Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/3NlUHjTIpuxw8jsV3-jx2gCpmIs.roa
File: 3NlUHjTIpuxw8jsV3-jx2gCpmIs.roa (raw, json)
Hash identifier: Nb3i620YL9Lnc6kZdsDJWmpBWkrWlkrK/ADT581nr0k=
Subject key identifier: DC:D9:54:1E:34:C8:A6:EC:70:F2:3B:15:DF:E8:F1:DA:00:A9:98:8B
Certificate issuer: /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial: 018CCA2AB4845C3D27DA84E5EA9CF9055889
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/3NlUHjTIpuxw8jsV3-jx2gCpmIs.roa
Signing time: Tue 02 Jan 2024 12:34:05 +0000
ROA not before: Tue 02 Jan 2024 12:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204156
IP address blocks: 188.214.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:b4:84:5c:3d:27:da:84:e5:ea:9c:f9:05:58:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Validity
Not Before: Jan 2 12:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcd9541e34c8a6ec70f23b15dfe8f1da00a9988b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:20:58:d1:b1:c0:ef:aa:23:93:1f:72:ee:
cc:c4:09:ba:6a:43:ed:2f:2f:cf:d3:9b:5f:ae:c7:
f2:19:46:bc:3c:26:9d:c3:45:ab:dd:02:da:4e:77:
08:0a:f1:e4:c4:d4:11:4c:a1:b2:a4:bd:87:e6:73:
04:75:e9:36:0e:76:8b:83:f0:b6:bf:62:3b:1f:a7:
9a:e9:69:09:f5:61:bb:57:29:9f:75:d0:00:7d:c4:
f7:08:b1:a6:2b:10:0c:57:a6:9b:9e:79:17:d9:a0:
00:bd:a9:09:9e:03:54:85:dc:33:95:7d:5e:dc:5d:
0e:29:42:f2:54:4a:0b:ed:a6:c3:6b:73:3d:0d:c3:
18:d5:6a:65:02:5b:24:20:80:71:9a:8d:2f:09:2c:
ad:68:ff:ff:ac:3a:db:75:57:37:6b:25:27:8a:a8:
88:06:90:3c:7d:8f:4c:86:0a:83:fa:36:a1:98:9f:
31:29:fc:8a:46:a9:22:ff:16:ba:bc:a6:98:c8:9e:
c1:e0:53:a4:e1:71:c3:e3:3a:4b:31:c4:6f:48:fa:
9d:00:8b:47:ec:ab:3c:bc:30:01:02:b5:db:32:32:
ed:78:82:2e:89:2b:a7:62:a5:c8:f3:7d:db:a7:18:
03:01:aa:35:46:c8:55:b9:1f:a8:15:01:7f:9f:06:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:54:1E:34:C8:A6:EC:70:F2:3B:15:DF:E8:F1:DA:00:A9:98:8B
X509v3 Authority Key Identifier:
keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/3NlUHjTIpuxw8jsV3-jx2gCpmIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.92.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f1:0c:b2:45:5c:36:7d:4e:a9:d5:75:f6:16:4e:52:3c:f8:
13:5f:eb:22:08:e1:f0:8c:b7:e6:77:78:35:70:a4:56:51:e5:
15:e0:06:5d:1e:45:d9:89:b5:52:1f:07:cf:d1:7c:09:d4:d1:
ec:d5:b2:4d:80:09:0a:08:5d:74:49:c7:61:e6:de:29:3e:78:
03:b4:35:38:b9:07:3a:df:ec:fe:ea:24:66:13:98:84:da:5c:
cc:f7:66:83:db:e1:b1:f5:5a:36:75:d9:1e:09:fd:11:74:42:
d0:75:b4:61:84:88:81:6b:43:73:4b:c9:67:aa:4d:5b:e8:05:
5e:09:48:88:31:26:0e:d1:64:67:28:14:e6:e0:ca:4c:82:dd:
1f:65:14:99:95:46:b1:ba:1d:f7:e3:92:66:65:67:90:26:07:
f7:3b:b3:24:3b:6f:d3:53:ab:d9:6b:4a:20:69:cf:83:93:c1:
b9:12:56:8f:f7:ce:21:d8:34:cc:ec:c5:1d:6c:b5:9c:8d:2f:
a4:a8:eb:ed:5f:2e:1d:4d:72:9d:db:02:b2:d3:10:da:64:57:
07:0a:e4:7d:84:10:2e:99:eb:a8:17:12:c6:64:89:2f:ce:aa:
6b:24:ba:56:43:b4:98:65:ba:7d:8c:62:c5:55:d6:ae:56:5c:
6d:b8:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 08:21:46 2024 by rpki-client on console-fra.rpki-client.org