Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/T62wQuCSoosszXT3Z9guBGgy16I.roa
File: T62wQuCSoosszXT3Z9guBGgy16I.roa (raw, json)
Hash identifier: aLDlH7kX/nND2HummHKnr3hKnDB4Wx1fkhAbU+JOceg=
Subject key identifier: 4F:AD:B0:42:E0:92:A2:8B:2C:CD:74:F7:67:D8:2E:04:68:32:D7:A2
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC794217CCA9BCC7B478CAAD744A7537F
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/T62wQuCSoosszXT3Z9guBGgy16I.roa
Signing time: Tue 02 Jan 2024 00:30:23 +0000
ROA not before: Tue 02 Jan 2024 00:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204846
IP address blocks: 188.130.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:21:7c:ca:9b:cc:7b:47:8c:aa:d7:44:a7:53:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fadb042e092a28b2ccd74f767d82e046832d7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:13:8b:a9:5b:7e:b9:9d:eb:61:1e:bd:ec:
6d:d8:08:27:a4:6b:92:3b:30:75:a9:58:8a:2d:89:
4b:19:55:db:67:02:c1:94:65:35:fa:8a:81:90:65:
3c:6d:31:b7:89:f6:8f:5e:6b:bd:92:de:19:86:af:
d5:68:17:70:e2:e0:b9:dd:d4:81:30:d3:f4:26:e3:
31:f4:32:99:3b:9d:d5:8c:6b:b5:14:63:38:23:32:
82:91:60:8b:be:10:14:32:c2:ed:94:0b:f4:4c:73:
7f:1b:7c:c4:6d:1b:db:74:d3:2f:94:af:79:21:12:
d8:c4:4f:41:20:55:cd:7f:5b:9b:47:c3:65:5c:7a:
f5:e2:41:fe:44:63:b4:16:db:50:a0:a6:a9:b9:38:
a4:9e:34:40:f4:e0:1f:88:45:f6:36:0b:ea:17:22:
0a:1a:c2:b6:77:ce:bd:85:1d:c0:65:e4:14:a9:8b:
da:d3:a8:3f:1d:43:2b:f3:01:8c:5f:52:06:a8:27:
0f:29:84:86:35:96:f0:83:7c:13:85:b7:cc:67:2b:
db:6b:1d:ee:e9:e3:fe:40:50:33:10:50:f5:43:f4:
00:c0:ce:5c:a9:eb:9b:e8:94:dd:5c:4f:e0:65:33:
6e:cd:75:a1:fd:c8:d8:e5:05:0d:c3:58:1e:71:e9:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AD:B0:42:E0:92:A2:8B:2C:CD:74:F7:67:D8:2E:04:68:32:D7:A2
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/T62wQuCSoosszXT3Z9guBGgy16I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ab:d5:88:c0:76:87:00:dd:73:ad:46:d6:2e:5e:14:d4:b9:
ba:7b:48:16:18:d8:ce:7b:39:9a:0b:25:c7:38:81:d3:28:0e:
1f:0c:63:db:07:e3:1b:6f:d5:da:43:f1:60:9a:49:23:a1:32:
c9:63:e8:8a:16:d8:e1:5f:eb:85:77:50:86:3e:54:ec:6d:ad:
d6:00:35:1a:18:24:f6:e8:4a:1a:14:49:c7:2b:64:c5:f9:40:
0f:32:16:f0:ff:70:92:34:ae:1c:86:bf:89:76:8c:4d:27:cc:
07:28:e3:e0:92:95:65:eb:c3:d9:00:4a:b4:08:4d:9b:eb:e6:
0b:15:d6:de:f5:60:a6:d7:e6:dc:d2:29:e3:7a:4b:ac:20:19:
70:c1:05:1b:36:6c:0c:45:8b:11:03:63:18:0b:84:27:30:56:
07:a4:94:3e:32:65:ee:21:4d:2e:5f:7a:64:95:e5:de:59:8c:
1a:61:e3:9c:1f:19:e9:79:9c:1c:bf:09:06:dc:3a:2d:8b:63:
39:9c:b0:fa:8c:7e:94:1c:61:59:11:47:7a:dd:ce:ce:c9:2f:
b0:eb:e0:fa:35:1d:84:a6:dc:59:41:d3:c5:11:5a:25:b2:26:
ce:55:07:3c:a3:a5:03:12:46:13:63:b7:f1:25:eb:e5:f5:cc:
f4:f6:42:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:27 2024 by rpki-client on console-fra.rpki-client.org