Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OkSJBFVhGEksDAHNtTYuHs2BMY0.roa
File: OkSJBFVhGEksDAHNtTYuHs2BMY0.roa (raw, json)
Hash identifier: 43/KiIFJHJB7M6d9pyTL2APg4awHnQtixjUEYg2duT4=
Subject key identifier: 3A:44:89:04:55:61:18:49:2C:0C:01:CD:B5:36:2E:1E:CD:81:31:8D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8A34C41A0192C1A6A4D2C020BEDE
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OkSJBFVhGEksDAHNtTYuHs2BMY0.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206670
IP address blocks: 188.132.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8a:34:c4:1a:01:92:c1:a6:a4:d2:c0:20:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a448904556118492c0c01cdb5362e1ecd81318d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:fe:b1:68:bb:c9:9a:20:1c:1d:86:97:d3:
0a:a9:b9:cb:fe:b9:16:e9:76:c7:62:09:1e:bd:99:
cc:f5:4e:e5:67:d4:56:89:f2:46:5f:4d:4c:ff:e6:
6e:b0:c3:f1:47:2a:7d:46:dc:ca:c9:ba:30:f0:16:
74:45:32:53:2e:e4:00:e4:2a:fd:c2:2b:06:91:93:
3f:f1:08:05:6f:42:5f:4b:d6:3c:19:d5:15:39:97:
f9:ea:19:d5:ef:ef:04:71:60:d9:83:92:23:cd:33:
d8:c4:53:93:86:17:a9:f7:a3:41:31:da:fe:57:7d:
13:6f:d8:c6:0f:5f:ef:67:73:1e:40:df:5a:f5:51:
28:b7:68:3d:85:be:e6:79:07:5a:90:74:b2:42:2c:
73:e3:47:48:af:e6:0b:4f:09:82:2c:18:7d:3f:51:
6b:85:40:6c:8b:98:87:cc:ba:b7:53:fa:c3:fa:ed:
63:03:71:e0:3d:0e:c0:9b:45:5b:37:47:1e:bf:74:
0c:81:b4:1f:c8:b3:27:b3:f4:47:fc:1f:ab:10:b4:
07:7a:35:de:8e:27:05:90:e2:33:65:97:3e:4f:79:
fd:c8:a1:fd:6e:ff:6a:44:f0:a4:0c:01:64:b6:6a:
fe:e9:b1:d7:43:61:bb:cb:05:bb:56:90:39:19:71:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:89:04:55:61:18:49:2C:0C:01:CD:B5:36:2E:1E:CD:81:31:8D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/OkSJBFVhGEksDAHNtTYuHs2BMY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.156.0/24
Signature Algorithm: sha256WithRSAEncryption
69:80:44:c6:36:13:9e:4b:e1:4a:1d:25:90:14:10:3f:79:08:
ab:7b:23:98:31:a1:70:f8:1f:21:1b:e9:ba:60:c6:34:ff:b3:
e5:99:09:f4:cb:0e:bf:7c:c5:08:eb:fe:90:16:79:d5:2a:1d:
97:bf:58:23:d5:41:4b:e7:ba:87:d6:ad:bb:4f:b2:a0:10:35:
07:5b:2b:e9:c9:af:49:57:94:57:94:15:a9:07:a0:44:43:a2:
c3:7d:de:98:2c:f2:52:8b:86:de:df:ac:53:a5:1e:00:de:05:
f1:a1:4a:24:73:16:0f:a6:f1:ab:b8:9f:58:92:45:1c:14:b9:
f2:14:0c:ac:68:44:51:bb:16:9b:8c:28:14:f8:93:ff:d1:e8:
b8:a0:2a:a2:b4:be:be:28:fc:58:97:c0:e0:8e:b2:18:e3:6d:
af:bb:e5:f4:b4:81:00:a3:cf:d4:00:ef:c8:f7:d4:97:b3:16:
5c:a4:bc:dd:2a:bb:25:0c:d5:38:21:50:0f:6c:2d:9f:db:c0:
45:ca:fb:fb:29:73:b1:6f:5f:74:59:0e:7c:82:57:d4:0f:5e:
61:4d:33:59:b2:08:96:9a:86:b2:05:a8:f5:d8:54:f1:31:5c:
88:35:12:7f:eb:33:ee:a6:09:53:60:f6:17:30:67:8e:41:16:
1f:cb:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 09:09:30 2024 by rpki-client on console-fra.rpki-client.org