Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/fL3M0Boyci9cxQdXmxbg2XVJXO4.roa
File: fL3M0Boyci9cxQdXmxbg2XVJXO4.roa (raw, json)
Hash identifier: FyMCDF6JTu4Dedg4Bgtj2vCTfzql4QjkDGYk0+b5n/o=
Subject key identifier: 7C:BD:CC:D0:1A:32:72:2F:5C:C5:07:57:9B:16:E0:D9:75:49:5C:EE
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 018CC3B719A04CF6467B71C1C1982C194C1E
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/fL3M0Boyci9cxQdXmxbg2XVJXO4.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205734
IP address blocks: 88.205.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:19:a0:4c:f6:46:7b:71:c1:c1:98:2c:19:4c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cbdccd01a32722f5cc507579b16e0d975495cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:00:78:62:0f:d5:5f:b7:e6:1f:0e:1e:e2:
cb:2a:84:ef:71:46:32:ec:64:a1:40:9c:32:6b:b3:
07:d0:ff:44:81:f0:91:b9:65:95:55:55:dc:41:d9:
a1:ab:c1:83:9c:70:26:5d:a1:b3:d7:ea:cb:fe:b9:
c6:17:db:e8:c8:3e:aa:a5:27:a1:c6:a4:ed:35:83:
68:06:dc:a5:66:d3:4d:22:05:7b:f8:e8:55:e9:0c:
b7:fa:d5:f4:e4:85:5f:ed:c1:0f:55:24:9d:84:9e:
90:6c:b5:c6:23:b2:aa:93:96:25:f3:75:35:44:a9:
57:35:a8:1a:dd:34:d6:4f:49:60:e4:3d:a3:ca:55:
12:5e:15:77:d3:5a:b5:39:73:b8:d3:b8:36:46:cc:
65:1c:11:59:35:4e:da:07:00:b0:e9:f8:d1:0e:32:
9b:86:ad:d4:4b:b6:3c:ae:85:f6:ff:2c:5d:30:da:
46:af:2e:71:87:ca:ab:45:14:a0:0f:5b:a9:0e:32:
e2:9e:f4:c4:5d:05:bd:d8:d1:b6:93:4f:82:f1:6c:
7f:8a:39:e4:7f:f9:8e:3f:16:72:f4:cc:51:e8:77:
40:86:23:8a:22:f9:9c:5b:14:bc:9d:74:a0:80:8a:
72:bb:41:ec:35:98:c6:a9:32:f9:ef:06:78:5e:c0:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BD:CC:D0:1A:32:72:2F:5C:C5:07:57:9B:16:E0:D9:75:49:5C:EE
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/fL3M0Boyci9cxQdXmxbg2XVJXO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.16.0/23
Signature Algorithm: sha256WithRSAEncryption
34:5d:eb:d9:3c:03:45:18:0a:c3:a8:54:5d:d3:1f:57:74:b8:
09:4f:a0:51:bb:0e:90:52:e7:56:c4:a3:cd:7a:3c:2e:29:07:
b9:93:98:57:b7:41:ad:99:e1:d2:a2:8f:61:90:3b:5a:d3:f0:
4e:dd:fc:7a:0e:c3:dd:9b:03:0d:34:a1:2d:b3:cb:77:5d:7d:
0b:d3:f8:d9:f1:6f:5a:27:6b:02:64:5f:48:27:2b:d4:43:d3:
33:72:7d:c3:11:6a:14:b9:2b:b7:78:7e:f3:c2:81:3e:58:6b:
67:e7:be:31:65:50:1c:00:68:9e:e9:cd:09:24:a5:79:55:56:
b6:ea:9f:74:16:2f:72:39:67:10:57:44:a1:18:f0:3b:ae:bf:
d7:6b:1b:6b:85:33:a5:da:a2:5b:16:44:0d:4a:b8:5a:7a:0f:
b1:8b:c2:df:7f:e5:1c:a8:54:c8:4f:cf:70:e9:46:dd:9a:a5:
bd:cf:6b:dd:56:a4:4b:d1:78:98:89:07:ce:5e:9b:67:ed:03:
4b:5a:f4:53:bd:70:cd:e4:70:d7:02:3e:9e:56:b4:4f:6a:e9:
0f:17:7a:d7:a7:3a:44:2a:aa:3f:a9:e1:8f:3f:30:91:e2:f4:
3c:90:38:33:37:ea:75:d1:44:bf:00:7c:0e:8c:f8:09:2d:c0:
19:bf:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:49:20 2024 by rpki-client on console-fra.rpki-client.org