Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/zhOKUIQs92FWU-1qMA2Ubtj1C2I.roa
File: zhOKUIQs92FWU-1qMA2Ubtj1C2I.roa (raw, json)
Hash identifier: lv+uIK1UU6ivbs28AmyW+ICFOv+rHSwGy5xiOv8wnd4=
Subject key identifier: CE:13:8A:50:84:2C:F7:61:56:53:ED:6A:30:0D:94:6E:D8:F5:0B:62
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 018CC56EB328A1DB310C12EFBD36597455EF
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/zhOKUIQs92FWU-1qMA2Ubtj1C2I.roa
Signing time: Mon 01 Jan 2024 14:30:15 +0000
ROA not before: Mon 01 Jan 2024 14:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20676
IP address blocks: 188.239.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b3:28:a1:db:31:0c:12:ef:bd:36:59:74:55:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jan 1 14:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce138a50842cf7615653ed6a300d946ed8f50b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:56:0c:16:a5:36:65:da:fd:c6:b4:f0:ac:
0b:a9:6c:7b:98:c9:a9:53:7b:2c:f9:04:64:8b:69:
60:bf:07:3d:05:a2:92:3e:7f:8f:40:11:0e:bc:f1:
8f:58:ad:81:08:09:9e:c3:75:80:2d:61:29:e0:ab:
bb:5e:1f:74:bb:b8:b1:71:1e:6c:67:d0:3f:f4:1b:
c0:a1:db:30:9e:b2:fa:6c:72:1f:89:44:fc:80:03:
53:54:65:ff:be:fe:e4:eb:db:6a:dc:03:2c:9b:76:
7d:d8:78:ec:b9:1b:b0:5f:18:53:32:88:78:66:79:
cc:c3:51:84:b5:7c:2e:f8:bf:a7:8e:87:44:44:2c:
21:76:5c:48:de:b8:75:60:09:bb:6a:36:ab:cd:e4:
34:91:e5:3d:40:9a:f9:a8:ef:c8:71:03:43:43:f2:
5a:10:d2:92:7f:e8:e1:f2:26:98:af:9f:4e:bc:f5:
62:64:d6:7b:ae:9e:df:3a:59:ac:0e:d5:9f:d4:09:
d8:25:51:6a:a1:66:5f:45:20:92:1a:e3:ff:8a:a7:
4f:14:11:2c:6e:6e:0f:1f:24:5c:04:ad:32:a3:ab:
ab:3e:af:d5:e0:1d:bb:5a:a1:12:a2:90:22:04:f8:
d6:78:26:ff:e8:fe:6f:a5:06:f6:a9:ba:e2:05:9c:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:8A:50:84:2C:F7:61:56:53:ED:6A:30:0D:94:6E:D8:F5:0B:62
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/zhOKUIQs92FWU-1qMA2Ubtj1C2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.239.190.0/24
Signature Algorithm: sha256WithRSAEncryption
93:5d:68:1d:d8:83:b0:e3:6b:54:54:67:18:89:31:40:39:f3:
2f:1d:cd:cd:94:5d:65:d1:35:f2:90:39:00:1a:15:42:af:00:
33:fc:2c:54:87:48:6e:f8:f9:d0:ae:cb:ba:8c:3c:70:58:5f:
5c:c2:be:95:b0:d7:33:f3:a0:f2:5b:4f:ff:8f:50:86:ae:1f:
a1:58:13:ce:f7:e5:5d:d9:93:48:45:81:5d:cd:4c:f6:be:16:
be:f6:5a:6f:14:c7:31:c6:42:13:5f:8f:5c:f0:c6:b1:21:2a:
21:9f:48:a7:52:92:9b:39:0b:1b:73:bd:6b:56:5e:20:a9:20:
58:09:59:a8:86:c8:a8:a4:cf:d5:b3:78:1a:f9:e0:69:e3:cc:
5e:68:de:94:fa:ae:0d:a2:ab:58:1f:8c:45:d0:1c:c4:6c:db:
65:4a:88:16:d7:06:9a:99:1d:42:16:bb:06:55:17:14:00:8a:
b5:91:c4:ad:71:95:70:4c:d1:dc:1c:ae:8e:b2:ef:98:c9:75:
b2:a6:de:ae:b8:b1:17:9e:fd:b6:8b:db:3c:ff:0d:c1:1b:95:
0e:d1:b8:fa:84:96:bf:18:d7:d2:fc:db:27:93:b0:1f:a7:95:
db:11:ee:e7:64:7b:b5:66:5a:c3:0d:b4:37:2f:4c:87:bb:72:
78:74:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:08:26 2024 by rpki-client on console-ams.rpki-client.org