrY5zdYx94VHo.roa
File: LQ3vy6WL7lMpyWWrY5zdYx94VHo.roa (raw, json)
Hash identifier: AVvmqIrV7EyuOz7/u93BX4bb0NcYUqgiFTgO2FiUE9c=
Subject key identifier: 2D:0D:EF:CB:A5:8B:EE:53:29:C9:65:AB:63:9C:DD:63:1F:78:54:7A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF82D1ACD013C1BADAAC8E4A05C653
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LQ3vy6WL7lMpyWWrY5zdYx94VHo.roa
Signing time: Tue 02 Jan 2024 06:32:20 +0000
ROA not before: Tue 02 Jan 2024 06:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199797
IP address blocks: 188.132.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:82:d1:ac:d0:13:c1:ba:da:ac:8e:4a:05:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d0defcba58bee5329c965ab639cdd631f78547a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:e0:3f:0f:81:60:47:3a:35:a5:63:58:68:
01:31:31:c9:fd:a5:93:91:7a:aa:50:ae:d6:f7:cf:
aa:06:bc:ac:75:bc:73:39:31:79:f4:d8:cf:f3:97:
6a:91:57:c1:d5:f9:61:45:1e:16:7e:58:ef:3d:6b:
e4:e6:9c:fa:cb:e6:35:d1:17:19:18:40:45:a1:ed:
bc:ca:f7:55:34:48:78:eb:bc:75:9b:0e:dc:5b:48:
50:a9:c4:e2:5b:5b:15:16:2b:23:d6:15:b8:91:d8:
79:e0:91:f8:2a:f7:b6:ee:07:6f:67:e2:bf:bc:91:
91:30:db:aa:d1:95:26:b7:12:e4:0a:d6:00:af:1a:
f0:f2:c1:f2:97:b9:91:44:0d:cf:88:c8:2c:1f:6a:
82:3f:ac:04:66:e1:52:d7:3a:91:cf:05:6b:03:50:
ba:cd:46:d2:b0:ce:85:0d:df:73:e1:bb:f2:71:6f:
20:11:ee:66:a8:b7:eb:8e:c5:8c:b7:17:43:f8:ca:
21:d5:1d:54:78:a7:70:f9:9d:ea:8a:3e:0f:9f:00:
08:a7:27:15:75:72:25:54:cb:14:95:20:e7:5c:af:
06:41:a0:82:29:b5:c9:19:6d:24:f5:55:2d:f6:43:
bc:d1:9c:89:af:d5:21:57:ce:00:9e:98:fa:9d:ab:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:EF:CB:A5:8B:EE:53:29:C9:65:AB:63:9C:DD:63:1F:78:54:7A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/LQ3vy6WL7lMpyWWrY5zdYx94VHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:35:e3:01:74:cc:eb:54:26:0d:ed:df:30:ce:04:42:12:3d:
15:ec:75:d5:d4:fe:34:d2:16:81:35:8d:f1:0d:20:44:86:56:
46:49:1a:0d:47:d8:71:88:95:9a:8c:f5:99:a3:e2:78:0b:05:
7a:0d:ac:7f:f0:1a:27:68:75:9f:10:69:e8:e8:a7:1a:b2:61:
65:c9:67:5f:11:69:04:fb:2a:8e:33:88:5c:62:7f:b2:84:86:
c7:0c:e7:8c:59:e8:96:00:73:82:56:92:f8:c2:7e:0e:7c:57:
25:71:12:0c:6c:01:54:99:04:db:c7:86:ef:1a:6c:46:99:e1:
6d:5a:56:de:d5:d6:90:65:8b:26:45:53:6b:e1:0b:18:c4:16:
78:82:40:12:ae:95:d5:f6:e9:a6:c8:09:28:d9:c4:3a:29:d3:
36:4c:e9:e7:a5:40:d8:81:07:fe:23:3e:e3:74:52:1f:39:dd:
43:45:aa:5d:a0:f3:3f:56:7c:ef:1f:65:64:33:15:3f:33:e7:
80:2d:52:fd:5e:0b:95:1f:40:97:36:4b:cb:76:a6:38:43:6f:
cc:aa:9c:48:2d:d1:37:c6:6e:9c:a1:54:ff:9e:0e:b9:18:be:
0f:6d:24:5a:53:28:11:aa:8e:4b:f7:9c:82:b2:7c:c1:d6:39:
c4:a6:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:43:41 2024 by rpki-client on console-ams.rpki-client.org