Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/mjU5uqx36RgCpDI_N5neN_V-7AI.roa
File: mjU5uqx36RgCpDI_N5neN_V-7AI.roa (raw, json)
Hash identifier: JHkZmtND8aZb4WElvEoqN8Dl0CSBLFiQde+G/0ERMjE=
Subject key identifier: 9A:35:39:BA:AC:77:E9:18:02:A4:32:3F:37:99:DE:37:F5:7E:EC:02
Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial: 0190985A9FD2FA8C5D66AAEEB01F063E321D
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/mjU5uqx36RgCpDI_N5neN_V-7AI.roa
Signing time: Tue 09 Jul 2024 16:36:34 +0000
ROA not before: Tue 09 Jul 2024 16:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49556
IP address blocks: 88.135.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:98:5a:9f:d2:fa:8c:5d:66:aa:ee:b0:1f:06:3e:32:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
Validity
Not Before: Jul 9 16:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a3539baac77e91802a4323f3799de37f57eec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:d9:f5:f1:8e:b6:57:c9:7e:9f:56:36:74:
d2:7c:48:3b:f8:65:1a:4b:c6:ee:33:c0:10:4c:3f:
57:06:13:c2:62:ee:0c:02:c1:11:d2:3e:2f:d9:6e:
01:2c:af:67:98:a7:1d:69:23:5a:e2:b6:01:82:fb:
b6:27:d7:01:b0:17:96:3e:10:b8:5e:20:d3:0a:f9:
7d:9d:76:00:6d:fc:75:0a:e7:a3:78:9b:14:b4:a2:
8f:b6:2c:a1:21:d0:77:f4:36:8f:ab:4b:b2:14:3d:
60:38:5a:3c:34:45:42:a9:82:d9:2c:ce:e6:d7:38:
5a:ae:b2:40:db:9e:78:96:8c:0c:ab:5c:00:e3:95:
f2:c1:8e:fa:71:d0:c9:6b:89:19:ea:4b:a4:93:4f:
40:72:5a:57:85:ce:d5:80:75:5f:a6:ab:89:d1:3c:
51:96:1e:e0:50:37:11:6d:3b:90:d9:a4:ff:4c:2d:
21:84:09:bf:8b:cc:a9:b7:ca:59:4e:ce:28:fd:cf:
5d:f7:b7:5a:b7:5c:c2:5f:2c:22:35:67:88:58:0a:
21:d0:9b:1f:49:00:01:d8:b8:bc:10:70:c2:fc:5e:
d2:0d:b1:be:86:4a:25:1b:02:21:38:cc:ed:97:9f:
ec:08:da:67:1b:aa:22:2f:99:62:03:d8:7e:95:fa:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:39:BA:AC:77:E9:18:02:A4:32:3F:37:99:DE:37:F5:7E:EC:02
X509v3 Authority Key Identifier:
keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/mjU5uqx36RgCpDI_N5neN_V-7AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.72.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2a:09:71:73:89:2a:57:90:21:7b:34:0a:be:b0:93:9e:2e:
8a:45:9e:2b:4f:7e:e7:74:e9:6e:7c:23:13:b4:e1:b9:53:0a:
cf:22:34:7d:7e:06:56:27:12:ec:95:56:e6:ed:1e:b0:63:80:
c9:bb:11:32:5b:f9:d2:e8:2a:16:83:9d:90:b0:7b:1f:54:d1:
85:3d:3d:fd:63:b9:be:ac:1f:33:d1:48:1f:f8:51:d5:45:16:
91:47:1f:ea:38:6e:48:94:e4:1f:36:5a:b3:8d:c5:b3:a6:84:
2b:44:50:2e:c2:f8:99:b2:b8:c9:36:bf:c3:0e:92:7f:51:0c:
12:86:db:50:7a:02:a4:14:b6:58:21:bf:ea:ba:7d:78:c8:87:
a7:02:90:62:1e:cf:39:cd:d4:c0:00:1c:1c:88:a9:81:e5:36:
7d:90:30:a9:4f:e3:25:4f:5e:78:4d:19:5c:85:9a:b0:85:73:
a8:b3:c6:1b:56:28:0e:d3:26:71:ea:76:c5:5a:80:9e:b5:2b:
73:51:d7:2f:f8:86:23:4b:d3:27:16:11:fa:4d:b8:35:a2:4f:
3e:cc:9c:7f:40:b9:fd:f7:42:26:b0:72:db:9e:c6:1f:4d:b7:
24:75:c5:df:f2:6e:70:51:05:f6:db:a5:99:bf:8d:e3:26:a6:
51:84:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:26:12 2024 by rpki-client on console-ams.rpki-client.org