Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/TJAXeF4w7zY7ZuQD6XWOgWmNqVM.roa
File: TJAXeF4w7zY7ZuQD6XWOgWmNqVM.roa (raw, json)
Hash identifier: GGmkbtKkpANuKCucnbld/R71j/LUkoU1WGz0TGj6Fw8=
Subject key identifier: 4C:90:17:78:5E:30:EF:36:3B:66:E4:03:E9:75:8E:81:69:8D:A9:53
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018D335E895A933FB4D9E839ACF839A6E9A7
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/TJAXeF4w7zY7ZuQD6XWOgWmNqVM.roa
Signing time: Mon 22 Jan 2024 22:50:50 +0000
ROA not before: Mon 22 Jan 2024 22:50:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140042
IP address blocks: 188.130.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:33:5e:89:5a:93:3f:b4:d9:e8:39:ac:f8:39:a6:e9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 22 22:50:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c9017785e30ef363b66e403e9758e81698da953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:04:14:fd:75:88:70:c7:47:87:c3:c5:0d:
ec:90:3d:60:d6:f2:92:02:50:1b:55:59:25:d0:ec:
8b:bc:71:21:03:97:58:ec:ff:de:d3:ef:1d:1c:90:
92:cc:8b:47:97:42:b5:9e:f8:eb:7d:b7:a0:a6:0a:
ea:3e:97:a0:1b:97:0d:5f:b7:7b:37:e3:6d:b8:c9:
10:b3:90:56:2c:17:ab:1d:63:03:56:3c:b9:f0:97:
6e:4c:10:2a:9e:30:71:0e:93:07:3b:a6:b2:0e:08:
7a:4e:2b:af:08:54:44:1f:77:23:ad:ee:f5:88:71:
a0:1a:76:d9:4a:60:f6:ba:47:26:ac:66:b6:22:97:
cd:c9:48:88:92:e5:79:93:48:f2:bb:53:4d:66:b0:
04:8d:af:54:d2:f9:81:12:d9:14:bc:b2:bc:c7:2c:
3d:ac:2f:cd:d3:ea:20:61:54:9c:5c:93:c4:46:40:
ca:04:69:73:f8:98:09:e3:60:ca:4c:71:11:dc:95:
3b:38:85:db:ea:a0:30:90:26:8c:c9:c6:72:79:0f:
49:52:58:59:2f:b0:93:0a:6b:a1:db:0b:20:2d:f7:
93:1c:c2:70:be:e2:62:59:bc:d1:67:27:b3:37:03:
48:1c:b1:6d:71:e8:3f:91:08:ad:e1:4d:7b:3c:79:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:17:78:5E:30:EF:36:3B:66:E4:03:E9:75:8E:81:69:8D:A9:53
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/TJAXeF4w7zY7ZuQD6XWOgWmNqVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.231.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f1:36:a1:d7:09:74:5c:45:20:14:ee:34:c5:f9:77:47:45:
a5:21:37:50:ad:6e:28:38:c5:9f:db:a0:7d:84:0a:0f:f4:67:
bf:09:d3:aa:e1:fe:01:8f:ed:0e:1e:94:89:99:a4:1f:cd:46:
b8:a1:85:8f:e5:48:c3:0e:0f:05:9b:2e:f4:5d:78:76:58:0d:
52:f6:c1:ad:e4:20:c8:39:be:d4:a5:12:3e:72:4b:9e:48:7e:
b5:ee:b0:b9:78:8c:a7:6d:ca:25:1e:27:2b:85:b4:b0:b5:9d:
d0:a0:05:b7:df:bd:b4:1e:e0:30:c6:a5:4e:34:1e:73:66:5c:
8d:8a:7c:1d:a6:68:04:03:87:7b:cd:fd:f6:58:c7:1c:64:f8:
22:31:d6:4e:4a:76:26:81:34:9a:db:37:4c:92:21:8d:4f:c6:
0a:73:2c:04:ba:b0:65:08:32:4e:21:fa:4a:f0:29:42:78:b8:
0f:d7:09:85:86:83:57:48:01:97:8e:3a:63:7a:5d:9d:ee:a7:
04:55:3c:1f:5c:ca:58:a7:58:1d:d3:fe:21:e4:e4:c6:cd:43:
bc:a4:72:2b:1d:02:d9:5a:35:5e:be:f5:00:a2:ce:6e:c3:36:
1f:f1:e5:e2:24:b0:df:f1:fb:aa:61:0d:c2:a0:63:14:d2:ed:
1d:82:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:18 2024 by rpki-client on console-fra.rpki-client.org