Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/PX0yUGEA4qDAdwKpnrzI18E7qNM.roa
File: PX0yUGEA4qDAdwKpnrzI18E7qNM.roa (raw, json)
Hash identifier: asFRjRlqcoQdGpJd7/QsV4RSKqHbxHckB8UPPcnaVh8=
Subject key identifier: 3D:7D:32:50:61:00:E2:A0:C0:77:02:A9:9E:BC:C8:D7:C1:3B:A8:D3
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 018CC86F1D745CC8D60D28FF0E8F887C6D79
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/PX0yUGEA4qDAdwKpnrzI18E7qNM.roa
Signing time: Tue 02 Jan 2024 04:29:34 +0000
ROA not before: Tue 02 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202468
IP address blocks: 188.213.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1d:74:5c:c8:d6:0d:28:ff:0e:8f:88:7c:6d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 2 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d7d32506100e2a0c07702a99ebcc8d7c13ba8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:34:e7:cc:d9:22:ed:7f:70:1b:44:1e:6d:
e3:75:ca:e0:1f:04:fa:2e:c7:35:bb:e0:09:c7:5e:
b7:c3:30:b7:8e:90:c7:1f:5d:29:bd:a1:dc:7a:23:
9b:50:13:1d:b0:e6:0b:c0:22:6d:bd:c3:45:ee:13:
fb:d9:f2:bf:4e:c9:54:0d:a8:20:d0:0a:8e:a4:32:
a9:79:7a:cf:66:02:dd:b1:b0:76:77:c4:49:2f:48:
b8:b1:b8:9d:05:5a:7d:ea:03:b7:cd:40:d1:9d:64:
d7:6d:45:2f:be:2e:3b:e7:7d:1b:e2:08:8e:03:a4:
bc:30:ab:16:8f:db:68:46:8f:f3:a5:9c:07:5b:6a:
c2:1d:3f:d9:75:6a:0d:22:88:d9:dc:33:2c:7a:0f:
9b:cf:b4:e5:56:ea:89:f0:39:0d:90:eb:6e:12:8f:
a5:4f:fa:5e:23:86:ad:ae:bb:a9:a8:f0:85:99:f3:
28:56:d8:5e:be:a2:31:1d:ef:5f:8b:c6:31:30:fb:
b9:51:4b:87:f3:39:42:b9:c0:e7:4d:38:45:52:d5:
69:69:f3:4b:cf:81:ee:50:94:4b:34:d3:2f:57:68:
3c:2d:9e:0e:78:54:db:60:a1:56:c2:46:e7:cc:10:
cc:e4:6b:46:f6:6a:44:99:2d:d5:a5:fa:f7:cb:e3:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7D:32:50:61:00:E2:A0:C0:77:02:A9:9E:BC:C8:D7:C1:3B:A8:D3
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/PX0yUGEA4qDAdwKpnrzI18E7qNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.196.0/22
Signature Algorithm: sha256WithRSAEncryption
20:1a:72:28:69:9c:60:a1:35:11:3d:9c:99:bc:99:73:db:77:
a6:e6:a3:1f:38:96:bb:1d:1a:dd:90:e3:d3:3b:40:3c:62:46:
2d:39:22:92:d4:54:e6:c2:41:f1:04:1d:6c:b0:61:11:76:a4:
7a:38:b8:7d:92:af:a5:c1:60:11:57:87:22:ee:2e:04:c0:11:
1c:49:1c:e2:80:f1:66:8c:6d:0c:35:7e:e9:4c:29:fc:e6:11:
36:4d:57:09:c2:5d:4a:7d:6e:9b:0c:73:01:c4:08:de:5e:ca:
ba:90:96:11:d2:78:86:7a:6a:f4:3d:d6:c0:08:f9:77:53:4c:
27:b3:0e:bf:e2:c9:35:fb:83:52:f8:87:a6:3d:a5:e2:f2:c3:
3b:e9:92:79:6c:3e:13:25:e8:de:08:84:1b:03:41:76:84:cc:
58:b8:cb:29:b9:51:83:37:3c:98:8d:67:53:bc:10:d4:e5:d3:
ec:91:a1:41:38:54:4f:21:59:b9:1c:cf:11:fb:23:f5:b7:a6:
71:e3:27:80:88:a6:9c:43:43:7c:70:72:a1:40:dc:3b:75:55:
3c:08:61:a0:0b:29:8c:db:8c:d4:b5:d0:1a:ec:26:35:98:36:
d2:c5:c8:b6:5b:80:29:83:f4:3c:48:7f:80:fb:81:bb:b3:e7:
03:b3:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:30:48 2024 by rpki-client on console-fra.rpki-client.org