Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/8_Sy7HRkhs43uIh1e4sNVmVGV7I.roa
File: 8_Sy7HRkhs43uIh1e4sNVmVGV7I.roa (raw, json)
Hash identifier: A0mh2jqLzBcgF68xmRr1Tib0Y5mQwVaX74tOCeWOFJM=
Subject key identifier: F3:F4:B2:EC:74:64:86:CE:37:B8:88:75:7B:8B:0D:56:65:46:57:B2
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018CC8DCDB079B8E8742ABC53172081F4D29
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/8_Sy7HRkhs43uIh1e4sNVmVGV7I.roa
Signing time: Tue 02 Jan 2024 06:29:26 +0000
ROA not before: Tue 02 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198099
IP address blocks: 188.247.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:db:07:9b:8e:87:42:ab:c5:31:72:08:1f:4d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3f4b2ec746486ce37b888757b8b0d56654657b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:7c:36:be:94:bd:4a:8c:77:0f:85:be:e9:
57:f8:ef:ce:6f:f6:81:6a:2b:ce:7f:55:e7:1f:8f:
9b:25:5e:89:78:d5:4e:64:24:d4:b8:02:90:82:ce:
cf:28:27:f9:d6:0b:8c:4e:be:29:67:2e:8d:fe:22:
25:c6:0e:66:ce:02:24:fb:e6:b7:14:34:57:aa:fe:
dc:4f:bb:6d:f7:eb:e6:70:3c:31:6f:40:2c:19:b5:
1b:d7:65:7f:b6:c0:16:f8:a6:86:17:aa:90:39:94:
b3:d2:c9:7b:25:26:fc:59:03:71:50:2f:e1:b2:d4:
62:0e:44:45:e1:d1:41:8a:bc:a1:42:f4:4f:68:e7:
f3:ad:5a:bb:af:c3:94:c9:14:74:16:96:6a:52:21:
bd:87:89:bd:50:3e:18:cd:95:32:d9:af:a9:50:1c:
d2:06:85:db:3a:33:0d:03:79:da:b0:78:0e:f4:1e:
88:56:34:2e:af:c7:60:81:74:2d:c1:6c:f1:bf:7a:
45:66:1a:77:a3:8f:be:53:b1:8d:b2:de:d1:d1:1c:
06:95:33:49:17:ac:56:d6:cf:77:ec:25:58:7c:67:
99:83:1b:82:c4:e6:05:5f:61:c3:36:bd:99:53:f1:
a2:9e:35:75:3a:cb:41:bd:65:7d:08:d0:05:87:c9:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:B2:EC:74:64:86:CE:37:B8:88:75:7B:8B:0D:56:65:46:57:B2
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/8_Sy7HRkhs43uIh1e4sNVmVGV7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.134.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ba:31:5e:32:2f:5c:8d:7b:a6:81:3e:5f:81:3f:0f:17:46:
ea:0e:1b:4d:ed:21:0a:50:d5:d1:f4:24:bc:60:be:fa:4f:fd:
b6:b3:6d:d1:03:d1:64:7f:d9:d9:cf:8c:d6:ae:a5:cc:91:09:
15:cd:ca:15:b4:80:39:24:80:2a:94:39:68:4e:24:c5:54:e4:
d3:14:af:ae:90:13:8e:4e:c0:67:65:0f:e2:69:72:e4:cd:70:
b3:cc:a9:2a:3f:4f:a3:25:47:f8:2f:3b:80:0f:ca:6e:7b:26:
02:43:cd:c0:a7:6e:6a:8f:0c:fc:f3:1d:53:4b:6a:2e:f3:1a:
ce:06:27:61:dd:b6:fc:b4:e4:6f:d5:e4:ad:f3:70:9c:05:8b:
76:43:b8:5b:91:a3:5e:c6:35:60:23:25:c3:70:db:21:f8:b2:
10:6a:bd:5d:55:f9:ed:60:23:6a:f7:8e:f0:17:5c:89:89:0d:
85:73:fb:05:0b:48:81:69:5d:8f:3a:78:52:90:48:9d:76:2f:
6e:f3:17:3b:00:56:57:2e:59:2d:ee:e0:9a:51:26:58:54:91:
91:ac:a7:5b:c9:9d:9a:24:f2:eb:63:c9:77:ac:bb:97:b1:60:
7d:54:fc:f5:66:e5:10:ae:32:73:21:0e:eb:2f:82:82:c4:d7:
2b:1c:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:51:48 2024 by rpki-client on console-ams.rpki-client.org