Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/84Jt4YyDh1y2ky1cUeFunv_ct58.roa
File: 84Jt4YyDh1y2ky1cUeFunv_ct58.roa (raw, json)
Hash identifier: O4V1/c1JJ41jyyhqxSGrP42KhhjgeHnuNzvf8nVcsHs=
Subject key identifier: F3:82:6D:E1:8C:83:87:5C:B6:93:2D:5C:51:E1:6E:9E:FF:DC:B7:9F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC493421B1283B5A255A56134C82A1DBE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/84Jt4YyDh1y2ky1cUeFunv_ct58.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216081
IP address blocks: 188.241.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:42:1b:12:83:b5:a2:55:a5:61:34:c8:2a:1d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3826de18c83875cb6932d5c51e16e9effdcb79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:4e:7a:d9:3b:c0:de:65:58:a9:5e:1c:db:
c4:61:4e:f5:e6:14:0c:f7:03:b7:9e:7b:c6:e1:06:
71:5d:b6:45:ea:2a:e2:62:36:e7:35:34:fa:11:fe:
a5:df:c8:97:c7:41:3a:b0:33:73:d8:be:78:02:4e:
66:1b:ce:d7:6f:4b:20:40:52:d0:ee:16:e9:2c:7f:
db:07:ce:f0:f4:7b:15:ed:c1:1c:6d:d1:52:00:2d:
16:f6:14:15:12:b9:7d:13:e0:78:b1:0a:89:60:45:
d6:3b:b8:f0:f4:cb:b4:86:d3:c8:0a:36:fb:a9:1f:
5e:06:67:43:38:58:a2:c2:f5:03:7b:31:85:6e:a9:
a6:be:8f:62:d9:d7:3d:5e:ab:b6:80:47:e2:18:4b:
1a:97:08:6d:9e:5b:cb:f3:09:ca:e2:fb:9a:41:9a:
ef:9d:bb:e3:59:79:80:ba:df:25:65:a9:61:ea:70:
57:78:df:c3:5d:51:a4:f3:ac:df:3d:1c:4f:dd:9d:
3d:60:d7:24:d0:90:58:1a:36:c4:8a:2e:7c:26:df:
da:5e:02:75:42:2f:24:e4:60:b4:e1:21:d0:bd:5b:
f4:8e:91:66:cd:bf:12:8a:31:0b:db:c3:c8:81:b6:
58:48:17:a9:bf:2a:07:86:79:70:5e:cd:b3:7d:98:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:6D:E1:8C:83:87:5C:B6:93:2D:5C:51:E1:6E:9E:FF:DC:B7:9F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/84Jt4YyDh1y2ky1cUeFunv_ct58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
92:78:00:b5:37:9e:9b:f7:42:0d:37:9f:c8:dc:20:b6:5b:f0:
9c:f9:66:34:ac:c0:35:af:c5:f3:e7:92:70:a5:de:e4:73:d6:
e4:ab:5e:07:b0:92:e7:01:69:a1:22:a6:77:e1:fe:3f:ad:82:
04:9d:27:92:05:56:80:2e:98:dd:92:aa:ce:ed:71:50:05:73:
82:7f:6d:73:1a:34:05:39:6e:fe:62:c5:5e:d4:b7:8e:e9:6d:
4e:1c:ab:91:73:cf:41:dc:10:9a:4e:7c:5d:a6:74:31:5e:4d:
e0:e2:e9:e9:f9:28:04:fb:7c:7b:b4:15:c4:34:10:64:5d:86:
de:7b:5d:fd:29:17:24:7b:95:84:cd:cd:c0:08:38:ed:df:6c:
c1:7f:69:19:82:af:c5:4d:6f:9f:a7:fd:e9:d7:4d:76:75:d6:
0a:04:06:d3:5d:cc:9b:45:c5:e1:f3:52:da:b9:0d:01:e6:21:
01:e9:64:57:e6:c7:aa:eb:cd:18:b3:d7:af:aa:6d:c8:de:cf:
77:13:93:75:4b:b7:ae:45:09:16:9e:49:67:e4:5d:20:db:14:
ec:d1:a1:14:fa:b2:92:a2:09:59:e4:2b:e9:e2:1a:f2:81:c2:
46:65:47:b6:07:68:1d:9f:f0:5d:50:fd:92:3c:b6:31:61:13:
b0:46:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:46:23 2024 by rpki-client on console-ams.rpki-client.org