Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/iNj6hQljbTrjM4_8Ub7tDXAk1ww.roa
File: iNj6hQljbTrjM4_8Ub7tDXAk1ww.roa (raw, json)
Hash identifier: asvzgtC6yKCWjDqFzkNAQQDzGRauNlIQJ38bUkyB4yA=
Subject key identifier: 88:D8:FA:85:09:63:6D:3A:E3:33:8F:FC:51:BE:ED:0D:70:24:D7:0C
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 018CC2DAE469BDC3AF6BFB3EC91F353EC878
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/iNj6hQljbTrjM4_8Ub7tDXAk1ww.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60255
IP address blocks: 185.208.88.0/22 maxlen: 24
2a0b:32c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e4:69:bd:c3:af:6b:fb:3e:c9:1f:35:3e:c8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88d8fa8509636d3ae3338ffc51beed0d7024d70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:f6:f9:d5:66:3c:b6:c8:a6:39:b7:8b:df:
dd:ce:cc:cd:7d:8d:1b:b1:85:7b:1c:bc:b2:d5:c4:
e8:98:07:1c:7d:11:38:4e:3e:37:e9:70:bc:e1:27:
bf:05:9c:85:75:62:6c:bd:c7:b7:51:07:f1:6f:61:
71:73:d7:79:ad:1e:e5:43:8f:35:49:2d:6b:35:e5:
4b:de:52:a9:eb:f1:52:85:3d:bd:4e:99:72:ab:6d:
f3:9d:72:91:d4:b7:88:f6:4f:c2:77:6e:37:1d:93:
f3:77:5a:b4:5f:ae:d9:6f:4e:da:66:bf:29:ee:59:
59:f4:df:b4:9c:af:a8:7e:b0:64:a5:53:43:af:e9:
21:25:70:65:4d:68:26:a7:e2:bc:eb:a8:79:c0:3d:
e6:0b:79:73:15:4c:79:4c:01:32:fe:f5:64:9d:95:
64:16:a5:4e:7a:3b:9f:68:ca:d6:aa:89:ea:a6:04:
25:0f:d7:51:b1:63:07:a5:87:76:d1:1b:e6:a0:31:
d9:7d:98:61:7b:c7:49:29:de:42:50:71:08:5b:3a:
b1:1d:0e:35:89:cc:fa:34:fb:7e:ca:7f:ca:76:33:
df:cf:de:2e:8e:ba:de:60:83:be:d3:6e:c8:e3:03:
1d:ae:c2:49:97:b3:0a:32:e8:9a:16:0a:38:e9:a8:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D8:FA:85:09:63:6D:3A:E3:33:8F:FC:51:BE:ED:0D:70:24:D7:0C
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/iNj6hQljbTrjM4_8Ub7tDXAk1ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.88.0/22
IPv6:
2a0b:32c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:1a:d8:4c:fa:89:58:59:2c:8e:42:6b:bd:99:27:49:6a:a4:
69:70:fb:cb:f6:75:b0:bd:27:b6:b4:be:f7:c7:c3:50:12:9a:
c3:11:2b:04:ae:49:35:c7:6f:b4:5e:f4:64:89:60:dc:2b:45:
61:43:a4:ec:e5:54:05:66:e1:c3:de:3b:9d:7c:93:af:0a:37:
de:bd:58:81:d0:aa:a2:b7:8b:a0:25:db:94:7b:95:d2:69:fa:
04:fc:32:b1:49:20:c2:a2:bc:12:8b:d3:71:4b:98:94:a8:12:
69:c7:8d:84:91:77:d7:c0:8c:a2:3a:90:20:6c:bd:45:22:3c:
8b:b8:b3:0c:71:e2:8d:08:c4:28:4e:d6:42:4c:8b:bd:e5:5c:
05:fd:d5:30:53:ba:47:6b:b6:08:c4:57:46:0b:24:69:11:18:
8c:df:be:70:bf:34:9f:6a:ac:9d:7b:3e:0c:ac:8b:ac:76:6d:
98:f7:8a:4b:6e:cc:01:6d:be:40:1e:fd:62:a5:ac:ca:23:e0:
28:29:c6:a0:6f:44:9d:4f:cb:d4:ec:51:11:a1:7e:bc:71:7e:
94:54:fe:e7:86:b7:c3:eb:54:75:95:53:dc:a8:12:34:13:7d:
32:88:6f:a5:2c:26:70:a3:cb:c3:58:0b:d3:1c:0d:40:44:d1:
03:24:be:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:12:18 2024 by rpki-client on console-ams.rpki-client.org