Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/2EIFLOwIFc-tFxWKXZn3BMbPcb0.roa
File: 2EIFLOwIFc-tFxWKXZn3BMbPcb0.roa (raw, json)
Hash identifier: N4yQ0YKTphIul8vlPKPp5fRacDnW6DjK0afxc2YMy0o=
Subject key identifier: D8:42:05:2C:EC:08:15:CF:AD:17:15:8A:5D:99:F7:04:C6:CF:71:BD
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01926B868A729947479450FC62D292885A51
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/2EIFLOwIFc-tFxWKXZn3BMbPcb0.roa
Signing time: Tue 08 Oct 2024 09:47:12 +0000
ROA not before: Tue 08 Oct 2024 09:47:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 188.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:86:8a:72:99:47:47:94:50:fc:62:d2:92:88:5a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 8 09:47:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d842052cec0815cfad17158a5d99f704c6cf71bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:83:44:44:2f:c2:74:c8:97:69:84:37:1d:
81:ff:13:2e:78:29:f5:5f:0f:f8:3d:99:76:c5:81:
dd:98:63:57:00:a6:fa:29:df:b4:91:cb:da:b5:70:
f1:3d:35:c7:3a:04:13:dc:06:91:b1:68:f3:e8:3e:
ff:71:82:aa:77:3b:3f:57:14:cc:a0:2e:49:d3:91:
d9:ae:9a:53:34:7f:87:6a:ee:6f:21:17:07:11:ed:
89:31:c6:05:45:59:c8:4d:1a:f2:b1:74:2d:78:9c:
c2:d8:0a:62:dd:4f:52:d6:d9:1e:fc:56:a1:ce:79:
1c:2a:c7:88:bc:25:2a:57:25:e6:97:eb:d2:a8:b3:
a0:f5:b1:c6:08:53:62:63:63:a0:d9:da:2f:54:38:
a3:e2:b1:dd:9c:41:ea:d3:36:5a:14:b6:9c:34:8a:
32:72:99:64:89:a5:ee:fa:bf:ec:5f:88:26:b6:e8:
d0:39:85:f3:41:b7:3e:6f:41:e6:3e:ec:14:4b:75:
21:4d:79:d3:59:5c:69:4d:08:f2:af:62:bb:32:a6:
fc:61:0e:54:44:84:a9:6b:55:56:f0:ff:a5:a1:7a:
8d:12:92:0b:a4:f7:12:54:ec:c6:f0:31:ee:ce:46:
06:a1:51:1e:3d:1c:ef:e5:1b:f1:f1:0b:64:13:6b:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:05:2C:EC:08:15:CF:AD:17:15:8A:5D:99:F7:04:C6:CF:71:BD
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/2EIFLOwIFc-tFxWKXZn3BMbPcb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:0e:16:df:58:b2:5f:c9:05:32:88:3c:cc:59:31:35:d6:ce:
b0:5f:aa:62:ec:64:43:a4:c6:9d:24:a3:1f:f5:72:08:fd:3f:
19:69:37:92:d5:68:ae:50:c2:e9:97:88:56:21:cf:83:6a:8a:
6d:aa:8b:5e:93:89:ee:0b:3d:fe:3e:4a:9a:8f:e4:38:b5:a4:
eb:6a:93:8f:c8:a4:42:b8:10:e6:b1:44:59:7e:0c:3f:89:55:
2b:6e:ee:e2:8b:ba:0b:ab:c9:5c:18:a5:61:23:70:7b:05:8c:
62:00:09:29:8b:46:38:1c:74:a6:88:2e:91:aa:b9:16:47:59:
96:1f:60:8e:5f:a9:98:f5:cd:ef:a0:72:06:2d:5e:c2:d8:ae:
d8:7c:2b:80:41:64:ae:17:8b:ea:0f:f6:b4:ae:9b:5f:70:91:
e9:9d:80:1b:c1:60:91:71:a8:a3:21:de:2e:53:51:d8:92:0e:
a6:5e:44:c6:d3:04:87:78:45:6b:ce:bb:0d:db:59:e0:9d:a6:
88:00:1e:2d:3e:9e:3b:10:33:e2:bb:09:5e:d2:4d:4a:85:15:
21:b7:29:88:e6:04:b9:90:fa:0b:94:c0:d9:42:f0:d2:29:a8:
b5:65:9e:78:bc:d5:7a:87:39:91:a1:e1:03:fd:3c:74:21:32:
be:2d:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:11:07 2024 by rpki-client on console-fra.rpki-client.org