Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/u4awNQpZQiwWJzbtSZYtsKyAFko.roa
File: u4awNQpZQiwWJzbtSZYtsKyAFko.roa (raw, json)
Hash identifier: /18DmacthD3MzpNmYdLGmgxV55gbyWg5PxnCn5m7bb4=
Subject key identifier: BB:86:B0:35:0A:59:42:2C:16:27:36:ED:49:96:2D:B0:AC:80:16:4A
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802D1B346C5F274FD6F02EA6FEA08D8
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/u4awNQpZQiwWJzbtSZYtsKyAFko.roa
Signing time: Tue 02 Jan 2024 02:31:17 +0000
ROA not before: Tue 02 Jan 2024 02:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213240
IP address blocks: 188.215.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d1:b3:46:c5:f2:74:fd:6f:02:ea:6f:ea:08:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb86b0350a59422c162736ed49962db0ac80164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:9c:91:d4:df:67:43:6b:2d:17:61:69:a0:
b6:44:ca:17:99:d7:08:d6:20:c7:45:f4:c8:7c:45:
4d:10:5a:fd:71:00:87:40:ba:5e:9a:2d:2d:e1:0b:
d1:16:f6:cf:94:25:70:be:bb:a1:59:cd:e5:5b:59:
82:a7:29:03:72:39:cd:35:b4:31:53:34:c5:aa:89:
f6:90:86:a3:1f:9c:62:54:ce:8e:0d:e3:2a:89:2a:
7c:df:d7:09:0c:55:47:e1:45:bd:cd:71:05:cc:56:
61:b1:fc:81:fd:f4:ca:0c:d5:78:e6:06:28:e8:2f:
b3:08:23:82:d0:95:6c:55:c5:c7:ad:33:ce:3c:8d:
37:1e:95:f7:c1:29:cc:12:d4:bb:03:f0:20:1d:c2:
14:2c:47:83:a4:d1:7e:96:b5:bb:7a:4a:be:cd:fb:
3c:a1:b5:8c:8d:b4:a5:9d:09:c6:ec:ab:6f:98:ab:
cf:30:9e:e9:10:13:e0:23:89:de:36:8b:8b:7e:af:
8b:6d:ef:11:03:c9:43:d4:92:79:a0:da:be:eb:81:
fc:c6:f4:b4:6b:c3:e7:37:8e:9c:7e:49:f8:cb:d2:
d6:ad:f8:f5:d7:34:a5:44:10:42:a6:3e:fc:55:cd:
b0:3c:50:6f:6f:24:a7:7a:cf:45:d9:24:0a:58:d2:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:B0:35:0A:59:42:2C:16:27:36:ED:49:96:2D:B0:AC:80:16:4A
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/u4awNQpZQiwWJzbtSZYtsKyAFko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f6:aa:60:13:5f:ef:36:18:4f:b6:20:5f:8b:3f:77:05:90:
ea:94:69:79:71:98:e0:09:47:fc:5c:5b:6f:50:8a:ce:fb:72:
84:51:06:a6:7a:34:49:1d:be:ca:f7:99:7d:b4:5a:62:4d:85:
a4:8c:5d:cf:c3:3a:f6:5e:45:f9:3b:99:49:49:db:16:b6:7b:
67:34:d4:5c:9a:18:05:72:a1:02:51:1d:20:09:b7:0b:16:9e:
28:25:ab:4d:92:a7:ad:b4:4c:b0:b3:4a:15:7c:05:a7:b3:07:
63:d3:f2:7b:f3:f0:c6:46:7a:4f:e0:a3:6b:20:c0:a2:a9:04:
ac:38:d9:35:f6:07:02:34:53:56:c4:eb:4b:14:ca:52:82:c7:
00:31:d6:cc:f8:55:cb:8e:3d:d9:a2:d6:90:1b:84:2c:bd:44:
7c:01:5d:e0:08:4f:3c:9c:cf:9f:e9:5d:16:5c:d8:56:af:6e:
56:5d:b1:ee:4c:c4:4b:61:cf:fb:e2:86:90:c7:cf:76:83:7e:
25:b5:b8:17:28:c9:df:91:34:a6:59:7f:a2:36:ea:3d:14:6f:
0f:47:15:a0:07:62:dd:f5:c5:03:5f:df:32:a3:f8:c4:3c:be:
a7:dc:ef:aa:60:6f:66:c6:6e:72:a9:53:54:03:05:60:3a:61:
9e:5e:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org