Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mMvAJO_3CUBvSgg_LSkxVFlykZs.roa
File: mMvAJO_3CUBvSgg_LSkxVFlykZs.roa (raw, json)
Hash identifier: x0NDECbUb3sYUupE9/LrRo7x9RQHazoe49UQb2o1D5M=
Subject key identifier: 98:CB:C0:24:EF:F7:09:40:6F:4A:08:3F:2D:29:31:54:59:72:91:9B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018DB2110C5DA4E0D7A36EE00C124CA48643
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mMvAJO_3CUBvSgg_LSkxVFlykZs.roa
Signing time: Fri 16 Feb 2024 13:17:58 +0000
ROA not before: Fri 16 Feb 2024 13:17:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215723
IP address blocks: 188.132.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:11:0c:5d:a4:e0:d7:a3:6e:e0:0c:12:4c:a4:86:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 16 13:17:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98cbc024eff709406f4a083f2d2931545972919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:46:ba:9c:ef:9d:a7:9e:e3:1c:f0:a0:9a:
f6:71:d1:9c:c1:bb:97:5e:12:83:e9:46:1d:2a:f6:
34:18:1e:01:46:ed:36:5a:36:1b:23:aa:f8:17:de:
0b:af:69:f6:6e:0a:b5:d2:06:f0:6f:df:64:7a:bf:
99:8f:d5:90:6f:29:32:73:32:ed:89:6e:e9:ea:01:
4a:2f:63:db:6c:8b:b7:3d:1e:ec:94:41:0a:3d:19:
b9:0c:3b:5a:cc:9d:78:59:cb:ea:a3:9c:51:89:a1:
df:59:5a:1c:5f:5e:a8:5d:d9:f3:d6:a9:6d:b9:48:
3a:8f:fb:f7:43:e8:65:de:89:c1:db:b1:98:8d:36:
7c:aa:41:41:48:cf:7b:c4:1d:1c:98:b1:d0:80:fd:
0b:fb:47:c5:1d:c1:e1:02:46:74:4f:78:47:5c:8f:
ba:b9:ba:b6:ee:a1:6c:d5:1b:3e:f0:93:c9:06:e6:
ab:0b:7f:94:1e:a5:95:e8:28:db:9d:82:c4:de:39:
a1:31:70:2e:56:c4:3d:d1:75:06:d8:b0:21:34:4c:
42:64:e7:76:51:00:4e:76:52:9b:b0:76:9f:01:c9:
84:1e:84:df:d5:e5:3d:e8:a7:97:45:32:51:6b:e3:
7f:1d:df:bc:fd:c7:90:32:fb:f8:90:98:94:e7:d9:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CB:C0:24:EF:F7:09:40:6F:4A:08:3F:2D:29:31:54:59:72:91:9B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mMvAJO_3CUBvSgg_LSkxVFlykZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.233.0/24
Signature Algorithm: sha256WithRSAEncryption
02:de:52:b9:72:ee:27:0a:08:5d:ac:69:99:32:83:a1:3b:45:
71:44:20:29:b0:06:e6:51:43:de:7d:ea:44:d8:33:49:39:70:
9f:45:50:ab:d8:2a:81:2d:96:40:47:13:8c:1c:da:3c:1d:4f:
38:76:e1:8d:64:33:fe:2f:e4:af:2c:c8:37:af:39:1e:25:bf:
f2:ec:0d:bd:a5:5e:2d:25:67:63:c1:73:e4:fc:0c:bf:65:e6:
95:b5:f7:fb:41:fc:cf:14:d1:42:5d:f1:42:e4:bb:65:6b:cb:
22:ca:60:4e:e3:db:64:a5:fd:89:1e:61:47:e7:c2:e3:f8:bb:
7b:2e:67:24:ce:b6:8b:c2:d4:62:93:1f:32:95:8d:fd:13:97:
51:7d:e2:c8:d5:1b:bc:57:71:0f:48:b6:c8:42:c7:2a:78:f1:
be:b6:86:25:8b:3a:14:fa:a2:62:68:5d:39:ad:a3:63:e7:ff:
be:59:d5:e3:3d:7c:0a:79:f0:f9:9a:f2:97:02:9b:9e:d3:d4:
e2:67:78:18:51:78:0b:3d:47:1e:04:9b:ae:da:4d:16:61:32:
28:1b:77:b8:e2:49:8f:e5:bd:3d:c0:dc:96:4d:2f:35:04:38:
0f:d8:f0:ca:9a:b3:a5:94:d9:d9:ca:6b:76:c7:73:c7:64:c5:
6a:3a:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:44:25 2024 by rpki-client on console-fra.rpki-client.org