Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/RSwUtDMmmEuC2LSadgj_rwQWuJc.roa
File: RSwUtDMmmEuC2LSadgj_rwQWuJc.roa (raw, json)
Hash identifier: iQJnURffncSuPlkB8iWGX5ClHdEubRu2QE76ZdOYqAU=
Subject key identifier: 45:2C:14:B4:33:26:98:4B:82:D8:B4:9A:76:08:FF:AF:04:16:B8:97
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 018CC94D8EDFA66C495526ED582A1110404F
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/RSwUtDMmmEuC2LSadgj_rwQWuJc.roa
Signing time: Tue 02 Jan 2024 08:32:32 +0000
ROA not before: Tue 02 Jan 2024 08:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202220
IP address blocks: 188.123.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8e:df:a6:6c:49:55:26:ed:58:2a:11:10:40:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Jan 2 08:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=452c14b43326984b82d8b49a7608ffaf0416b897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:a9:e2:58:5b:19:07:71:03:1d:91:a5:4e:
0b:42:f4:d2:a3:57:a2:7f:22:ef:10:99:26:40:e9:
92:04:98:2b:26:c6:e1:10:bc:e8:14:9d:76:ab:56:
65:c1:ec:73:80:4e:80:85:72:a9:29:4c:1c:c2:36:
5c:a6:44:8d:21:ba:45:02:d9:fa:43:41:37:b4:5e:
e3:60:6d:43:8a:97:5e:35:b4:67:08:df:6b:1a:63:
d4:22:a3:58:7c:1c:42:47:0f:b2:db:d8:ef:0d:ce:
c2:0a:83:4e:4b:fb:fd:82:86:b7:e5:ba:f1:27:9a:
56:7d:85:38:5e:b8:7e:b6:f1:a3:30:5a:25:2b:11:
75:c8:fe:68:9f:01:23:cd:aa:6e:09:ec:d4:70:b9:
47:5d:e7:3b:18:24:3d:1e:c5:2b:ad:89:49:88:84:
a9:d3:7a:c1:9a:16:61:43:b5:82:53:52:53:6c:48:
ec:63:b4:58:ed:fd:44:a0:84:c2:d6:3a:ae:c2:d6:
29:8e:9a:1e:ad:3a:fa:ce:65:eb:1b:2a:91:8e:d3:
1b:26:b5:bb:64:d9:ae:e4:af:5f:ba:63:2e:7a:be:
cf:76:08:2a:8b:0f:42:4b:8f:a1:d7:cf:41:ca:12:
04:5e:64:09:83:b2:51:5f:88:ae:fc:60:80:05:48:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:14:B4:33:26:98:4B:82:D8:B4:9A:76:08:FF:AF:04:16:B8:97
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/RSwUtDMmmEuC2LSadgj_rwQWuJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d1:60:9f:80:55:c7:db:49:20:57:4b:21:f3:0d:dc:af:f8:
67:75:a9:57:9d:81:e5:72:b7:80:df:56:8e:e8:12:36:b0:e5:
74:7e:93:c3:f4:76:b7:c2:67:19:2a:b9:c8:c6:19:5f:ca:47:
4b:b8:ea:0b:c8:4c:dc:03:60:7c:41:ba:a2:cf:7b:ad:67:90:
4e:06:65:e3:d4:1b:f2:1c:d9:fe:04:c1:1f:37:5d:41:89:64:
cc:80:0d:a6:e5:c5:8e:35:3c:7d:06:9a:25:54:90:6e:a7:d9:
a6:66:b7:bc:9c:d8:85:0e:af:85:f2:3c:24:75:6c:13:3f:b0:
3a:2d:a7:ea:77:44:8c:df:09:ae:1f:e2:18:48:32:ba:a7:5d:
6d:1a:1e:69:95:c4:d2:57:8d:55:88:fc:11:dc:25:d5:58:24:
57:e0:52:c1:0c:d0:a8:12:1d:e1:45:58:6d:9a:90:b1:76:f9:
a7:00:47:57:9c:5b:9f:ab:93:66:76:ee:c9:ab:59:e6:72:36:
3c:f9:b2:fe:d6:a6:fd:94:a2:f8:df:4d:2d:f5:83:f2:94:9e:
96:4d:6e:6e:b4:ba:89:d2:83:86:29:78:e7:ef:b5:46:2e:0e:
a4:7e:1a:6f:d4:9a:0d:23:ee:d3:ab:42:79:46:99:c9:f8:6c:
28:c9:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:51:32 2024 by rpki-client on console-ams.rpki-client.org