Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/takmA8ynVrMAPDD1DNo4Dp2JSP4.roa
File: takmA8ynVrMAPDD1DNo4Dp2JSP4.roa (raw, json)
Hash identifier: SuswxvJ+jp1nAP4XJyBWQp0tHrQgL3PA57VeHrrCfKU=
Subject key identifier: B5:A9:26:03:CC:A7:56:B3:00:3C:30:F5:0C:DA:38:0E:9D:89:48:FE
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018CC8DCD6D364566F39165381252E7F0E34
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/takmA8ynVrMAPDD1DNo4Dp2JSP4.roa
Signing time: Tue 02 Jan 2024 06:29:25 +0000
ROA not before: Tue 02 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47540
IP address blocks: 188.247.128.0/24 maxlen: 24
188.247.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d6:d3:64:56:6f:39:16:53:81:25:2e:7f:0e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5a92603cca756b3003c30f50cda380e9d8948fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:e3:39:c1:28:46:88:05:1d:bb:8e:d8:ec:
1b:95:f5:a6:dd:3e:c4:c7:a4:8f:f4:2e:94:ac:c3:
2d:48:26:52:5e:4b:8c:bf:af:5d:72:42:b3:25:ef:
0d:07:a6:cb:5e:be:4e:2d:c2:12:cf:3b:a6:fe:0f:
f4:e4:f0:4f:98:4c:76:ef:56:72:ae:d9:3e:95:70:
31:b9:11:8e:1d:3a:78:1c:4f:a1:7a:9b:0d:09:f5:
8c:ac:99:21:25:98:c1:c4:dc:bc:09:6d:ae:75:92:
04:dd:05:90:38:d5:ad:83:49:96:68:b3:3c:d2:8d:
35:51:f3:48:c9:69:1d:b6:cb:4f:60:a1:66:8b:98:
e5:9f:b0:53:87:97:e9:ba:b9:89:68:37:62:e6:19:
7a:f7:31:46:d4:42:2c:7c:e9:c5:c1:1a:cf:92:e0:
e5:69:41:6c:cc:71:0c:cf:91:0d:86:90:2e:52:42:
f0:dd:5f:8b:b6:9c:35:3b:38:40:41:a0:62:e5:bf:
37:17:dd:a9:5c:f8:4f:34:b0:f0:01:2e:b0:c6:7f:
ba:0b:34:15:c7:eb:8d:88:ec:a9:21:a0:36:9a:2e:
3c:bb:09:2a:b2:0d:47:e8:d1:c1:5c:ce:6d:03:ce:
20:cb:20:56:03:b7:32:7c:bf:26:0d:95:51:27:3a:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:26:03:CC:A7:56:B3:00:3C:30:F5:0C:DA:38:0E:9D:89:48:FE
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/takmA8ynVrMAPDD1DNo4Dp2JSP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.128.0/24
188.247.135.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e2:b0:14:8b:5a:06:c8:e6:86:40:e9:1f:25:e9:3c:c0:22:
72:66:a5:95:46:5c:70:9d:c6:c6:96:e7:83:31:52:fd:e1:b7:
b5:f5:41:4b:23:6b:dc:27:d2:bd:55:7e:5b:60:f4:63:69:d6:
6e:06:05:51:e7:86:6a:7f:97:db:ad:f9:87:54:a1:25:e5:f4:
ce:ac:d6:98:e3:f2:54:e6:21:ea:6e:16:fd:3f:ce:ed:cc:fd:
83:49:1e:0a:18:a9:f9:b4:1a:b0:ca:5d:f2:4e:5b:90:e1:6d:
08:09:d2:1d:a5:ce:0a:24:0f:84:76:e8:eb:07:86:49:7f:33:
e0:d0:0c:71:21:66:ec:32:5b:f0:08:aa:c6:16:6c:96:1e:a5:
d5:54:78:f1:89:da:61:f3:39:be:62:63:70:9e:5a:37:ee:b7:
98:57:b8:45:4b:f3:0b:57:60:a7:26:87:a3:a1:94:47:36:f6:
ba:fb:e3:3f:89:de:48:91:60:b1:11:87:82:bc:54:e6:6f:d0:
b1:86:a9:57:12:b0:e1:76:05:b2:94:8b:4d:fa:39:d7:e5:6a:
b6:96:d0:17:43:b7:36:ae:2e:36:31:21:30:5f:20:b6:23:b5:
a5:45:07:8b:cb:2f:38:15:0c:26:b1:74:ee:f6:83:c2:35:39:
aa:01:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:54:50 2024 by rpki-client on console-fra.rpki-client.org