Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ek6IeeL88l3GkOGypPW1GvdONZQ.roa
File: ek6IeeL88l3GkOGypPW1GvdONZQ.roa (raw, json)
Hash identifier: mx9hNWnhNq6YroUUYELNZe7If82yMfCOFR6g8bPILH0=
Subject key identifier: 7A:4E:88:79:E2:FC:F2:5D:C6:90:E1:B2:A4:F5:B5:1A:F7:4E:35:94
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7FE35561F2AADD0BC09873325EA4
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ek6IeeL88l3GkOGypPW1GvdONZQ.roa
Signing time: Tue 02 Jan 2024 06:32:19 +0000
ROA not before: Tue 02 Jan 2024 06:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62077
IP address blocks: 188.132.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7f:e3:55:61:f2:aa:dd:0b:c0:98:73:32:5e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a4e8879e2fcf25dc690e1b2a4f5b51af74e3594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:6d:f8:ee:fa:ee:63:13:e0:4a:30:c2:de:
28:68:ce:1a:2f:c2:06:c4:00:35:ef:e0:c4:e8:1a:
dc:c2:18:93:7f:de:20:1f:d5:c1:2b:c6:20:4d:21:
7f:2e:4c:59:60:c4:00:e5:61:98:63:6c:92:33:44:
19:9a:4a:58:0c:c9:2c:d9:c8:cd:d9:1c:44:23:fc:
50:76:fe:37:9d:de:fb:78:21:c3:d4:8b:9e:4d:8f:
4a:f2:9c:8c:3f:71:e2:fe:72:f2:b4:06:67:4b:07:
7a:0e:04:85:e8:0a:24:d6:ce:49:75:1a:6f:8d:ef:
4a:6d:84:ac:9d:c8:0d:66:6c:69:b1:b7:e0:29:cc:
7c:4d:95:e4:fa:60:2c:9d:e9:b4:f2:be:7a:30:2b:
0c:65:a9:ff:fb:8a:87:da:d5:d7:ae:94:f5:8a:70:
f5:4b:b1:fc:d5:62:e1:28:68:f7:ef:54:8c:e4:83:
81:83:f8:97:0e:3d:04:76:0a:cd:51:9e:f3:01:00:
d1:4d:3e:28:19:26:fd:2a:cd:c3:dd:47:dc:88:b7:
00:c0:4d:e3:7d:2d:10:84:8c:b4:55:80:4e:df:69:
04:ca:f9:ac:bd:82:aa:98:20:41:5f:62:98:30:69:
a3:a9:77:97:99:f1:0e:f5:50:7d:fb:85:d9:45:15:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:88:79:E2:FC:F2:5D:C6:90:E1:B2:A4:F5:B5:1A:F7:4E:35:94
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ek6IeeL88l3GkOGypPW1GvdONZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:aa:82:99:a4:29:4a:21:cc:6e:e7:d0:fd:9c:69:28:48:2f:
9a:30:23:58:11:cb:b1:9c:25:4e:66:cb:88:49:e1:a9:5a:17:
de:36:55:27:66:39:af:29:5c:78:1c:de:f9:21:d0:86:10:06:
67:74:df:fc:ee:d7:22:50:37:21:81:78:6a:20:2d:b3:90:ca:
5b:a7:17:1c:8f:d3:e2:e0:06:ca:ff:96:0c:e4:e0:08:3b:26:
0b:76:e1:9f:27:14:22:d3:35:40:3a:75:93:45:30:5b:93:5b:
5e:b6:0c:9d:7e:31:d1:83:9f:f5:d0:85:11:27:d5:3a:a3:78:
3b:ae:f9:ef:04:e2:12:f5:50:ba:81:36:d4:ab:ad:aa:28:ff:
0f:a9:a6:8d:97:fd:17:86:95:a9:e3:27:6c:3d:cc:72:a9:b9:
92:0a:bb:4c:c7:9d:ff:cd:d4:55:a8:61:5f:b7:b5:7c:d0:f9:
98:ec:2c:58:4c:17:70:aa:b7:64:e3:da:fe:75:3d:64:d3:87:
56:d5:05:ae:56:32:74:c4:78:2e:9f:af:8e:24:2f:fd:76:a4:
61:8e:a4:bb:e7:df:8e:45:7a:16:56:4a:38:a8:e0:54:d9:60:
c8:57:4b:39:de:f8:26:6a:d2:78:af:3a:e7:4e:87:9b:67:b2:
96:1d:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:43:41 2024 by rpki-client on console-ams.rpki-client.org