Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9WFgEPTSqxQ1ZWQliGJ6p12RcsU.roa
File: 9WFgEPTSqxQ1ZWQliGJ6p12RcsU.roa (raw, json)
Hash identifier: 2PuBv/5tsKdnbSa3Cfm7RVmUmuoWY7RXyhLDgm3jHaA=
Subject key identifier: F5:61:60:10:F4:D2:AB:14:35:65:64:25:88:62:7A:A7:5D:91:72:C5
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649D67F19057E9C030E6C1CF3B93A3D
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9WFgEPTSqxQ1ZWQliGJ6p12RcsU.roa
Signing time: Mon 01 Jan 2024 18:29:36 +0000
ROA not before: Mon 01 Jan 2024 18:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33825
IP address blocks: 88.203.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d6:7f:19:05:7e:9c:03:0e:6c:1c:f3:b9:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5616010f4d2ab143565642588627aa75d9172c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:df:76:2f:35:b9:ff:fa:65:6a:c6:2a:11:
4d:f3:9d:b2:90:a7:66:eb:d5:e5:4a:fd:a1:a2:bb:
ed:87:8b:dd:23:da:88:3f:84:57:76:3a:21:cf:e5:
81:55:f1:32:b1:3a:c7:a6:70:72:28:12:cb:a6:ea:
6c:fa:df:dd:39:81:10:da:1f:ce:eb:b9:e2:d5:d1:
68:ee:4e:0d:47:59:5a:f2:d0:2e:c1:49:ab:f5:b8:
c8:64:99:62:33:66:1c:c5:91:1c:7e:27:ee:1d:c5:
f2:04:10:b1:b4:88:19:98:76:d4:d8:b8:19:ab:ff:
28:ca:7c:48:4f:b3:e7:f7:dc:ec:1b:36:26:05:dd:
7f:48:7b:e2:0f:e6:d7:fd:9a:d1:86:66:48:1b:d4:
1f:b1:3a:34:f6:3c:de:50:fb:7f:42:e6:73:ca:36:
96:25:ab:5b:11:08:8a:41:1b:17:c2:c8:95:20:41:
8d:a8:b0:dd:07:dd:35:0c:5f:fd:18:52:cc:b3:78:
1d:ce:09:3f:c9:91:e6:8f:c1:16:10:1c:f7:0b:e9:
55:72:a7:0e:ff:92:27:4b:5d:18:88:03:70:75:62:
de:5c:17:14:6d:10:02:84:dd:6f:05:ae:9f:a9:63:
06:f3:dc:3d:05:f7:a0:5e:33:49:43:93:af:71:46:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:60:10:F4:D2:AB:14:35:65:64:25:88:62:7A:A7:5D:91:72:C5
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/9WFgEPTSqxQ1ZWQliGJ6p12RcsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.238.0/24
Signature Algorithm: sha256WithRSAEncryption
73:14:ef:d3:54:05:e1:d7:24:72:2e:87:86:6a:7a:ea:f7:e5:
da:82:63:14:54:89:f3:77:01:20:54:17:b0:09:45:40:d5:78:
d0:e8:82:a5:2c:14:2c:4b:8c:f6:ab:c4:25:8a:78:73:b2:be:
2a:ab:63:7c:1a:4f:72:86:b9:94:00:e2:99:c9:46:07:20:a9:
e6:a0:10:44:14:f4:d7:bd:94:dc:50:06:06:8a:84:95:9b:7f:
ec:b3:b9:8f:a7:21:cb:a1:11:29:8e:bc:86:b3:4e:2e:51:80:
a9:ff:c3:e4:de:4a:6a:27:ac:d4:80:89:59:1b:0c:a8:48:79:
b7:8f:37:a7:7d:2e:ca:66:7d:87:f3:28:cc:d1:b0:c7:68:b8:
b0:ec:39:99:0f:79:10:ea:c9:f8:2e:de:f2:e0:02:4e:b9:f0:
6c:c1:71:fd:ab:a8:ef:f7:a9:b0:81:99:dc:2d:7c:31:3c:32:
27:b9:a6:d8:16:47:9c:fe:22:57:58:35:0e:d6:2b:03:7e:29:
65:d9:4a:9f:0e:d0:a6:2d:87:54:09:40:bc:02:be:73:fd:5a:
56:11:c7:16:1e:5c:2b:bf:92:37:79:59:7f:72:e9:d2:1e:d8:
e7:25:1c:11:07:59:81:d9:e0:b7:bf:4f:de:dd:96:db:54:6c:
41:af:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:28:50 2024 by rpki-client on console-ams.rpki-client.org