Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/u_WkSaiz99hMIXWO3ApLD8m07JA.roa
File: u_WkSaiz99hMIXWO3ApLD8m07JA.roa (raw, json)
Hash identifier: HT2GM0bq9jwDXyb7lx39cGT6xIdRxAxsRAw+XsmQxIk=
Subject key identifier: BB:F5:A4:49:A8:B3:F7:D8:4C:21:75:8E:DC:0A:4B:0F:C9:B4:EC:90
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 018CC34891C28EE492DB25A6A7B68CEE5488
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/u_WkSaiz99hMIXWO3ApLD8m07JA.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61134
IP address blocks: 188.137.118.0/24 maxlen: 24
2a02:c47:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:91:c2:8e:e4:92:db:25:a6:a7:b6:8c:ee:54:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbf5a449a8b3f7d84c21758edc0a4b0fc9b4ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c0:f3:38:d6:82:22:b7:8f:cc:41:46:24:db:
83:49:61:a1:1f:b9:8c:09:0d:68:a2:46:c1:97:60:
50:bc:2c:b6:70:a9:b0:2f:94:ac:85:d3:a8:1e:19:
d0:7e:b8:63:90:ea:48:0c:72:3d:08:c7:e0:4e:c3:
6c:d4:4b:ca:99:57:a9:cc:10:c6:52:78:6d:32:58:
59:6d:4c:7e:80:95:fe:ad:2f:95:f5:f6:78:45:36:
10:46:c8:f1:b5:c0:34:d0:5e:f1:b3:e2:e1:ae:a9:
61:a7:c3:67:b6:95:9b:c8:17:51:6c:88:a2:cd:c8:
55:18:e5:d2:18:03:f3:d6:3e:2b:49:5f:6a:22:12:
40:72:68:8a:35:24:f6:78:35:8e:c2:da:18:71:1b:
e5:0e:e2:e3:3b:8d:91:ea:00:ea:16:ab:1c:18:37:
2e:e9:b3:93:9a:fe:9b:89:6b:dc:fa:7e:25:98:52:
a4:a1:b0:d2:bc:76:d9:f2:61:45:7f:ae:99:b6:d5:
23:c1:4a:87:b4:df:d1:fd:24:e6:b0:cf:dd:aa:75:
a0:8d:95:20:02:da:f7:6a:1d:f6:f7:fe:8f:d4:f6:
6b:84:78:2c:6a:26:b6:9b:8f:66:ec:70:1a:62:51:
e5:04:00:57:32:23:9b:8a:26:b5:af:4a:26:f5:bf:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:A4:49:A8:B3:F7:D8:4C:21:75:8E:DC:0A:4B:0F:C9:B4:EC:90
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/u_WkSaiz99hMIXWO3ApLD8m07JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.137.118.0/24
IPv6:
2a02:c47:c::/48
Signature Algorithm: sha256WithRSAEncryption
48:f9:ad:63:04:51:eb:e0:3c:30:6b:39:65:d1:71:fd:13:c6:
62:ec:28:97:75:80:57:32:fc:fe:5b:31:ae:5d:66:b1:54:34:
55:e6:24:6d:4f:7e:e9:28:86:1f:27:d4:0f:08:d4:f3:12:18:
95:a4:54:36:89:da:2a:9b:09:84:d9:77:69:7c:53:51:60:69:
d0:3f:9c:3d:99:e5:5b:fd:7b:99:a5:c6:3d:30:41:af:80:ee:
37:53:8e:61:79:d2:f7:b1:c8:31:03:e5:64:59:97:b4:00:9a:
8e:12:bf:3e:d7:e0:b9:10:e9:fe:4c:66:33:ec:62:33:16:31:
81:01:e2:14:69:d6:9d:a9:03:ac:e5:87:e0:ff:ce:f7:ed:60:
6c:d1:26:3c:f9:45:fa:3a:2f:14:33:02:4b:ee:e2:1e:dc:fb:
5c:9c:37:6b:4e:9d:52:18:a8:8f:45:42:fe:c5:dc:95:0d:58:
52:6e:35:d8:d1:5a:81:75:4c:75:cc:b0:fa:ae:7d:06:6f:39:
43:fe:94:c2:f8:e3:28:08:ce:7f:41:dc:c1:52:1b:e8:10:d8:
f6:4d:fe:ba:b7:41:24:9f:ee:50:f0:91:ba:e1:2a:f4:c2:85:
26:45:c5:90:f7:1c:0c:6d:aa:ce:2d:f8:d7:80:09:21:1b:9a:
ac:57:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:04:48 2024 by rpki-client on console-fra.rpki-client.org