Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/eXdos7Rao05265FgMCeRpEp2a-I.roa
File: eXdos7Rao05265FgMCeRpEp2a-I.roa (raw, json)
Hash identifier: vg8kFVYnHyf+juV6epEV843TTwvTeeDZclDAk8+spmw=
Subject key identifier: 79:77:68:B3:B4:5A:A3:4E:76:EB:91:60:30:27:91:A4:4A:76:6B:E2
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 018CC2DB0C11AEB06B6ED56E074EA9F05729
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/eXdos7Rao05265FgMCeRpEp2a-I.roa
Signing time: Mon 01 Jan 2024 02:29:44 +0000
ROA not before: Mon 01 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29551
IP address blocks: 88.214.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0c:11:ae:b0:6b:6e:d5:6e:07:4e:a9:f0:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=797768b3b45aa34e76eb9160302791a44a766be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:d4:2e:c3:06:f8:82:11:2f:5a:f9:7a:2a:
87:63:83:71:35:a1:69:76:7d:f0:cc:68:2d:b6:de:
e0:c7:02:b9:5e:d7:6e:5e:7d:c7:d0:a6:dd:c6:f2:
40:19:4c:20:4f:8c:40:62:bc:23:58:9a:f6:50:2d:
23:fe:df:ff:83:07:66:0e:b6:98:20:fd:83:50:7a:
b1:d9:a1:30:45:50:cd:90:f6:a8:9e:85:63:9f:1b:
a8:3d:b4:05:40:0f:64:33:c7:5b:2c:07:42:ff:2f:
f0:81:70:f7:40:07:3f:81:4c:c8:f7:52:28:3a:9e:
fa:7e:f6:5d:8b:7c:1d:31:7d:37:f9:21:1d:72:93:
7f:07:04:d5:e0:df:29:a4:ed:b9:07:72:a3:93:50:
fd:cd:23:f2:e9:12:47:18:9d:1e:a2:13:e7:d0:a3:
c0:dd:66:64:37:8b:9e:18:e8:48:b6:e1:4f:23:bb:
5a:6d:70:67:a6:61:21:80:c1:67:af:3a:07:51:2c:
5d:48:68:f4:6e:48:3f:48:80:38:3a:cd:db:cf:34:
30:5b:c5:7a:05:af:ec:a7:e8:5d:28:46:c9:02:bf:
4f:d1:69:29:ec:ba:60:b9:e8:53:b1:82:4b:8e:b9:
3b:71:4a:ae:0f:4c:44:6f:d5:1a:37:8e:aa:4f:11:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:77:68:B3:B4:5A:A3:4E:76:EB:91:60:30:27:91:A4:4A:76:6B:E2
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/eXdos7Rao05265FgMCeRpEp2a-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cb:67:7d:5b:e7:fb:3b:eb:db:ac:c5:55:97:4e:08:0f:44:
fe:92:ec:43:4b:f5:24:97:e5:6e:73:91:29:b2:fc:85:5d:c6:
eb:8d:f5:eb:04:5b:9d:e5:a7:ee:6f:29:48:25:7e:03:9e:41:
4b:7b:53:0d:f0:c5:fa:1b:0f:46:64:cf:71:66:00:72:ca:0b:
d8:d8:e7:28:6e:e6:1f:b8:22:42:e4:9c:cd:c4:28:95:28:82:
ba:28:79:8d:4b:69:80:54:f1:2c:a9:92:f6:02:b6:b1:05:42:
8b:0e:28:9b:69:2d:7b:9c:af:e5:c4:fc:e7:9b:5c:c6:23:45:
90:39:8f:55:71:e8:2b:44:f8:a8:1e:b5:ce:e6:ed:4e:7d:72:
58:90:94:55:4a:ae:88:ca:2e:b6:0d:e3:50:0b:af:83:5b:81:
56:bb:82:44:69:00:20:75:e5:ec:fe:51:42:a8:e4:59:66:61:
17:a5:d3:b8:3d:d9:e5:bb:ad:79:4a:f4:9d:53:be:90:19:1d:
80:50:85:e8:64:35:85:cf:01:a0:0f:dd:5a:3d:a4:b6:aa:3f:
c4:b6:dd:62:e6:d9:d3:b7:c9:b7:68:4f:e6:58:5f:d7:63:da:
7f:e4:d4:73:b6:5f:50:df:55:08:6a:15:29:8a:66:a1:f2:6a:
64:5c:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:05:57 2024 by rpki-client on console-fra.rpki-client.org