Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/v5CdKVrBZkibWrREunobuYvhEvI.roa
File: v5CdKVrBZkibWrREunobuYvhEvI.roa (raw, json)
Hash identifier: EURrNdPLmmSGa7rj0i/8iTEuPeWMYU7MMxIV+MBGdME=
Subject key identifier: BF:90:9D:29:5A:C1:66:48:9B:5A:B4:44:BA:7A:1B:B9:8B:E1:12:F2
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 01909FE48E1D0F1B8FCB432665F67F974037
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/v5CdKVrBZkibWrREunobuYvhEvI.roa
Signing time: Thu 11 Jul 2024 03:44:34 +0000
ROA not before: Thu 11 Jul 2024 03:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9f:e4:8e:1d:0f:1b:8f:cb:43:26:65:f6:7f:97:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jul 11 03:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf909d295ac166489b5ab444ba7a1bb98be112f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:49:1e:c6:03:9e:38:0b:25:3b:89:0b:aa:
a2:23:ab:18:ad:8e:09:52:f9:da:1d:70:95:6a:de:
38:88:98:0d:0d:e0:71:ca:f3:b0:db:46:9b:17:39:
f9:78:7b:9e:39:a6:70:3f:eb:0d:4d:e6:4e:9b:c8:
69:82:33:ff:61:c2:c7:bd:8e:c1:19:1a:66:27:5b:
d6:9a:22:d0:29:47:7b:9d:95:39:24:5b:b2:7c:dc:
06:46:05:be:6c:52:9f:4f:e7:ed:10:fe:1b:14:cd:
87:1b:b3:fb:40:b8:68:ba:fe:37:f4:94:e0:fb:6e:
78:52:ee:fa:0c:58:fb:9b:45:3b:98:b3:2d:ab:7b:
66:d1:f8:da:e4:68:7d:b8:59:c7:65:65:61:e8:2a:
67:38:53:4f:fd:92:0d:0d:ee:8a:0f:fa:72:fd:56:
25:8b:b4:ae:67:6b:23:b3:0e:f0:be:d5:89:ea:ed:
c7:9a:87:37:0b:20:35:1e:90:21:b6:5a:ca:40:79:
bf:ff:fa:cf:b8:11:d0:47:8d:9e:50:50:b9:db:12:
ec:5a:b4:cb:b5:09:4a:31:c1:4e:8d:51:5e:98:25:
f5:dc:74:59:05:05:9d:26:93:d4:b6:4b:7b:39:ae:
07:7a:f9:ed:d3:a5:17:09:e1:18:f9:c0:48:57:86:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:90:9D:29:5A:C1:66:48:9B:5A:B4:44:BA:7A:1B:B9:8B:E1:12:F2
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/v5CdKVrBZkibWrREunobuYvhEvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
03:4e:5d:eb:e0:bc:90:5c:5b:fc:b0:8b:1f:69:65:0f:ab:fc:
85:ad:f7:cb:60:7e:6a:c4:67:c3:a5:0b:56:5b:77:c6:c8:9d:
56:b1:11:80:20:59:8e:c6:8f:26:33:79:02:99:e2:4d:38:79:
8b:07:cc:26:01:8c:49:9a:20:58:41:92:d1:ff:c3:ee:8f:d4:
b0:31:c2:d5:e0:fe:f9:1d:a0:a3:10:27:85:b9:6e:94:50:c3:
40:c4:fa:5c:66:5e:87:61:6c:9a:d9:a8:3e:24:35:24:d1:87:
39:ab:6a:62:be:57:f0:8f:1a:89:10:7b:50:c6:cf:d1:09:49:
48:48:31:63:5b:40:81:91:5f:fa:e1:47:13:ad:01:30:36:ab:
35:22:cc:b5:92:27:13:5a:ed:f2:18:dd:21:af:a6:76:39:2d:
44:85:21:5d:37:e7:a4:8a:83:ac:c9:fc:66:be:42:10:0d:03:
7c:a9:60:ac:88:ff:2a:7b:e8:d7:af:8a:4a:8e:10:07:0e:e1:
82:63:76:34:7b:cd:d0:4f:ac:d0:fd:c4:c6:98:54:c4:5a:8a:
1d:2f:ed:64:1f:9e:23:a7:e6:6d:e0:2e:b4:36:4b:ef:4d:3a:
f7:aa:f9:1f:2c:f5:68:fe:3c:c2:a7:3e:50:75:c8:b3:5f:c1:
65:12:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:35:18 2024 by rpki-client on console-fra.rpki-client.org