Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/kAGgNkfTXrEJYbsZo8U_PX68X8E.roa
File: kAGgNkfTXrEJYbsZo8U_PX68X8E.roa (raw, json)
Hash identifier: nrhON9O1T9cSCnuB+anD/8HHR2clrB2Ny5SFT2r9Ntk=
Subject key identifier: 90:01:A0:36:47:D3:5E:B1:09:61:BB:19:A3:C5:3F:3D:7E:BC:5F:C1
Certificate issuer: /CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Certificate serial: 018CC8017416D9AFA0FA2D4433C701ADD97B
Authority key identifier: 8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/kAGgNkfTXrEJYbsZo8U_PX68X8E.roa
Signing time: Tue 02 Jan 2024 02:29:47 +0000
ROA not before: Tue 02 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 195.88.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:74:16:d9:af:a0:fa:2d:44:33:c7:01:ad:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7150074ea6fdd1e84dd95e0b06836407e9411b
Validity
Not Before: Jan 2 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9001a03647d35eb10961bb19a3c53f3d7ebc5fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:d9:c7:51:29:39:8d:a3:e6:cf:3b:23:d8:
6e:3c:47:ce:02:52:28:33:aa:68:84:cf:ff:fa:60:
1f:77:b9:2a:b5:b4:f0:59:11:d9:f2:06:86:18:10:
bd:4a:ec:01:05:cc:de:9b:fb:f5:5d:b0:45:62:a5:
29:2b:70:29:88:a8:83:e9:43:d5:23:f3:42:3b:b0:
8a:61:a1:79:4f:5a:cc:9a:b6:95:5c:39:ac:6a:56:
e2:0d:80:53:24:0f:17:42:24:06:fb:6f:5b:ba:9e:
3b:9f:5c:e4:28:72:22:30:6e:58:1f:45:44:f3:f5:
8c:23:7f:19:6a:b6:7e:cf:1e:e5:35:03:80:04:a1:
38:3d:70:92:2a:cc:eb:b9:7d:e7:99:54:cd:41:e8:
3f:e3:cb:a3:e0:2f:66:79:b9:6c:5f:78:1f:5c:f5:
09:3a:4c:95:eb:47:9d:40:c5:90:b6:09:40:af:fa:
12:5b:9e:c7:31:b7:1a:c7:00:15:63:f3:6c:7c:75:
c1:f7:a9:07:25:36:94:33:b3:37:6c:30:2f:c8:1d:
b9:d9:b5:d2:af:a9:41:f9:27:2f:72:2c:7b:99:e2:
e2:0c:04:0e:c2:fa:3d:06:2a:1d:de:62:fd:00:b1:
2c:58:bf:f5:e7:e8:ce:35:81:39:9d:e1:5c:45:da:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:01:A0:36:47:D3:5E:B1:09:61:BB:19:A3:C5:3F:3D:7E:BC:5F:C1
X509v3 Authority Key Identifier:
keyid:8A:71:50:07:4E:A6:FD:D1:E8:4D:D9:5E:0B:06:83:64:07:E9:41:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inFQB06m_dHoTdleCwaDZAfpQRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/kAGgNkfTXrEJYbsZo8U_PX68X8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d63f7-e4b6-4d3c-8044-3c93bb6cfee1/1/inFQB06m_dHoTdleCwaDZAfpQRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.208.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c0:5b:f7:78:bf:7f:3a:52:07:f3:08:f7:e1:61:32:98:e0:
99:95:7b:2c:81:2d:ec:a3:10:9f:57:5b:ba:b9:3e:6e:71:f6:
d1:a1:fb:31:57:25:06:08:34:6c:9d:e5:b9:a5:02:d8:2f:33:
82:e9:15:a7:c1:22:6b:09:ec:1e:7a:ef:5e:d0:05:df:c6:80:
9a:b3:de:f5:ef:ae:83:f6:23:47:06:e0:7a:03:d5:16:7a:41:
0e:2a:54:27:b2:4a:86:58:d3:62:a6:87:da:52:0a:15:c4:10:
e4:d5:8a:2d:38:63:53:4d:0c:93:82:c2:1b:b9:6d:58:46:63:
4c:9f:b9:2c:99:93:fc:a6:bc:59:cf:b4:ef:ea:e8:b3:d7:07:
a1:91:5e:94:ac:39:2e:95:30:97:a3:17:8d:b2:e6:36:b0:6c:
f5:d5:3c:e0:57:d5:e4:c7:72:dd:58:35:59:d1:f4:56:e7:f5:
94:3b:9e:a7:16:50:db:cf:89:01:01:5d:67:21:25:07:cc:e0:
11:8d:29:7f:77:c0:87:a3:92:60:77:4c:7c:7b:c1:b3:c2:33:
53:01:3f:55:3c:e9:83:b8:a2:64:26:b9:de:94:f2:86:0c:6e:
71:86:4f:9d:32:5d:1a:58:ed:28:55:d6:f8:1e:e5:64:8d:e5:
e8:a8:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:31:11 2024 by rpki-client on console-fra.rpki-client.org