Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/ClntGGdH9e90WUe_f-sXHU1WpfI.roa
File: ClntGGdH9e90WUe_f-sXHU1WpfI.roa (raw, json)
Hash identifier: /Xfa8fZph6rDALLRbHuQiV9pM6Mk6nhtGXLYE4Z8LBU=
Subject key identifier: 0A:59:ED:18:67:47:F5:EF:74:59:47:BF:7F:EB:17:1D:4D:56:A5:F2
Certificate issuer: /CN=040c6423e980b289765aad924235f46d2e20c01c
Certificate serial: 018CC492548C8ACC961CAA89480AF93859D3
Authority key identifier: 04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/ClntGGdH9e90WUe_f-sXHU1WpfI.roa
Signing time: Mon 01 Jan 2024 10:29:33 +0000
ROA not before: Mon 01 Jan 2024 10:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216148
IP address blocks: 84.38.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:54:8c:8a:cc:96:1c:aa:89:48:0a:f9:38:59:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6423e980b289765aad924235f46d2e20c01c
Validity
Not Before: Jan 1 10:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a59ed186747f5ef745947bf7feb171d4d56a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:48:60:be:9c:71:7e:2e:2f:f4:2b:ea:72:
86:15:fa:3d:8b:5d:03:13:98:15:8f:5a:2d:8f:b2:
ca:a3:77:aa:63:08:ab:5b:e1:ff:b0:96:50:f3:75:
fd:15:5f:28:b9:ca:73:5f:4c:37:5c:74:01:9f:d2:
ae:4c:4b:95:86:6b:6a:95:fa:f1:3d:6a:60:8b:53:
8a:f6:cc:19:95:9d:9d:96:e4:80:0a:c9:f1:8d:e1:
3c:f0:8c:67:bb:4d:34:e9:8a:ba:c0:bd:47:f2:c3:
b9:10:b8:ed:9d:83:8d:85:29:73:d0:4a:a4:6f:50:
35:2a:d6:07:79:a8:2c:6d:9f:a4:4c:f6:51:51:88:
3f:bc:10:28:ea:ed:ef:c2:c0:33:5f:48:b0:48:d7:
74:fd:7f:24:a0:79:80:83:2d:8e:53:b2:96:c2:48:
77:72:38:01:be:db:e1:4c:3e:66:8f:19:00:1f:e1:
dd:4e:81:ca:85:01:9c:cf:22:1f:f8:e2:36:66:76:
d8:55:86:b7:73:01:e8:32:53:15:e7:c8:89:a7:66:
3b:91:aa:a2:7f:53:a1:b6:15:2a:d2:78:ac:8a:b9:
0d:94:9b:6e:68:57:85:1c:4d:91:de:4d:9a:fd:ba:
fa:3a:11:b7:38:aa:c2:67:8b:cc:e3:21:f7:ba:72:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:ED:18:67:47:F5:EF:74:59:47:BF:7F:EB:17:1D:4D:56:A5:F2
X509v3 Authority Key Identifier:
keyid:04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/ClntGGdH9e90WUe_f-sXHU1WpfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.250.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fc:2b:df:ae:a1:2b:04:ec:ee:22:39:4d:3f:fa:93:51:96:
e6:84:ee:d3:dd:0c:7e:15:3e:93:db:a4:48:b7:a9:21:be:9d:
9f:c5:07:cf:45:85:8c:68:07:a8:cb:83:0f:91:3b:ad:0c:1f:
25:a5:e8:51:aa:b2:25:aa:2a:7f:94:57:cd:b4:69:13:e8:08:
0a:e7:53:9a:4a:b4:54:63:da:b1:7f:6f:41:71:49:7e:b3:18:
8e:ce:3e:9c:d0:4d:91:84:e9:bb:61:77:9c:b3:c7:b7:9b:2b:
8a:6d:c1:cc:fc:7d:d3:af:b5:22:93:96:a2:c7:f7:49:49:a9:
6a:15:39:a0:c1:6b:b1:e6:c3:63:66:2a:27:f5:05:1d:76:44:
85:31:ae:78:e4:e9:ce:07:33:e6:fc:a8:e9:db:e4:b9:a6:46:
d5:f0:01:24:16:8c:0b:de:ae:29:e0:ef:9f:f5:b5:df:b5:59:
48:88:28:89:24:ec:05:6d:3d:11:d6:5b:58:67:f4:07:b0:82:
ce:39:d8:56:66:32:e2:de:e3:b5:ca:fb:71:dc:c8:cf:10:62:
cb:6b:5f:28:5b:54:bc:81:16:6b:38:cc:3d:e9:f9:16:55:65:
4e:63:ad:7a:a6:06:b4:60:3f:77:92:97:e8:25:be:fc:ce:34:
01:ea:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:21:11 2024 by rpki-client on console-fra.rpki-client.org