Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/38LtZDx4tZ7h5z3dpOVKxGE1Uy4.roa
File: 38LtZDx4tZ7h5z3dpOVKxGE1Uy4.roa (raw, json)
Hash identifier: COn9nYmZjUs7qC7jYUmpipNNy4Pe3NOFBGNXK2III+0=
Subject key identifier: DF:C2:ED:64:3C:78:B5:9E:E1:E7:3D:DD:A4:E5:4A:C4:61:35:53:2E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D27B60024A613846CC3CEE79BC36F
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/38LtZDx4tZ7h5z3dpOVKxGE1Uy4.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57403
IP address blocks: 188.241.240.0/24 maxlen: 24
188.241.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:27:b6:00:24:a6:13:84:6c:c3:ce:e7:9b:c3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfc2ed643c78b59ee1e73ddda4e54ac46135532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:ff:2f:99:f8:f4:13:32:61:7b:49:7b:1f:
f6:38:92:1b:8c:8f:fb:bf:60:9c:15:9a:bd:65:8d:
59:82:ba:ab:37:fb:79:ff:3b:fa:02:2f:26:fa:aa:
de:cc:75:aa:2c:9a:6b:d2:40:12:b0:39:c9:7d:d4:
fd:46:37:5a:21:98:2b:bc:a0:1a:8e:09:1c:6b:7b:
6e:a8:bd:8a:2f:d3:d0:4a:73:8d:50:cb:64:07:c0:
68:cb:a6:ee:bf:0b:18:cb:a2:b4:1f:93:78:3e:ec:
b7:5a:80:82:88:b6:85:2e:88:7a:f7:0a:d9:e3:d2:
73:9b:43:d1:86:2a:cd:74:ba:a8:aa:be:7f:f7:6c:
eb:6f:95:f7:1a:e7:cc:8a:7c:43:22:d6:ec:0c:73:
7d:e5:10:54:d5:c9:a3:5e:2c:4b:f9:73:39:d3:78:
ad:a1:e3:df:d8:68:e7:57:5d:eb:3f:5a:fa:3b:83:
2c:b0:a5:86:87:ab:46:81:83:86:a3:87:6f:7b:6a:
42:99:b8:d1:ac:b2:89:c9:6b:02:12:7a:05:15:54:
11:5d:2e:cc:b3:fb:f9:f2:59:a7:74:ad:1f:85:44:
14:4d:93:5a:61:f4:b3:5d:14:cb:19:fa:ea:14:95:
8f:6f:a8:e8:bb:4e:77:3e:88:c0:04:9b:ca:18:f6:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C2:ED:64:3C:78:B5:9E:E1:E7:3D:DD:A4:E5:4A:C4:61:35:53:2E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/38LtZDx4tZ7h5z3dpOVKxGE1Uy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.240.0/23
Signature Algorithm: sha256WithRSAEncryption
78:83:f7:ea:71:50:db:e9:5e:7f:5c:41:da:95:53:7a:58:7c:
18:56:00:8c:30:f2:6e:8f:05:5f:78:c6:32:84:66:80:0d:a0:
0e:6d:4d:06:03:71:75:b3:9a:b8:55:6e:75:d2:44:5b:b1:7d:
9a:b8:9e:03:87:f6:27:bd:71:c5:02:de:1a:5c:3f:3b:e5:f9:
02:b6:99:ce:c6:be:90:a2:4e:83:45:9f:e7:5e:59:8d:90:28:
a1:cd:16:68:30:4f:c5:13:88:6b:13:92:2c:27:6a:f8:36:86:
0b:cc:d8:29:51:df:e8:93:f6:08:12:60:bd:f2:7a:c3:de:b1:
e9:25:2d:ee:d8:b7:c5:d6:55:b9:ad:a7:60:8b:ce:59:01:19:
ac:93:ed:d3:38:6a:ec:33:75:d7:22:b7:65:6a:56:8e:8e:ae:
93:4f:2f:33:d4:8d:00:19:84:bc:97:70:62:01:24:1a:4f:28:
cf:71:a2:6c:8d:4d:3d:47:45:7b:13:0f:e5:79:2c:7a:ad:eb:
97:a0:13:d0:0e:1a:57:3b:8f:4f:a1:32:ce:f1:0c:62:6f:05:
5a:89:22:29:cd:3f:94:14:7e:20:99:7c:4e:63:13:33:69:11:
86:16:97:5e:1b:13:2a:f4:fa:31:57:ef:50:82:4a:6b:c7:ef:
8d:bf:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:35 2024 by rpki-client on console-fra.rpki-client.org