Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/88ICSA-qCFdZcA7pWht1Us-pZWg.roa
File: 88ICSA-qCFdZcA7pWht1Us-pZWg.roa (raw, json)
Hash identifier: WstbzLT5U1koo0RgVm3AoFCNqtFGL7e/8cPY6WlFpUQ=
Subject key identifier: F3:C2:02:48:0F:AA:08:57:59:70:0E:E9:5A:1B:75:52:CF:A9:65:68
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9F2B684FB905A8FB3562E8A578659060
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/88ICSA-qCFdZcA7pWht1Us-pZWg.roa
Signing time: Tue 02 Apr 2024 14:16:45 +0000
ROA not before: Tue 02 Apr 2024 14:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57884
IP address blocks: 146.19.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:2b:68:4f:b9:05:a8:fb:35:62:e8:a5:78:65:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 14:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3c202480faa085759700ee95a1b7552cfa96568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:ba:aa:78:a2:18:cc:6f:3f:e9:f9:61:89:
60:01:6e:01:4f:a4:83:be:c3:96:a3:2e:33:c5:cc:
21:8f:26:45:48:c4:0f:e9:2b:55:f7:94:af:aa:ee:
67:bd:8c:20:a2:34:c6:0a:a3:31:e4:43:1c:cb:25:
c4:5f:62:dd:2f:ef:a6:25:18:8a:c8:c8:21:4c:e4:
c5:c7:4a:59:0e:11:73:c0:ea:d7:79:66:ca:f2:ec:
89:23:3a:4a:68:ef:57:99:4d:88:50:64:36:55:d8:
f5:c2:c6:08:b2:b4:9e:b9:3d:a7:16:3f:77:2e:49:
bb:15:0b:62:3d:12:38:14:c7:5d:90:d5:73:61:15:
4d:0c:af:7c:44:a2:74:36:94:c2:c2:2d:07:02:3d:
0d:5a:0e:62:df:ca:9a:f2:e3:11:17:27:f9:92:c4:
6d:5c:28:8f:ce:42:96:e1:e8:b8:4b:8b:ec:0d:e9:
2f:e2:76:45:01:5f:51:7f:c7:46:8f:4e:6c:07:4d:
28:ed:bb:b8:4e:bd:8f:2a:d1:e2:9a:00:ea:17:aa:
af:ac:51:a6:d9:4d:7f:89:a6:9d:80:63:a2:b2:d7:
cf:2d:f1:09:3a:65:27:3c:67:24:20:f1:e6:0b:94:
83:5d:5f:54:3a:e6:4e:94:7d:5a:0f:fc:81:26:87:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:02:48:0F:AA:08:57:59:70:0E:E9:5A:1B:75:52:CF:A9:65:68
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/88ICSA-qCFdZcA7pWht1Us-pZWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2b:0d:73:59:0a:10:57:ad:e4:49:a5:67:ca:1e:27:93:ef:
e7:2a:a0:31:c4:0e:4d:9c:13:a5:8d:e4:a8:97:cd:f2:f8:2e:
04:bd:1d:5a:3a:6a:02:1e:b8:7d:4d:13:b4:5a:9d:20:33:4c:
0e:96:f4:fd:2c:14:4f:fd:01:91:90:4f:78:72:e4:c8:50:d3:
37:df:4e:ba:d6:dd:0b:83:4f:33:ae:2d:b8:34:b0:c3:b3:05:
5f:22:87:46:18:67:4c:a4:6c:44:71:4e:82:8c:26:1f:40:08:
60:71:fa:9f:30:0f:4a:1d:4e:63:92:07:8e:85:d5:67:48:84:
1f:a2:d2:93:8f:17:ea:a6:fa:cb:2a:89:7c:8f:99:99:24:56:
f2:70:55:9a:4a:88:e3:b0:29:5c:20:5d:2a:2d:0b:f6:74:bd:
36:7b:8b:22:10:0b:75:df:6f:84:58:17:d1:75:d3:19:46:93:
22:18:84:f8:b7:4f:1b:2c:10:6a:c8:50:3e:fd:4a:bd:cc:77:
71:b5:ac:45:ef:e2:d6:5d:44:bd:bf:d5:04:1d:c7:fe:1b:06:
7f:4a:08:d6:5b:92:62:d2:2a:cc:15:b7:a8:86:32:6e:9d:b5:
04:06:c8:5b:26:35:0c:7b:10:78:a9:0b:c6:71:10:6f:cb:07:
d3:7b:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 05:55:25 2024 by rpki-client on console-fra.rpki-client.org