Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/LCa3IOw6z1n0xZiYTQBcO5flwak.roa
File: LCa3IOw6z1n0xZiYTQBcO5flwak.roa (raw, json)
Hash identifier: LaPevF3oBS8u0aRlL/NjzIZaULXf1rPhmuhptA8csIk=
Subject key identifier: 2C:26:B7:20:EC:3A:CF:59:F4:C5:98:98:4D:00:5C:3B:97:E5:C1:A9
Certificate issuer: /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial: 018CC6B8CC3649A81090A810BDDCD436C185
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/LCa3IOw6z1n0xZiYTQBcO5flwak.roa
Signing time: Mon 01 Jan 2024 20:30:48 +0000
ROA not before: Mon 01 Jan 2024 20:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208294
IP address blocks: 88.218.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:cc:36:49:a8:10:90:a8:10:bd:dc:d4:36:c1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Validity
Not Before: Jan 1 20:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c26b720ec3acf59f4c598984d005c3b97e5c1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:e7:1b:b1:5f:7a:92:b3:b7:69:3f:03:3e:
8d:75:85:1d:fb:b6:e4:50:7f:2a:83:da:81:45:78:
8c:35:37:c0:e5:ad:c6:44:c1:80:18:5a:70:09:65:
3a:ac:2a:bf:f0:7a:82:bb:c2:55:66:2f:56:1b:20:
5a:16:cd:de:db:28:cf:4d:98:e1:2f:fa:a6:31:56:
e2:25:5a:a3:98:d8:bb:75:22:aa:ed:41:78:5f:98:
e3:85:02:bc:bb:da:52:ed:09:67:73:b7:df:ab:9d:
fb:e6:fe:d0:8e:62:3c:c8:b0:14:5e:3f:fe:8e:8b:
5b:69:e9:3f:72:9e:ab:ea:d3:dd:1c:c1:92:9f:d8:
c2:e4:32:30:e7:a7:cf:46:aa:14:f8:9f:29:51:56:
26:1f:00:2e:5e:5a:78:1f:08:d0:c4:32:91:d9:0c:
d0:09:5f:64:a3:cf:e4:7d:c4:01:2e:19:d9:23:41:
c4:22:a8:91:f4:5d:47:48:58:8a:60:97:e9:00:79:
f7:55:be:82:d0:11:95:ed:69:5e:e4:59:b5:6e:88:
c1:57:0f:9b:99:8a:17:e1:31:29:a8:05:ec:22:17:
43:b1:13:ca:08:36:33:bf:fb:fd:23:8b:73:65:cd:
e8:53:5e:51:d4:8d:66:d5:bd:b2:52:48:1b:d7:92:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:B7:20:EC:3A:CF:59:F4:C5:98:98:4D:00:5C:3B:97:E5:C1:A9
X509v3 Authority Key Identifier:
keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/LCa3IOw6z1n0xZiYTQBcO5flwak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.34.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5c:59:fa:6e:49:8f:59:e9:cc:f8:80:bb:78:a4:e3:4a:16:
2b:94:f3:d5:61:1d:a4:55:5e:35:24:7b:f1:0e:e6:5a:66:45:
5e:ac:d1:a9:27:3a:56:61:ee:68:48:45:53:f8:06:cb:e6:30:
b4:9e:af:2e:80:0b:c3:10:2a:5d:9b:33:cd:91:ed:67:0e:85:
73:00:9a:5f:13:3c:10:6e:9c:25:c9:a3:cb:c6:38:30:de:7b:
81:84:a8:25:04:12:f1:be:ff:4c:f0:58:2e:e8:69:66:4f:02:
17:bc:14:90:1e:8e:14:d3:f7:b6:1c:37:01:8b:7a:22:a8:45:
28:11:5c:00:0e:3c:17:60:c7:30:60:8d:fe:15:96:06:5e:b8:
ce:d0:b1:41:99:b5:10:a2:72:13:b9:c9:67:0f:8e:56:4e:48:
c4:2a:6e:a9:82:45:1e:80:11:fc:19:ca:50:1e:4c:e6:b8:4f:
92:b2:48:3c:7b:15:12:20:96:c2:30:96:00:02:1d:4c:4c:66:
dc:d2:63:97:9d:b5:2d:59:5c:c7:a2:ba:ee:a0:63:4e:fe:e8:
e2:74:b9:a9:90:75:c0:b9:75:d8:7f:90:28:b1:83:f1:bf:5e:
67:5b:bd:02:44:ce:d2:08:8d:a0:4d:6f:d7:f3:37:a9:98:d9:
14:95:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:50:59 2024 by rpki-client on console-ams.rpki-client.org