Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PmXHPkWneOYxh8G-aX1vC__rtUE.roa
File: PmXHPkWneOYxh8G-aX1vC__rtUE.roa (raw, json)
Hash identifier: 0QOAD9KYUd8ROBM8VA2ZAJKFw1OlOPB7xb7wYsAnxFA=
Subject key identifier: 3E:65:C7:3E:45:A7:78:E6:31:87:C1:BE:69:7D:6F:0B:FF:EB:B5:41
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8496CA696B37D72EFC1BA9DC6BFE
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PmXHPkWneOYxh8G-aX1vC__rtUE.roa
Signing time: Tue 02 Jan 2024 06:32:20 +0000
ROA not before: Tue 02 Jan 2024 06:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201575
IP address blocks: 188.132.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 13:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:84:96:ca:69:6b:37:d7:2e:fc:1b:a9:dc:6b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e65c73e45a778e63187c1be697d6f0bffebb541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:c4:ca:72:fb:5d:ee:c1:fc:b1:84:d5:99:
fd:21:c8:eb:33:c3:12:2c:ce:ab:f8:65:2c:e5:61:
4b:50:00:69:f6:bd:69:bc:c1:aa:5b:0e:7a:53:8c:
d3:bb:bb:2f:1d:be:54:fc:1d:01:8b:52:4a:24:e6:
2d:23:18:bb:0d:e0:ee:3e:21:f4:aa:46:fb:7e:8d:
04:1d:0d:2d:88:bf:95:96:75:00:fb:fd:d4:7b:06:
73:e8:1b:70:c5:06:2d:78:db:ef:fa:2b:41:6f:b1:
f6:37:28:06:59:cd:1d:a8:2a:d3:a1:c2:a2:16:fd:
c3:30:6c:3e:ee:e6:bc:0b:37:7d:c5:fb:68:56:aa:
4f:0d:bf:10:6a:79:eb:21:a5:94:38:fc:81:b8:ff:
4a:b4:44:50:8f:4d:a9:35:29:31:30:67:5c:ef:0d:
d8:20:34:0b:42:93:ee:93:21:71:92:66:bb:1e:28:
fe:a7:5c:87:37:99:d7:76:09:81:27:11:5b:22:74:
8d:b1:c8:fd:12:40:e9:56:f6:32:08:82:f6:b7:7d:
8d:bd:cf:a7:da:fd:d9:8a:2b:be:f5:f3:bc:70:8e:
e9:44:74:b0:f0:69:92:f7:f1:4f:b9:27:8b:87:04:
11:df:01:40:82:a4:9c:4f:ca:08:72:ff:0b:4b:bd:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:C7:3E:45:A7:78:E6:31:87:C1:BE:69:7D:6F:0B:FF:EB:B5:41
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/PmXHPkWneOYxh8G-aX1vC__rtUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:56:3d:ce:2d:77:2e:8f:42:54:ce:0f:a4:86:e4:60:d4:2e:
d9:03:56:34:b2:a6:22:49:da:f1:8d:aa:14:66:73:d4:f3:00:
88:65:00:80:4f:9f:73:4d:52:21:ce:ba:11:62:a4:42:88:0b:
85:1e:66:97:f5:62:17:fd:74:7e:cd:8c:cf:9e:02:1e:b8:93:
51:f6:f7:36:8b:d7:1b:95:4f:84:bb:56:24:3b:0b:6f:04:12:
50:3f:39:67:38:7f:2e:58:eb:98:35:09:2f:8b:79:13:c3:ac:
82:ae:c1:bb:92:6a:a5:f1:87:68:0b:5d:de:42:c9:dc:17:9f:
c8:49:e2:4b:a4:2c:2a:52:d0:d2:72:20:e1:1a:f9:ed:57:a4:
62:34:cc:ef:10:3b:1f:62:80:a3:96:36:d6:58:db:b8:6f:87:
a4:b5:86:97:d2:1c:82:d9:fd:4e:84:91:29:ec:64:90:a5:a0:
a8:b3:de:c8:75:a9:bd:19:84:cb:26:54:48:77:27:08:f7:42:
63:30:c0:11:99:8e:94:d5:5f:68:d2:51:12:f5:4e:fb:b4:15:
ae:ca:bc:45:70:26:63:bd:ad:a1:1d:a2:28:eb:d5:bf:81:b2:
97:35:d5:e7:aa:56:39:79:4a:6f:2c:55:9a:42:c3:b3:c7:90:
a6:c9:91:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 16:19:54 2024 by rpki-client on console-fra.rpki-client.org