Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rk3e9bOrtSyZP2b0lmJIYcHEsfc.roa
File: rk3e9bOrtSyZP2b0lmJIYcHEsfc.roa (raw, json)
Hash identifier: mjkbCI+WxRu7ZvM8AvsVbmN76grFGtYaX9JAdSLpEBQ=
Subject key identifier: AE:4D:DE:F5:B3:AB:B5:2C:99:3F:66:F4:96:62:48:61:C1:C4:B1:F7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018F221A6875B57673673C7231FDB0AA62E0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rk3e9bOrtSyZP2b0lmJIYcHEsfc.roa
Signing time: Sun 28 Apr 2024 00:28:27 +0000
ROA not before: Sun 28 Apr 2024 00:28:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212742
IP address blocks: 188.132.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:1a:68:75:b5:76:73:67:3c:72:31:fd:b0:aa:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 28 00:28:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae4ddef5b3abb52c993f66f496624861c1c4b1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:fd:2b:3c:ca:f1:85:b4:61:b6:cc:f4:9d:
57:f1:ad:ea:96:b5:c8:a3:62:e4:e7:78:10:40:39:
25:98:b7:9e:40:83:6d:15:f2:17:7a:4c:0b:52:47:
5c:9d:1f:70:16:d5:db:1c:7c:1f:ed:f9:f5:94:d8:
35:eb:76:fd:8a:03:b1:cb:8c:b3:c0:08:fb:3d:a4:
6e:2a:ac:a6:e3:dc:c9:68:9b:e5:b1:cd:78:65:ae:
bf:88:77:cc:6e:98:71:ae:a2:5e:eb:0c:74:55:51:
e9:7f:d7:e2:98:c3:20:d0:cc:a6:64:53:22:d5:9e:
47:83:69:b9:05:99:34:e6:be:91:74:61:ad:a3:4b:
11:4c:bc:7b:a6:f6:2b:0a:c4:59:2f:47:e1:84:e9:
97:30:39:70:9c:03:d4:6f:0d:05:dc:c7:0a:5a:6a:
d7:09:0f:c0:d6:76:31:50:7c:b0:c4:da:e7:51:cb:
a2:35:62:62:8b:db:f6:80:b2:78:9e:c6:73:59:eb:
5c:5e:5c:21:6e:3e:36:27:3d:23:e3:62:d0:44:f0:
44:7d:3c:d5:04:a7:53:a9:bb:61:6f:d8:22:86:a0:
e0:a5:e0:a4:0d:ce:39:44:77:d7:95:a5:f2:1b:bb:
ec:97:25:04:5b:d0:ea:d0:04:4e:c8:d5:07:f3:8f:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:DE:F5:B3:AB:B5:2C:99:3F:66:F4:96:62:48:61:C1:C4:B1:F7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rk3e9bOrtSyZP2b0lmJIYcHEsfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.226.0/24
Signature Algorithm: sha256WithRSAEncryption
45:20:90:12:81:63:7c:bd:81:0a:39:32:9b:dc:37:c8:7a:a5:
96:66:d5:e2:be:df:5b:a6:f9:57:6b:b6:f6:e3:87:d1:0a:26:
16:68:09:c3:4e:a9:cd:a6:76:29:f1:d3:c0:61:3e:d7:44:fc:
7c:b5:c9:3d:70:50:26:5a:04:fc:08:93:b2:85:98:91:5e:b2:
b2:88:11:e4:62:59:51:b9:47:0d:e3:9d:8a:67:49:52:0f:8c:
a0:8e:cd:02:c1:88:43:1f:4a:dc:f8:c2:cb:e3:e7:07:b1:39:
00:eb:e7:4a:dc:f0:c1:eb:6f:e7:8b:37:e4:89:73:90:ee:f3:
00:4e:74:8a:19:f2:ff:e2:72:e3:b5:28:e2:8d:0c:d3:2f:ea:
36:75:c4:be:4e:71:d4:a2:54:73:d5:86:30:8c:3f:99:27:93:
b7:d0:7e:55:62:3f:ee:dd:ed:99:24:4d:09:05:af:91:71:8a:
bf:eb:57:5f:63:29:50:82:e0:aa:5b:04:5c:c0:cf:39:ce:3f:
2e:10:57:2e:46:ae:27:88:aa:47:df:3b:21:07:32:d9:35:2c:
2d:45:5d:66:8f:ab:23:c2:25:da:8f:96:47:ef:9a:1f:cf:77:
09:3c:2c:ac:de:ac:8c:91:d6:cf:0b:27:54:09:0f:24:1d:f0:
43:84:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:06:45 2024 by rpki-client on console-fra.rpki-client.org