Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/9aOJ043KFDsIPZUsVH-g99pMaDE.roa
File: 9aOJ043KFDsIPZUsVH-g99pMaDE.roa (raw, json)
Hash identifier: 3jUteN39jKQ8krkIrL48Rzx2zrT8TH54DoKWh0O7GY4=
Subject key identifier: F5:A3:89:D3:8D:CA:14:3B:08:3D:95:2C:54:7F:A0:F7:DA:4C:68:31
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 018CC801B6C6B810A887FD7E5A3C95A186B5
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/9aOJ043KFDsIPZUsVH-g99pMaDE.roa
Signing time: Tue 02 Jan 2024 02:30:04 +0000
ROA not before: Tue 02 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 188.241.63.0/24 maxlen: 24
188.241.62.0/24 maxlen: 24
188.208.141.0/24 maxlen: 24
188.208.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b6:c6:b8:10:a8:87:fd:7e:5a:3c:95:a1:86:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jan 2 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5a389d38dca143b083d952c547fa0f7da4c6831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:fa:91:24:14:12:d1:51:24:f4:ff:ca:ce:
5a:5d:f8:97:1c:a9:19:97:8b:59:84:f1:e1:eb:e0:
27:e4:9b:db:26:1a:18:e5:e8:b3:e1:20:4f:29:f5:
66:1e:b0:0e:78:27:cb:16:97:5d:06:75:0b:bf:ed:
c2:83:25:2a:de:c6:24:d9:b7:16:35:fc:1d:25:5f:
59:0b:6c:2d:53:fa:46:b0:e5:0e:50:b7:59:9b:3d:
dd:fe:7a:fd:86:0c:90:5a:1c:f8:51:2a:6d:f4:9b:
32:a0:91:66:e2:50:a6:4c:92:7b:33:28:49:56:e6:
89:ea:28:f5:f7:10:f6:15:43:3e:bc:25:f7:9e:18:
e2:a2:14:2a:b1:f8:e6:08:9f:f2:f4:0d:84:ff:a1:
b5:4f:10:b5:55:e3:8c:f3:4f:bc:3a:ac:68:aa:00:
f2:a7:aa:78:7b:e4:88:c4:4e:35:b1:28:37:87:1c:
dd:b0:b5:97:ac:e5:41:0f:92:a8:de:04:ed:80:2f:
01:25:1a:3a:9f:80:9e:69:d2:7b:aa:44:b1:7d:05:
06:9e:fd:3f:0b:44:e8:07:f2:54:7a:28:98:0c:96:
e3:28:d2:b3:78:79:50:e8:01:1d:8c:1e:5e:89:9c:
9b:a8:56:da:60:c4:96:16:49:6e:65:a7:c6:09:6c:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:89:D3:8D:CA:14:3B:08:3D:95:2C:54:7F:A0:F7:DA:4C:68:31
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/9aOJ043KFDsIPZUsVH-g99pMaDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.140.0/23
188.241.62.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:03:22:84:1d:73:74:4c:69:50:d2:2b:03:f2:c8:6b:21:32:
7c:b3:ee:d3:a5:7a:dd:96:de:d1:5e:3e:85:10:62:0a:78:fa:
a9:c6:a5:1f:43:bf:71:80:e1:2e:68:28:42:f2:44:c6:ad:d6:
c5:b5:6e:f9:c5:15:6d:7a:8a:91:90:e6:89:f2:04:79:b5:1e:
8f:99:b8:80:e8:0c:6b:0c:be:92:75:52:2a:a5:cd:e6:58:bd:
a7:43:e6:c0:32:4f:1f:dc:7e:dd:1a:b5:70:58:ac:a3:dc:51:
69:80:1a:71:02:18:f7:be:2e:64:38:2d:8c:ef:1b:f2:ab:c0:
ac:d4:34:c8:45:c1:b5:95:aa:b5:8a:78:1f:60:77:24:ec:e1:
c8:89:91:af:c7:65:0e:56:93:08:b2:5e:e4:32:1f:bc:ad:78:
bf:31:ef:08:fb:af:f8:f6:a3:dd:d4:88:0d:b9:fc:06:9b:35:
5c:2e:3d:a8:50:38:b5:f6:78:18:a8:34:11:d2:b7:f5:19:f3:
bf:83:fe:db:94:b6:4d:ec:43:5b:38:1f:83:f7:67:ee:b4:8c:
a6:ed:c4:ca:f3:d9:64:53:52:bb:aa:fe:17:23:e8:a9:73:17:
c1:ab:a2:e5:d2:71:79:01:a4:88:71:e4:5f:38:ab:c3:31:5e:
11:ef:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:43:12 2024 by rpki-client on console-fra.rpki-client.org