Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/66lfYeW1WJqP2rYF6iOuVX68v_I.roa
File: 66lfYeW1WJqP2rYF6iOuVX68v_I.roa (raw, json)
Hash identifier: mmTcjBZ9gayvM2EwkWksKCDqpbwBNcrpAv+IEhgXZzA=
Subject key identifier: EB:A9:5F:61:E5:B5:58:9A:8F:DA:B6:05:EA:23:AE:55:7E:BC:BF:F2
Certificate issuer: /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial: 0192BEFB5C7069B6E0CCE9B54B29BB447D98
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/66lfYeW1WJqP2rYF6iOuVX68v_I.roa
Signing time: Thu 24 Oct 2024 14:43:16 +0000
ROA not before: Thu 24 Oct 2024 14:43:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 88.218.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:fb:5c:70:69:b6:e0:cc:e9:b5:4b:29:bb:44:7d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Validity
Not Before: Oct 24 14:43:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eba95f61e5b5589a8fdab605ea23ae557ebcbff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:95:b9:18:2b:04:ff:ae:3f:c4:a0:74:77:
f7:da:83:d8:65:cc:1f:28:2c:49:bb:2c:64:f1:77:
8f:ad:84:33:28:4d:0d:eb:45:86:ff:f4:75:58:67:
39:56:7b:b7:e4:ad:98:a2:e6:e8:4a:86:bc:2d:9c:
ec:89:1e:c5:ff:ca:6b:82:58:70:aa:e0:6a:97:7c:
ba:1d:ed:5c:2a:d7:b7:19:1a:ad:93:27:8d:5b:31:
2d:38:46:99:1e:ef:5d:0a:ef:e8:86:f1:3b:03:bb:
b1:e5:21:0c:5c:01:f0:1a:7b:47:26:43:97:bc:15:
ed:5d:48:21:a0:b1:71:87:21:3d:43:8a:a7:fd:45:
23:4c:e5:39:f2:0b:00:0d:8b:64:63:07:80:68:a6:
b5:37:63:76:93:fc:56:f9:96:d5:14:7a:0b:1c:3d:
35:f2:5c:6d:48:6a:31:09:96:ba:5a:cb:d0:7f:7a:
56:bc:ee:bc:74:bf:33:82:50:c0:60:17:d4:53:ef:
0f:38:3d:00:06:13:d5:17:1f:83:f7:91:2c:ff:59:
4f:97:1a:bc:8f:d5:33:c9:5f:ee:30:fe:d7:18:ce:
54:4f:11:4c:42:76:79:ca:bd:46:21:5e:06:08:a1:
5f:01:5b:eb:58:af:36:a8:8a:7e:85:43:a4:cf:40:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:5F:61:E5:B5:58:9A:8F:DA:B6:05:EA:23:AE:55:7E:BC:BF:F2
X509v3 Authority Key Identifier:
keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/66lfYeW1WJqP2rYF6iOuVX68v_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.34.0/24
Signature Algorithm: sha256WithRSAEncryption
90:db:8d:9d:f1:a1:51:9c:74:7a:cf:e0:f3:80:0f:14:49:93:
12:e9:27:30:29:69:3f:27:dd:13:71:a2:17:4f:35:6c:4c:7d:
01:6e:2d:e1:42:8a:45:bc:f2:8b:dc:cd:99:4a:89:51:8b:50:
1b:44:bf:6d:e4:f0:93:46:bf:14:5e:ea:50:38:6c:3a:ff:55:
15:53:c6:e9:f7:09:08:94:ba:7b:c8:03:0f:2a:52:30:60:61:
17:5f:5a:6e:2f:f0:99:2c:0d:f1:e4:03:c2:27:e1:34:31:6d:
5e:93:a8:9f:a4:3a:86:fe:2d:d2:9e:46:c7:e8:41:46:40:6e:
49:de:16:d1:f1:0c:34:f7:10:d8:03:1b:33:e9:7c:be:23:46:
bd:3e:1f:17:59:d4:8e:b2:ce:81:6f:26:dd:63:82:a9:10:58:
08:d8:96:a8:89:ff:6d:ba:a7:c2:a4:7f:7d:46:2d:db:cf:c8:
e0:f6:58:25:d2:f5:b2:53:00:52:ec:e8:02:38:30:ba:10:f2:
20:e5:37:34:21:e6:08:14:b2:7e:6f:a0:f6:b5:7b:69:e2:d4:
56:16:4c:18:41:18:1c:08:c6:26:3c:fc:64:df:86:21:e3:74:
ca:08:bf:1f:92:81:a8:ed:16:1b:32:3a:3d:9a:27:f0:14:8a:
e1:5b:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:34:04 2024 by rpki-client on console-fra.rpki-client.org