Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/PmFLoY7ycodGjL1VLroLcunmKLg.roa
File: PmFLoY7ycodGjL1VLroLcunmKLg.roa (raw, json)
Hash identifier: 6IsDv0PZ4scg+h6/xV1vL1GUxdV+6I1c2cpqLP3Bo/U=
Subject key identifier: 3E:61:4B:A1:8E:F2:72:87:46:8C:BD:55:2E:BA:0B:72:E9:E6:28:B8
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 018FE47200AB7BC532E5884A0258C7921183
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/PmFLoY7ycodGjL1VLroLcunmKLg.roa
Signing time: Tue 04 Jun 2024 18:10:27 +0000
ROA not before: Tue 04 Jun 2024 18:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 188.227.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:72:00:ab:7b:c5:32:e5:88:4a:02:58:c7:92:11:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Jun 4 18:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e614ba18ef27287468cbd552eba0b72e9e628b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:37:7e:60:10:93:29:85:0c:36:d5:8b:0a:
9c:92:91:4e:74:89:25:60:e1:fd:c7:e1:a0:05:10:
7d:45:8a:ed:f8:7e:c5:14:f9:60:6d:20:4a:18:1d:
fa:72:6c:b6:43:6d:a8:d6:bc:d9:38:c3:77:93:a1:
8a:7c:46:58:e4:ae:c6:a6:4c:02:cf:62:af:46:3d:
04:71:69:55:9f:84:fe:91:2a:0e:68:24:83:04:29:
b4:94:89:30:84:d9:d3:63:5b:d9:c0:10:b0:d9:38:
31:9a:df:52:1b:0a:49:43:e1:33:c8:84:28:5c:0c:
14:ac:2e:e0:6b:97:b7:ba:c0:e9:c1:ab:bb:f4:5f:
d5:f9:f1:66:e7:67:2a:6f:76:4d:fa:5e:a6:fa:10:
7a:64:97:be:6b:84:e3:33:42:9e:38:40:af:00:6e:
82:aa:21:e8:70:86:b2:18:1a:13:f9:12:04:1f:ff:
eb:31:fb:99:d5:23:e6:93:c2:73:a1:6e:6d:d7:62:
f8:1b:85:0e:e3:a6:e0:55:01:ec:04:be:23:49:d0:
82:5c:b7:b3:52:ec:9d:a1:6e:d1:61:86:cb:49:97:
5b:2e:35:71:1e:c0:1d:27:15:4a:37:64:27:55:4f:
c0:b9:8a:7d:7f:26:42:cf:3e:c9:79:0c:1c:d7:81:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:61:4B:A1:8E:F2:72:87:46:8C:BD:55:2E:BA:0B:72:E9:E6:28:B8
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/PmFLoY7ycodGjL1VLroLcunmKLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.198.0/23
Signature Algorithm: sha256WithRSAEncryption
67:99:6e:69:ac:f0:2e:58:96:f9:54:07:1f:34:0a:dd:9e:c5:
a4:79:a5:95:4b:7a:ea:1b:eb:c5:a0:0a:31:69:61:5d:cf:0c:
8d:7b:b4:be:9d:05:8d:0d:0f:d8:f8:50:c0:98:7e:28:68:35:
04:c9:9c:aa:ba:16:18:b9:58:7c:71:94:35:cf:ba:10:73:af:
64:f4:00:12:6d:b9:97:26:69:ac:c7:e8:ec:db:f9:e6:8e:37:
9d:46:cf:26:89:a0:ff:89:8f:ac:71:4a:d7:06:d0:db:ef:5f:
16:7c:0e:40:4f:67:7d:c0:78:e4:8c:10:73:39:47:24:39:3c:
67:2e:a1:34:3b:6a:e4:83:f6:a9:6b:89:17:a6:bd:c2:df:3b:
de:53:27:11:f7:d2:ec:fb:af:9c:86:bd:c9:16:90:34:ea:24:
6a:02:e7:1e:71:fb:13:d6:16:09:ab:07:a0:e8:59:5e:2e:8a:
40:07:54:b9:f2:1a:e2:b7:74:81:ad:96:a8:2a:4c:28:21:8c:
ee:ae:82:bf:69:f7:51:e9:8f:fa:e9:0b:1d:71:4b:6a:51:bf:
1b:eb:de:f9:3b:54:68:aa:e5:ba:9b:e6:81:34:bb:12:06:97:
a1:ea:6b:25:d2:6a:5f:de:d7:55:97:0b:94:35:53:50:68:f7:
90:97:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:06:21 2024 by rpki-client on console-ams.rpki-client.org