Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/zIO0a7pRMHO_bx9pIHhLYWTn5CQ.roa
File: zIO0a7pRMHO_bx9pIHhLYWTn5CQ.roa (raw, json)
Hash identifier: wnaZRz8l0vmHx5s8NkhLkQV7slkrfUC2YcmJndnijEU=
Subject key identifier: CC:83:B4:6B:BA:51:30:73:BF:6F:1F:69:20:78:4B:61:64:E7:E4:24
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018CC8DCD51DAD0DF3152CF835E433889039
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/zIO0a7pRMHO_bx9pIHhLYWTn5CQ.roa
Signing time: Tue 02 Jan 2024 06:29:24 +0000
ROA not before: Tue 02 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31554
IP address blocks: 188.247.237.0/24 maxlen: 24
188.247.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d5:1d:ad:0d:f3:15:2c:f8:35:e4:33:88:90:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc83b46bba513073bf6f1f6920784b6164e7e424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:ea:19:f6:94:97:c4:10:7d:7a:68:ed:83:
99:b7:16:fe:19:56:29:07:44:20:0c:1e:f8:a2:14:
de:91:24:6c:0e:e4:af:f6:20:2f:fb:85:ba:62:fc:
cd:5a:1f:a9:72:f3:09:ef:92:3a:49:ee:4b:02:d0:
e0:4b:88:1a:b2:a8:de:71:e6:7e:7e:3b:eb:ca:fc:
c9:d4:cd:b4:93:3f:8f:38:fb:a1:d1:59:4f:26:94:
2d:3b:d2:e8:22:40:a4:fb:c1:1b:46:d2:d4:14:b0:
42:80:be:9c:ad:d7:70:87:f6:af:fd:98:1e:68:e8:
d7:5b:6c:6d:90:1a:66:42:da:8d:fa:4e:7b:55:4f:
5f:24:cc:f1:c3:78:12:fb:ec:15:45:cc:c5:30:8a:
42:f4:5d:a8:49:58:a9:a0:f8:a2:6f:01:2d:75:97:
f9:79:65:a9:90:84:de:78:6a:4e:f0:91:0a:4c:30:
3b:46:c0:b7:d3:85:85:74:d4:13:23:a1:2f:45:38:
4e:62:94:49:46:8b:07:ac:ad:18:ec:73:e5:f5:60:
a7:e9:46:3f:55:36:4b:c4:b9:73:16:cd:a3:9f:13:
5e:b5:f9:90:52:20:95:35:f8:7e:db:90:d0:73:93:
c0:2c:90:90:a7:6c:f6:82:6f:1c:b4:e0:15:bd:f3:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:83:B4:6B:BA:51:30:73:BF:6F:1F:69:20:78:4B:61:64:E7:E4:24
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/zIO0a7pRMHO_bx9pIHhLYWTn5CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.160.0/22
188.247.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f8:08:56:e9:6a:b6:bb:7c:57:ea:c5:62:a0:ef:73:13:5d:
bc:3f:41:58:a0:ef:c0:af:b9:e0:06:a9:2d:78:e9:21:1a:91:
3f:a5:87:46:28:3e:48:e3:f0:73:95:ee:8e:ad:45:35:cc:3c:
b8:28:80:a9:c3:e9:bc:87:c0:0f:b2:d9:23:86:e9:26:d1:e9:
99:39:b9:66:dd:eb:a4:14:8c:85:d5:43:2b:4b:ea:9c:de:de:
7c:32:44:f3:d3:73:b9:9b:cf:56:ab:d1:6a:95:6d:b8:00:85:
09:82:77:c0:b2:10:48:de:c1:4f:b5:13:2d:a6:09:73:e6:91:
35:e8:a1:69:60:7a:d7:f8:4e:61:90:f1:f3:1b:ca:be:d5:e3:
71:9f:5f:bb:a7:ec:d4:45:6e:b9:c7:ca:85:bf:eb:e2:77:7f:
06:66:13:d9:56:66:04:73:67:75:a3:d5:8b:03:0b:75:0c:e9:
5f:1d:2a:08:c3:4c:24:11:56:3e:0d:9f:18:fa:d5:ef:c1:8c:
6f:18:41:d2:33:59:6c:8b:e8:3c:45:43:67:ca:5b:ee:45:06:
61:dc:1e:8b:73:a1:11:88:2a:80:c4:0c:79:71:30:d7:e8:3f:
a6:20:82:e7:b3:3f:d1:11:c2:46:8d:e3:0b:a0:34:ba:72:4e:
45:be:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:17:42 2024 by rpki-client on console-fra.rpki-client.org