Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/gi8vNLmjyHg9sc8zEnF6GnveIWY.roa
File: gi8vNLmjyHg9sc8zEnF6GnveIWY.roa (raw, json)
Hash identifier: BgaCPqW0E0tIA28PWzX3lQIa8pvU1dcfkTp9o/Ldqf0=
Subject key identifier: 82:2F:2F:34:B9:A3:C8:78:3D:B1:CF:33:12:71:7A:1A:7B:DE:21:66
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 018FE47116732B8F86E8EB812413BE0D82C2
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/gi8vNLmjyHg9sc8zEnF6GnveIWY.roa
Signing time: Tue 04 Jun 2024 18:09:27 +0000
ROA not before: Tue 04 Jun 2024 18:09:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 188.227.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:71:16:73:2b:8f:86:e8:eb:81:24:13:be:0d:82:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Jun 4 18:09:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=822f2f34b9a3c8783db1cf3312717a1a7bde2166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:40:39:d2:01:f6:2b:a8:b1:5c:5d:66:19:
56:14:e4:4a:55:65:e0:07:0a:1c:1b:d4:b1:49:38:
ff:40:ea:8e:12:f9:1d:64:ef:cf:99:f7:02:c6:68:
99:ee:8f:f5:d4:1e:f8:49:d8:7b:65:5c:fc:dc:37:
de:86:da:72:54:e7:16:f6:f5:5e:95:c1:61:5b:d4:
55:c5:ba:52:12:ea:17:92:d0:17:5b:ad:58:aa:ec:
e3:1d:35:8b:56:db:c0:40:e1:84:9b:5d:ab:f1:f6:
ef:e3:1d:3e:76:94:1e:7c:3f:f1:c1:54:0b:51:08:
9c:24:d1:e9:f6:85:c1:4e:58:8b:f3:44:28:c1:e9:
6c:10:b6:a9:00:3a:51:aa:f6:e7:97:6d:e4:81:cd:
9e:38:b5:7a:39:2e:7f:96:84:dd:8a:a9:10:b2:35:
9d:1f:80:cb:98:60:18:a3:74:76:e6:43:3f:9b:bb:
3d:a8:e7:01:9f:fa:79:86:cf:21:92:17:81:46:a4:
cc:71:ae:2a:87:8c:b7:79:52:ff:3e:50:66:a2:01:
8a:63:51:43:7c:6d:1b:f2:db:4b:07:2b:a5:56:0e:
3a:3e:8e:ba:9c:68:ab:75:ce:8c:88:4a:61:8a:8d:
04:5c:6d:ef:72:31:7a:41:56:58:57:f9:74:1e:56:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2F:2F:34:B9:A3:C8:78:3D:B1:CF:33:12:71:7A:1A:7B:DE:21:66
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/gi8vNLmjyHg9sc8zEnF6GnveIWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.198.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:fb:46:9a:c9:be:7e:9f:e5:c7:9a:ef:36:d7:1e:92:f8:d8:
b0:6d:7f:3c:87:60:41:59:1a:20:e3:46:20:08:70:60:9b:2a:
1f:1e:a4:ad:7a:5d:06:fa:ef:b5:42:76:07:af:7b:4e:f9:43:
4c:70:4a:f5:19:a3:53:10:cb:1e:1f:59:d9:6c:8c:90:52:bd:
b9:51:8e:16:aa:bd:c5:55:2a:db:fd:3d:19:e5:fe:e5:3a:bd:
26:85:73:bc:0a:12:d1:ed:96:aa:24:fd:59:21:4b:9c:c7:01:
41:91:26:8d:89:76:96:91:44:9a:35:6f:d9:9f:30:2b:23:2c:
d6:06:5c:01:67:d5:dc:7a:6e:7d:a4:25:ca:6a:d8:c4:0e:8d:
6f:dd:4b:a1:62:93:c7:07:be:20:96:59:4e:5d:52:c3:63:9b:
02:c8:7c:b0:88:dc:cd:ed:11:41:ea:6e:ec:51:e8:13:73:ae:
cb:fe:29:7a:e1:ac:df:62:a8:f5:3c:a8:b8:39:5a:3f:eb:85:
69:e1:6b:79:cb:e5:7a:bd:03:62:97:2f:ae:95:1c:5c:b7:b7:
d9:3a:8d:57:61:4a:bc:03:2b:00:c0:85:7a:78:0d:97:a7:2a:
b1:64:5b:7f:8b:28:c2:c1:5c:af:54:7d:2e:9c:16:2b:9e:06:
a2:ad:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:04:17 2024 by rpki-client on console-ams.rpki-client.org