Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/xvpoJeebN9ZK_Wc5o61pZq9affo.roa
File: xvpoJeebN9ZK_Wc5o61pZq9affo.roa (raw, json)
Hash identifier: 3jVUPRwNd22W6Mb/W0X+E2BJlJccnfj3xhj1Q5gWDUs=
Subject key identifier: C6:FA:68:25:E7:9B:37:D6:4A:FD:67:39:A3:AD:69:66:AF:5A:7D:FA
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018CC348F3D922240754E09D1BD71A5A86C0
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/xvpoJeebN9ZK_Wc5o61pZq9affo.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8562
IP address blocks: 188.172.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 14:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f3:d9:22:24:07:54:e0:9d:1b:d7:1a:5a:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6fa6825e79b37d64afd6739a3ad6966af5a7dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:e1:c0:46:cc:7f:d5:86:6f:9d:26:9a:77:
a6:a4:bc:28:19:24:ef:f4:91:f8:2f:2d:95:3c:e2:
47:88:e9:05:13:07:84:b2:96:d8:67:35:80:62:94:
35:35:30:73:0e:d8:fd:0e:75:09:16:28:3e:d4:87:
1f:5d:b1:ab:5b:50:52:01:fa:72:25:79:33:aa:f9:
c6:4a:9e:03:c1:c0:3d:96:0c:8b:d9:84:08:78:b0:
8c:4b:a7:db:4a:63:0c:88:63:04:03:2d:eb:70:c6:
c2:1b:ab:a3:2d:89:24:61:b1:a1:38:7f:ad:86:9f:
29:51:ad:ae:0e:d9:00:02:f9:54:61:56:09:79:4b:
c9:cf:a4:3f:95:0d:e8:02:ab:b4:5f:3e:49:10:5c:
a9:a3:05:d6:c8:ae:46:98:8d:fa:cd:45:b0:cb:b7:
17:68:e0:46:ba:91:23:59:84:f7:f6:08:9f:39:9a:
d0:89:32:bd:df:fc:ba:8b:98:48:ea:cc:26:44:73:
b8:f3:df:84:70:db:e5:5b:6a:61:e7:22:ee:4a:59:
a5:f4:3c:63:20:7d:68:a9:7b:45:f9:87:f1:8d:0b:
9b:e3:5b:6e:06:db:d4:01:7a:2d:31:1e:9d:ba:18:
94:fd:8a:44:0b:2c:3a:98:53:e3:1a:25:f6:a6:a3:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:68:25:E7:9B:37:D6:4A:FD:67:39:A3:AD:69:66:AF:5A:7D:FA
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/xvpoJeebN9ZK_Wc5o61pZq9affo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.196.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2a:57:05:b3:96:a9:1c:fe:99:bc:95:84:86:25:e3:34:0d:
4a:c8:41:b6:bc:87:77:e0:f4:5a:b7:db:32:1d:ea:12:bb:a5:
0b:dc:e6:91:79:ad:b7:d1:e5:0f:a4:29:21:db:50:10:1b:45:
87:3f:eb:59:d2:67:6f:53:b3:eb:e7:0b:55:c0:c7:ed:a4:96:
dd:35:86:33:5a:58:b0:62:90:2e:8a:44:f6:3a:53:bf:6b:2b:
43:d6:40:d8:1d:49:97:db:41:9a:52:74:73:30:9a:7e:54:f9:
34:cb:79:d1:99:1b:2b:98:02:51:8d:b0:34:18:1b:41:5f:98:
b8:78:24:8e:94:e8:d4:6f:06:71:f8:74:39:12:bf:aa:be:ae:
09:16:f8:42:7d:3e:55:1a:f5:3d:e0:ab:be:63:54:6b:37:80:
d1:b5:5c:b0:f1:c6:ec:0b:b1:6c:e2:f2:a6:a3:dd:20:6d:94:
cb:17:a9:c4:81:48:26:21:b2:16:d5:75:25:4d:80:e9:48:c9:
22:88:ea:2b:27:ce:e8:dc:41:4e:c6:d0:03:99:03:ae:ac:b0:
c6:21:c1:fe:ee:62:88:46:17:22:e1:ef:a5:5d:e6:b6:89:e6:
06:91:8c:bd:05:64:a0:50:63:71:4a:33:46:3e:69:72:89:04:
0c:f3:cf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 21:07:57 2024 by rpki-client on console-fra.rpki-client.org