Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/05K1cQvbrJIg1duqgokCfFe7oww.roa
File: 05K1cQvbrJIg1duqgokCfFe7oww.roa (raw, json)
Hash identifier: GXOG4Vba0ses+/HOddlBb7vjvh0yzjZ3uuv3WiZKQ8E=
Subject key identifier: D3:92:B5:71:0B:DB:AC:92:20:D5:DB:AA:82:89:02:7C:57:BB:A3:0C
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802C983FA608C6471CB930B51AE2605
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/05K1cQvbrJIg1duqgokCfFe7oww.roa
Signing time: Tue 02 Jan 2024 02:31:15 +0000
ROA not before: Tue 02 Jan 2024 02:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47134
IP address blocks: 188.213.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:c9:83:fa:60:8c:64:71:cb:93:0b:51:ae:26:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d392b5710bdbac9220d5dbaa8289027c57bba30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:98:53:22:d3:52:11:12:e0:f6:ea:96:34:5e:
87:07:d1:f3:c2:78:e9:b6:06:13:88:b2:8d:68:7d:
74:3e:d8:05:93:4c:7d:e2:f8:0a:e9:79:27:a8:54:
57:85:55:f0:a7:c0:c7:bf:16:53:e7:80:66:da:21:
a7:3e:d3:cc:aa:02:1d:d4:d2:ec:81:a2:3e:57:29:
8e:e4:ec:7e:55:13:db:84:cb:f6:ed:b3:66:80:fd:
ea:b6:da:70:65:e7:fa:eb:c8:85:ff:e5:7f:8c:28:
cc:50:2c:d7:19:be:f3:1e:09:c6:5f:fb:23:66:dd:
1f:88:84:2f:93:bf:4f:b2:a8:2b:92:7d:a9:b2:f9:
a8:4b:05:a5:48:2d:45:ed:c3:49:d4:c8:02:a4:7e:
e0:82:3d:04:72:5f:93:f4:0d:24:ba:83:13:a1:3f:
5c:2e:f3:8d:30:92:06:45:d3:6f:30:cb:7d:db:02:
e3:cb:30:98:fe:b1:e6:59:7c:1c:44:76:4e:60:2d:
70:01:7b:2e:02:51:04:b0:6a:7c:67:cc:dd:51:35:
f3:5f:af:57:8a:b9:a3:17:0c:98:88:d7:25:89:4c:
71:91:f6:62:a1:fc:e5:77:a7:db:8a:29:23:d7:eb:
c9:fd:1a:0c:98:a4:c6:30:74:e3:be:a4:52:ab:30:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:92:B5:71:0B:DB:AC:92:20:D5:DB:AA:82:89:02:7C:57:BB:A3:0C
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/05K1cQvbrJIg1duqgokCfFe7oww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a9:ed:85:22:c8:1c:f0:b5:e1:1d:ba:8a:d8:cb:3e:fc:66:
c9:4c:bd:0b:32:e4:ea:e3:12:64:55:5c:46:ec:5b:b8:4b:61:
ba:b2:7a:8c:e8:df:3d:e0:97:55:2a:70:a0:b1:b0:5d:98:7a:
d4:84:a3:76:5e:c8:74:0c:79:e0:53:46:01:2b:95:4c:10:0c:
c7:0a:20:f8:b1:15:1c:a2:c9:d0:06:3f:57:1d:d0:c8:6f:5d:
cc:5d:be:e0:04:5c:82:e1:0d:0d:26:57:a1:ff:5f:8c:09:5d:
90:82:72:37:d9:d4:7d:6b:24:be:7d:62:d7:16:8f:2d:d3:7b:
8e:68:20:c2:21:8e:77:65:23:0b:40:64:35:b1:19:f0:79:50:
fb:ee:9f:54:ee:5b:21:da:6a:08:47:b7:19:32:49:b2:06:be:
a8:72:e0:21:e7:bc:38:9f:ea:dc:2c:bd:ae:56:eb:ed:6f:bf:
49:25:a0:ac:7b:38:82:ba:c4:79:21:9f:d2:86:12:05:1a:1d:
97:d4:3a:a4:44:de:f0:33:a2:47:47:af:09:3f:78:d8:4d:f0:
e4:74:0c:0e:29:7a:18:57:e5:a1:78:38:82:0a:82:bc:8f:68:
a8:21:8c:c3:60:db:d0:90:cb:d7:00:e5:00:3e:a5:3a:50:89:
d6:6c:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org