Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/KIY4O0-ttyMKsFJMOQgOjFEbhlw.roa
File: KIY4O0-ttyMKsFJMOQgOjFEbhlw.roa (raw, json)
Hash identifier: RyxqLhHfJRLiha+se12IzVkGoI20fWW4pZSVGTSIiso=
Subject key identifier: 28:86:38:3B:4F:AD:B7:23:0A:B0:52:4C:39:08:0E:8C:51:1B:86:5C
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 018E3243C3BB05DF43CF7A7B98EF34917B21
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/KIY4O0-ttyMKsFJMOQgOjFEbhlw.roa
Signing time: Tue 12 Mar 2024 10:44:45 +0000
ROA not before: Tue 12 Mar 2024 10:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 88.151.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:43:c3:bb:05:df:43:cf:7a:7b:98:ef:34:91:7b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Mar 12 10:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2886383b4fadb7230ab0524c39080e8c511b865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6d:7c:25:ae:36:56:af:02:91:b4:26:19:ee:
3e:d1:a6:b1:50:a3:3c:0e:17:02:7d:a8:11:bd:0c:
64:b8:6a:52:c3:b1:f5:42:7c:57:44:c4:a8:19:e6:
03:f9:28:31:99:33:5d:85:25:e2:bd:73:98:cd:a8:
c2:c4:9e:39:22:60:89:b3:75:51:b1:3f:7d:71:34:
6b:9b:4a:df:35:7e:56:5e:41:26:fd:d5:3b:65:1d:
d9:be:bc:d9:b1:74:aa:a2:8c:63:1b:42:3e:4b:da:
bd:2a:8b:34:ba:ee:97:1c:05:67:68:22:6e:61:36:
eb:f3:c2:7a:03:cb:cb:68:1d:88:f8:da:e2:bb:99:
92:f6:83:69:e0:d2:e0:db:97:e2:3d:af:5d:88:21:
5e:5a:90:2f:8c:0d:b1:dd:9a:d6:78:36:b7:09:82:
71:09:b6:cf:4d:20:e1:bc:d0:77:a6:bf:3b:40:fc:
2b:90:51:1e:bf:ff:ac:06:29:60:98:9e:bf:50:25:
9e:05:1c:65:62:d1:7e:d4:fb:e2:7f:38:5d:8b:80:
63:e6:4e:c9:9a:e9:bb:16:fe:e8:93:d9:cd:27:5a:
18:51:72:e6:b7:19:c0:09:96:c5:c4:44:cd:7d:f2:
87:79:d5:15:95:2f:f8:b6:7e:32:4b:a1:2b:ea:8a:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:38:3B:4F:AD:B7:23:0A:B0:52:4C:39:08:0E:8C:51:1B:86:5C
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/KIY4O0-ttyMKsFJMOQgOjFEbhlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e3:27:0e:96:ca:a0:22:4c:2c:68:20:60:7e:dc:32:36:b3:
01:f3:37:83:0b:fa:89:b7:8b:54:bc:71:52:33:75:34:e4:d2:
89:7e:26:31:1f:13:b0:15:e8:26:1d:ca:eb:36:ec:fc:55:55:
70:fe:bd:5b:ca:1b:ff:e2:b5:26:00:36:7f:b7:1f:56:b1:03:
26:ea:ed:f4:5b:c9:ae:c9:35:ca:2b:70:77:88:d7:2c:72:71:
2b:c8:97:bb:4b:87:f9:e1:b1:89:be:e7:cd:2f:8b:5b:58:16:
74:e4:e3:2f:38:f8:06:44:c9:f4:ac:26:14:37:0f:c8:89:f1:
fa:52:73:37:0e:32:cb:96:03:2c:19:7f:3a:5c:0b:34:99:bd:
23:a2:5c:e1:b6:d2:5d:1a:f0:22:ad:a4:a6:3b:63:63:41:e7:
a5:ed:de:dd:66:fc:c3:7b:5b:91:02:3a:9d:0e:6e:14:ce:1b:
b8:64:f2:e5:8e:a0:10:e4:b2:3c:80:79:7c:ca:c1:e3:46:3e:
14:5f:a3:e2:7c:6f:d8:b5:dd:94:a6:a1:fb:09:8c:49:78:33:
1a:65:f2:3b:8d:b9:4a:0e:2a:b1:93:99:db:8a:40:e5:4d:56:
8e:b2:2c:12:a1:c7:80:02:b2:aa:4a:64:2f:91:0a:a5:0f:b0:
d7:66:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:40:58 2024 by rpki-client on console-ams.rpki-client.org