Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/l6ih1iYtP77GVLKX3ilbWjdD21s.roa
File: l6ih1iYtP77GVLKX3ilbWjdD21s.roa (raw, json)
Hash identifier: DdzmJIiUsTLeVCBx/AwstC0RzRsKEEy6ENuzVukyihs=
Subject key identifier: 97:A8:A1:D6:26:2D:3F:BE:C6:54:B2:97:DE:29:5B:5A:37:43:DB:5B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018EF2C0CF5EFCFBAD2B4B2C1294D9BF936C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/l6ih1iYtP77GVLKX3ilbWjdD21s.roa
Signing time: Thu 18 Apr 2024 19:48:26 +0000
ROA not before: Thu 18 Apr 2024 19:48:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216184
IP address blocks: 188.132.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:c0:cf:5e:fc:fb:ad:2b:4b:2c:12:94:d9:bf:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 18 19:48:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97a8a1d6262d3fbec654b297de295b5a3743db5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:7b:86:8e:0d:e4:ce:07:35:81:d8:d6:5c:
eb:ee:9f:1d:05:63:b6:50:09:2b:a3:ed:c2:09:3b:
fc:c9:07:e6:81:89:b6:6a:f2:a6:b7:6b:ff:42:ad:
2c:06:c4:d1:04:1c:27:4f:13:c4:06:05:6a:a9:e6:
c3:c4:7f:78:13:41:b4:c6:ff:b8:24:47:6d:78:71:
be:2f:86:50:1b:fc:a1:f0:1d:ca:96:a9:e6:aa:7c:
10:c8:e1:5a:2f:78:82:1f:cc:c2:e6:93:1b:37:6c:
81:38:83:76:77:5b:aa:03:ab:54:31:49:0d:28:3d:
5b:a6:d8:ff:49:e0:6b:b3:ab:a5:83:31:b5:9b:a4:
95:d2:05:3d:2d:da:48:8b:f8:2a:b1:e4:d8:ed:ea:
b6:b8:f1:69:cd:71:d6:2a:30:8e:91:d6:f2:c4:0b:
4e:29:d1:23:2e:98:eb:ab:68:40:af:31:e9:73:01:
6e:f7:79:a4:70:6a:74:a7:49:cb:35:0b:72:3d:77:
d8:cb:9c:f6:0c:e2:50:89:98:82:b4:91:80:f4:f7:
c9:5d:b0:a0:8f:9b:52:bb:af:17:48:a3:79:00:58:
44:84:f4:f2:67:ce:02:41:55:af:e6:44:80:6f:aa:
72:11:ad:5d:68:2f:ab:df:a3:0e:8e:61:21:8c:c8:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:A1:D6:26:2D:3F:BE:C6:54:B2:97:DE:29:5B:5A:37:43:DB:5B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/l6ih1iYtP77GVLKX3ilbWjdD21s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:63:78:54:36:b9:28:3a:a9:33:3f:ae:29:95:56:6d:c8:24:
02:70:84:bb:2f:e0:93:80:58:ee:cd:15:01:dd:c7:58:a7:6d:
c9:46:d4:42:2d:0c:75:a0:4e:75:85:1f:18:6d:ce:27:66:20:
53:cf:8f:e7:12:71:9c:0d:1c:e1:42:8c:c3:95:76:30:fa:e3:
fb:45:61:f3:c1:48:f1:9d:76:19:c1:19:7c:72:25:0f:d9:7b:
59:ef:85:e1:b8:58:5a:22:be:9b:ea:39:4f:a2:1a:92:56:77:
77:9d:9d:51:71:fb:2a:f8:57:93:27:e1:55:45:9d:0e:f2:5e:
1e:fa:66:c7:e4:c7:fa:ba:e0:62:f3:04:a3:3b:7a:b4:e8:88:
d7:d3:aa:bc:75:12:9f:ed:83:65:aa:cb:b8:da:b5:f1:dc:35:
ef:a9:5d:03:f1:e2:c1:5f:3c:1f:40:00:7c:ed:23:07:0d:21:
73:9b:4c:a6:dc:f8:d3:2d:8e:aa:39:1a:d3:af:d8:2d:db:54:
92:e1:4c:27:da:9c:bb:e3:27:7b:57:10:40:09:23:1f:2b:40:
0b:b3:a0:e8:d9:ec:8c:8b:1a:e4:1a:c2:82:fa:04:98:97:78:
0c:aa:1b:0e:d6:df:08:5d:d7:cb:a8:52:7c:f9:8c:82:da:bf:
ae:87:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 07:02:10 2024 by rpki-client on console-fra.rpki-client.org