Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/B8lPdbrAshgytEOOao4tGug0YjQ.roa
File: B8lPdbrAshgytEOOao4tGug0YjQ.roa (raw, json)
Hash identifier: 7DuOSBPhX1p5Mc6YwyvkUa4aHAxeOBAqNZtgjdAWiQQ=
Subject key identifier: 07:C9:4F:75:BA:C0:B2:18:32:B4:43:8E:6A:8E:2D:1A:E8:34:62:34
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7A51EECE59CB46270B600967F54E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/B8lPdbrAshgytEOOao4tGug0YjQ.roa
Signing time: Mon 01 Jan 2024 18:30:18 +0000
ROA not before: Mon 01 Jan 2024 18:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57652
IP address blocks: 188.72.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7a:51:ee:ce:59:cb:46:27:0b:60:09:67:f5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07c94f75bac0b21832b4438e6a8e2d1ae8346234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:e7:61:4e:ef:86:eb:54:22:d2:da:9a:95:
46:e8:89:34:70:81:6d:19:35:0c:ab:77:fc:3c:ee:
70:c4:55:26:db:fd:77:06:16:06:67:13:86:f0:be:
36:c9:eb:d1:36:02:b2:b4:be:2b:ed:85:39:00:43:
1d:de:a8:8f:3e:e8:c3:58:f6:09:5a:b6:54:b6:48:
71:3b:48:41:dd:53:b8:97:ea:ac:13:6e:8f:98:fb:
3c:36:e7:4e:c0:99:d9:b3:07:66:8f:e5:9c:67:1c:
0c:b7:0f:10:9e:30:d1:4c:7b:57:ed:aa:02:92:29:
45:1d:29:4e:12:50:b2:75:9e:ce:55:9b:46:cb:11:
c6:cc:6a:0d:c2:2a:b1:23:6b:94:93:dc:96:13:b2:
fa:89:57:29:6c:79:c8:53:e9:0d:17:99:0a:5d:4f:
ea:64:b9:8d:8f:75:cc:a7:06:1f:4e:8f:fb:2d:5c:
23:0a:bb:1c:f9:3e:64:e0:fc:3f:2c:bf:e5:87:05:
01:dc:1b:11:dc:ea:81:f9:b4:a3:45:83:94:91:4e:
58:cd:bc:2a:46:2c:07:54:55:59:0c:2e:75:2e:fb:
70:9c:6d:bf:b6:b3:68:48:e5:1a:af:68:4c:3e:31:
43:10:f5:11:d0:cc:ec:9e:9c:24:cd:5f:71:4e:e6:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C9:4F:75:BA:C0:B2:18:32:B4:43:8E:6A:8E:2D:1A:E8:34:62:34
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/B8lPdbrAshgytEOOao4tGug0YjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.73.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:63:54:b4:80:8a:da:59:cf:de:8c:1a:0b:52:a8:83:03:97:
d5:3c:6d:ae:78:46:11:ae:ad:57:4b:62:9a:91:8d:53:26:46:
d0:a7:ef:9b:8f:34:8e:e8:1d:fd:0d:b8:3c:75:95:8a:13:8b:
9f:87:30:2c:32:3a:bd:3f:c0:1d:f5:d0:bd:f7:52:7f:69:a6:
17:34:e8:fe:04:bb:8b:b6:5e:2c:c8:4d:e0:bf:21:4d:e3:b6:
48:bc:4e:4c:8d:33:e2:25:4a:78:93:38:3c:80:7c:42:66:0d:
90:2a:c7:4e:24:39:0b:e6:0c:d4:f1:57:34:f0:ee:ac:39:24:
16:8e:24:5e:b4:8a:6b:30:31:9b:19:d7:ae:0f:18:ae:9e:c5:
c9:f6:53:2d:1a:94:62:a2:01:83:0a:2e:1e:0d:0c:3b:38:95:
73:db:4b:87:b3:b2:13:f9:c9:31:22:eb:75:7f:fd:98:df:ec:
42:84:cc:06:03:19:29:af:3c:1d:1e:58:91:2d:7f:45:0c:f7:
d8:da:7d:73:32:8d:aa:54:b9:96:50:06:4a:d4:1c:62:84:bd:
0c:3a:f8:bc:2f:92:2e:c9:16:9a:76:24:58:40:95:f0:52:0f:
0a:23:d1:ac:bf:89:0e:4c:43:c2:b4:54:89:78:26:3f:0b:50:
0b:a0:58:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 14:06:19 2024 by rpki-client on console-ams.rpki-client.org