Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/3Wf3I_pU6HZyRjBsJBWgiNFRb9Q.roa
File: 3Wf3I_pU6HZyRjBsJBWgiNFRb9Q.roa (raw, json)
Hash identifier: du+qXsnDHO9OA6/z7xkneHTT9S/L03QyjAElnK59fUE=
Subject key identifier: DD:67:F7:23:FA:54:E8:76:72:46:30:6C:24:15:A0:88:D1:51:6F:D4
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018CC56E340F9A729A44648F737FD768EA20
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/3Wf3I_pU6HZyRjBsJBWgiNFRb9Q.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 188.214.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 May 2024 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:34:0f:9a:72:9a:44:64:8f:73:7f:d7:68:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd67f723fa54e8767246306c2415a088d1516fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:62:c4:64:47:c2:73:fa:40:3c:e5:b3:95:
42:4d:43:b5:98:85:83:f6:b4:b2:b8:5f:2b:54:2d:
df:3f:ca:86:31:6b:20:b4:6b:a7:bb:59:af:81:9b:
a3:a5:46:5a:f1:39:4a:4c:d0:8e:a6:fb:52:36:9f:
54:21:ba:02:47:b7:ca:a9:7a:66:42:2c:18:dd:ca:
6d:9e:bc:6d:f6:44:49:69:35:4a:b5:ed:51:f8:de:
07:0e:87:e0:eb:ef:4a:32:29:c1:81:51:ea:5e:0c:
bd:a9:58:b4:c3:49:e8:53:80:45:14:28:e5:26:1b:
8a:91:0a:08:07:02:1f:9e:be:07:34:51:68:f2:29:
c9:09:71:4a:7d:37:08:c1:e9:de:95:e7:f8:3c:d1:
6f:37:e7:10:03:a8:58:60:53:59:b4:a7:7d:62:68:
a5:a7:69:06:26:ea:99:13:bf:1a:f5:2a:c6:f2:5f:
ea:ce:33:a8:b3:22:26:c1:91:c4:ad:49:ca:57:33:
9d:50:73:95:99:69:fb:2e:a0:7e:c6:16:0b:df:c0:
a7:07:34:c3:28:e8:38:45:54:68:a0:9d:f7:9a:da:
b1:7c:6d:49:4a:d9:85:5c:42:d3:87:23:ca:61:75:
dc:5d:6e:3b:e0:e3:26:d5:14:29:3d:5e:c5:e8:1c:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:F7:23:FA:54:E8:76:72:46:30:6C:24:15:A0:88:D1:51:6F:D4
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/3Wf3I_pU6HZyRjBsJBWgiNFRb9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.144.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b4:0c:1e:ce:e8:dd:91:ca:80:92:a3:fc:5f:63:08:74:39:
53:30:60:67:95:51:a0:e0:0d:72:92:ca:5f:dd:45:1e:33:63:
1f:85:c6:a8:9e:16:cb:4e:25:72:e9:99:20:2b:b9:eb:62:9f:
79:b9:47:1a:5c:33:7f:e9:6c:1f:6c:52:41:ce:31:38:ea:ba:
63:a5:9e:83:2e:53:80:d8:aa:9f:dc:d3:4c:e6:ed:8a:80:ba:
30:2c:99:21:59:2e:6e:9e:c5:09:3c:76:a7:f2:ec:be:4e:26:
d1:fa:07:a9:da:25:76:67:06:3b:66:10:85:34:6f:e7:44:da:
a2:89:d9:b0:11:40:dd:98:02:25:87:6f:a0:5e:97:36:ab:ba:
d5:64:5b:24:22:16:18:fb:8a:21:af:14:eb:c0:33:06:84:13:
46:6e:cf:99:02:95:95:78:7b:16:e6:12:79:d9:79:fa:71:50:
2d:95:ae:6a:74:22:1b:b1:e8:b0:f3:38:ac:d3:ac:eb:7f:ca:
9d:f3:8a:0c:d4:a6:00:85:9f:d4:3c:78:94:12:8c:3c:1f:25:
bc:e5:91:18:bf:96:83:10:3c:6b:e0:99:e5:28:9a:8f:ab:18:
cc:02:7d:38:98:59:02:d4:dd:d3:a9:7c:35:0e:58:7f:94:e5:
4a:52:a1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 15:04:37 2024 by rpki-client on console-fra.rpki-client.org