Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_gP86bnjGqHSg1tWimdnUB8F0VA.roa
File: _gP86bnjGqHSg1tWimdnUB8F0VA.roa (raw, json)
Hash identifier: q3GfHzsxGDR/t92oJuYBxCxKyxVlcdJGu8uFE2VtVbE=
Subject key identifier: FE:03:FC:E9:B9:E3:1A:A1:D2:83:5B:56:8A:67:67:50:1F:05:D1:50
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC79422DD81FDC8885609597C25C72DE6
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_gP86bnjGqHSg1tWimdnUB8F0VA.roa
Signing time: Tue 02 Jan 2024 00:30:23 +0000
ROA not before: Tue 02 Jan 2024 00:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207451
IP address blocks: 188.130.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:22:dd:81:fd:c8:88:56:09:59:7c:25:c7:2d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe03fce9b9e31aa1d2835b568a6767501f05d150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:45:61:ab:87:b1:94:59:70:c3:b4:67:07:
07:39:01:ae:7e:34:ed:4f:d5:b7:1a:28:ca:c6:51:
94:15:98:ff:1e:ac:e0:c3:8d:26:75:6e:29:25:27:
98:fe:84:fc:5e:dc:37:a0:0a:69:d5:14:c0:64:7e:
25:25:64:10:1e:74:bc:9b:54:6d:8e:c5:7d:74:11:
2e:9e:26:37:1f:07:6d:00:7d:10:f8:12:9c:6c:47:
9d:ab:22:f7:48:2f:34:0b:ac:06:4c:01:56:4b:20:
70:dd:e0:3c:1e:43:e4:8b:2b:a8:88:93:ba:b1:ac:
94:31:8a:45:fc:5e:80:d6:d9:96:db:c8:65:36:4c:
47:1b:24:6b:80:3f:1d:dc:14:49:a7:38:59:17:f7:
a8:38:94:ef:60:ff:74:0f:b6:d9:03:d9:8d:b8:74:
1d:6f:c8:d4:10:ad:22:c1:4d:6f:fc:e3:40:66:a6:
91:c8:7d:ae:3e:54:7b:df:24:ef:02:49:97:f7:83:
ab:4f:2a:66:05:03:b1:45:56:5c:b4:d2:cb:4c:34:
37:15:fd:27:7e:88:11:2f:77:3d:aa:80:9b:3b:1d:
51:b2:16:c5:3f:06:b4:38:db:d7:98:69:e9:c2:4f:
09:33:bb:41:f1:69:64:ba:e8:d3:33:d1:33:96:f4:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:FC:E9:B9:E3:1A:A1:D2:83:5B:56:8A:67:67:50:1F:05:D1:50
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/_gP86bnjGqHSg1tWimdnUB8F0VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.232.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c7:db:e7:49:74:65:0e:ec:21:a4:d3:c1:c5:51:95:07:3c:
e9:6e:c8:e9:fd:3e:d9:d2:cf:20:47:3c:2a:74:5e:02:61:11:
12:40:24:46:7f:50:e4:22:80:54:ea:f3:61:19:21:2f:49:ba:
6b:7d:f6:48:bf:80:47:63:79:8e:ba:d6:32:56:1d:34:ba:de:
05:ec:64:05:d6:79:61:be:3e:03:2c:ad:f4:c8:46:68:52:65:
c6:ee:16:28:97:91:b5:59:b8:1a:a3:d1:88:0b:37:90:84:43:
8f:96:ce:b6:08:1c:d9:d3:08:e2:39:f8:1d:06:7b:04:6e:52:
7f:b6:11:1f:58:fb:eb:ac:34:94:30:7b:74:0c:38:56:ca:e9:
e8:31:24:aa:49:cf:37:e3:32:17:3d:f1:0b:08:92:02:60:7b:
de:30:e6:b8:40:94:d1:d0:4d:93:13:7a:f6:40:5e:87:8f:57:
b4:3d:6f:ea:dd:6e:d1:de:7e:46:01:30:12:c2:b5:26:4a:78:
75:21:ab:59:a4:2b:e3:fb:7b:4a:76:d5:ae:29:1d:fe:3b:21:
75:b0:5a:50:a3:8d:96:6a:ad:87:cc:fc:ce:06:00:e3:29:6b:
c1:ff:03:26:1b:da:2e:11:9c:8c:ae:9d:8d:26:e3:41:b6:ea:
8e:16:1d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:02:49 2024 by rpki-client on console-fra.rpki-client.org