Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/k5BmmKhNQ6ZVVTrWbkVaiPEq8EQ.roa
File: k5BmmKhNQ6ZVVTrWbkVaiPEq8EQ.roa (raw, json)
Hash identifier: v3E2hbdNRBbLdhVJSmZerk6HZSaMnoGAoa8mHVKWW4w=
Subject key identifier: 93:90:66:98:A8:4D:43:A6:55:55:3A:D6:6E:45:5A:88:F1:2A:F0:44
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC79554F4BEC5292D34CEF58F5D95DDD1
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/k5BmmKhNQ6ZVVTrWbkVaiPEq8EQ.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50886
IP address blocks: 188.214.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:54:f4:be:c5:29:2d:34:ce:f5:8f:5d:95:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93906698a84d43a655553ad66e455a88f12af044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:03:86:63:cd:01:bd:f1:3a:d9:e7:92:81:
73:fb:59:53:48:55:f3:e7:d3:30:0d:54:ef:ce:8e:
68:21:90:c2:97:61:67:44:d4:51:c2:40:48:af:14:
9f:24:b4:89:73:c2:71:0b:e7:62:83:c5:d8:d5:2e:
71:35:06:00:2f:92:90:15:3d:1a:ad:de:e0:61:bd:
62:24:99:6f:3a:0c:e8:e2:58:1b:bb:65:fe:7c:40:
f2:87:f4:ee:9b:c5:41:1d:a9:71:56:b9:3a:f8:9c:
19:6f:83:4c:f8:4f:fe:73:eb:95:17:be:58:52:d6:
0d:93:80:fe:86:06:d8:e2:c7:62:d0:7b:b9:0e:e3:
10:b2:ca:8e:4b:82:b8:bb:72:c1:53:aa:d5:75:eb:
4c:cd:73:3f:5d:0f:74:02:7a:b1:57:15:cb:c9:ce:
d7:6e:df:52:f9:59:eb:0a:57:e4:25:0a:fa:db:a8:
de:6b:74:18:ea:8f:e0:cd:d2:c9:2a:bf:cf:66:cc:
88:ad:9b:df:93:45:4c:40:96:21:64:5b:58:3d:ff:
c0:25:0f:3a:b4:22:19:37:c2:ca:3b:15:00:4f:96:
b3:88:cb:0f:61:71:03:f7:dc:26:75:ef:ed:dc:b8:
f2:69:a8:5a:05:39:f0:5f:23:8d:cf:69:2c:b0:e8:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:66:98:A8:4D:43:A6:55:55:3A:D6:6E:45:5A:88:F1:2A:F0:44
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/k5BmmKhNQ6ZVVTrWbkVaiPEq8EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.32.0/21
Signature Algorithm: sha256WithRSAEncryption
29:32:db:d1:01:d9:85:60:f0:53:61:8b:d1:58:b3:c8:40:9d:
e8:73:9d:7f:24:1d:32:7b:4d:47:ef:21:ea:fb:1a:10:85:a7:
df:a2:22:e9:fc:36:8b:c9:90:8c:68:e9:f8:0e:f2:6b:44:20:
84:c1:49:d0:d1:6c:0f:b7:b8:9b:ca:56:f4:45:55:ee:49:cd:
58:c0:b8:d8:58:2d:54:8e:88:9d:1f:9f:92:25:c6:db:54:a0:
c3:bb:9a:44:17:fe:ba:51:69:81:d8:82:ab:87:41:39:2a:97:
fe:3d:8d:46:c3:0a:4b:25:87:15:f8:aa:59:2c:fb:e9:1d:a8:
32:e9:1a:2f:60:1e:d1:22:80:0f:c2:43:c9:1b:17:ea:cb:b8:
ab:65:d9:00:fc:c1:fa:0a:f1:3a:35:c9:ac:24:4e:92:62:17:
e3:71:91:13:b9:88:42:bc:3d:50:b9:c0:cb:38:fc:eb:46:3c:
31:64:7b:f3:a9:b4:d4:dd:46:9f:a8:ea:32:45:bc:40:ef:e0:
79:28:ea:45:f4:4c:0e:fd:7f:6a:6d:1c:37:ed:7f:27:89:9f:
08:ca:bf:d8:dc:cc:5f:1f:d0:1e:34:95:8b:28:bf:0e:2b:55:
73:29:1e:3b:2b:4c:84:e5:35:af:38:77:fa:bb:51:c4:a9:c6:
1e:39:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 23:43:41 2024 by rpki-client on console-fra.rpki-client.org