Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/c-UNxzPvLet_ZOW278lGUkCozmY.roa
File: c-UNxzPvLet_ZOW278lGUkCozmY.roa (raw, json)
Hash identifier: 7rQpEjO1aiBdLo36HwAfeI9pOCdybzm5yTyKYAqs0mI=
Subject key identifier: 73:E5:0D:C7:33:EF:2D:EB:7F:64:E5:B6:EF:C9:46:52:40:A8:CE:66
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 018CC3B719599FDBA2B07CD110EB9B1B9229
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/c-UNxzPvLet_ZOW278lGUkCozmY.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29014
IP address blocks: 88.205.24.0/22 maxlen: 24
88.205.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:19:59:9f:db:a2:b0:7c:d1:10:eb:9b:1b:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73e50dc733ef2deb7f64e5b6efc9465240a8ce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:13:06:f7:12:07:ab:3a:a0:f9:76:f1:1a:
06:2b:24:2b:01:ae:72:3a:36:33:d0:0c:08:3b:04:
1a:26:39:1d:b8:4d:f7:a9:6e:d2:d3:59:e2:78:f7:
0e:f6:68:5f:36:68:70:52:7e:23:3a:b3:1b:99:39:
2a:4c:2e:88:f1:12:66:f5:04:8a:5e:1d:0c:b6:9d:
14:5c:74:0a:6e:af:59:96:34:60:ea:c7:03:ac:33:
e1:3f:2e:33:62:7d:95:0e:e0:47:8d:f5:3d:58:55:
c8:10:1b:e7:0b:17:3d:ba:81:0a:d4:0f:2d:d8:18:
68:04:75:f5:d0:22:43:6a:29:36:45:14:6f:77:8e:
f5:6a:81:e8:46:89:d6:60:ef:29:09:eb:68:cd:42:
04:32:55:60:61:e9:70:6d:c8:9d:b6:65:df:b6:70:
4e:14:d8:d4:88:c4:0a:34:57:46:be:4b:55:a0:75:
d6:f2:77:33:d4:e0:54:6f:b2:d3:e6:fe:51:e5:fb:
1f:91:89:dc:e7:0a:1b:3c:06:a0:41:65:28:1a:35:
e9:fa:ab:7c:25:96:20:e2:43:ac:b7:a3:b0:88:62:
97:d3:b5:a1:2e:03:2c:d8:57:57:1c:90:83:8e:30:
3b:5a:f6:1d:cd:75:da:8b:44:4a:2a:94:74:c5:4b:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E5:0D:C7:33:EF:2D:EB:7F:64:E5:B6:EF:C9:46:52:40:A8:CE:66
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/c-UNxzPvLet_ZOW278lGUkCozmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.24.0/21
Signature Algorithm: sha256WithRSAEncryption
96:c0:67:b6:d9:9e:4f:ef:74:98:8d:57:ca:8a:43:fe:45:4b:
c3:fb:76:32:75:7c:60:a1:aa:00:a4:98:34:e1:eb:56:3b:ad:
92:8c:c5:57:b3:78:e8:43:05:d4:fd:99:e4:64:5b:ad:7f:c3:
53:ad:41:44:92:85:b6:94:dc:71:8b:4e:44:b6:0b:28:0c:f1:
96:44:56:32:ad:33:28:13:0d:6b:8b:b6:40:3f:b4:fd:ba:12:
30:da:c2:93:ab:89:04:d4:57:c5:0a:80:b5:16:6c:ea:50:91:
6e:42:11:f9:a5:bb:53:10:30:77:93:54:69:84:3f:a6:59:2f:
f4:3b:95:48:81:27:50:ad:b6:f5:cc:3a:ac:50:28:83:d5:7c:
35:9f:18:7a:4d:a3:ad:8f:d2:c6:1d:bf:3a:83:f6:cc:24:8f:
15:12:32:2d:29:d8:18:6b:67:91:1a:33:94:20:f6:84:a6:52:
5c:e2:fc:56:54:70:36:04:8c:1e:25:bb:9a:5c:16:de:c4:0c:
8a:73:30:df:89:b8:41:13:fc:45:c2:bc:e7:eb:c7:f2:43:a1:
c1:c9:98:d1:24:db:2b:4d:7b:a3:6c:ce:21:d9:c2:b2:cf:1a:
d4:8e:84:23:68:53:a0:04:f6:ba:be:32:da:70:1a:39:10:45:
c8:70:ef:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtxlZn9uisHzREOubG5IpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNjhkNjk5ZDFhOTQ1N2M3OGFjZmJlYzAwNGY5ODY3N2Fh
NGNjMTYwHhcNMjQwMTAxMDYzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2U1MGRjNzMzZWYyZGViN2Y2NGU1YjZlZmM5NDY1MjQwYThjZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOwTBvcSB6s6oPl28RoGKyQrAa5y
OjYz0AwIOwQaJjkduE33qW7S01niePcO9mhfNmhwUn4jOrMbmTkqTC6I8RJm9QSK
Xh0Mtp0UXHQKbq9ZljRg6scDrDPhPy4zYn2VDuBHjfU9WFXIEBvnCxc9uoEK1A8t
2BhoBHX10CJDaik2RRRvd471aoHoRonWYO8pCetozUIEMlVgYelwbcidtmXftnBO
FNjUiMQKNFdGvktVoHXW8ncz1OBUb7LT5v5R5fsfkYnc5wobPAagQWUoGjXp+qt8
JZYg4kOst6OwiGKX07WhLgMs2FdXHJCDjjA7WvYdzXXai0RKKpR0xUtuYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHPlDccz7y3rf2Tltu/JRlJAqM5mMB8GA1UdIwQY
MBaAFFpo1pnRqUV8eKz77ABPmGd6pMwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMt
MGFlZTM2MGIwYmE0LzEvYy1VTnh6UHZMZXRfWk9XMjc4bEdVa0Nvem1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMtMGFlZTM2MGIwYmE0
LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWM0YMA0G
CSqGSIb3DQEBCwUAA4IBAQCWwGe22Z5P73SYjVfKikP+RUvD+3YydXxgoaoApJg0
4etWO62SjMVXs3joQwXU/ZnkZFutf8NTrUFEkoW2lNxxi05EtgsoDPGWRFYyrTMo
Ew1ri7ZAP7T9uhIw2sKTq4kE1FfFCoC1FmzqUJFuQhH5pbtTEDB3k1RphD+mWS/0
O5VIgSdQrbb1zDqsUCiD1Xw1nxh6TaOtj9LGHb86g/bMJI8VEjItKdgYa2eRGjOU
IPaEplJc4vxWVHA2BIweJbuaXBbexAyKczDfibhBE/xFwrzn68fyQ6HByZjRJNsr
TXujbM4h2cKyzxrUjoQjaFOgBPa6vjLacBo5EEXIcO9s
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:08:27 2024 by rpki-client on console-fra.rpki-client.org