Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/DnGekBReJ5XZ5wIXESBjBFR54hA.roa
File: DnGekBReJ5XZ5wIXESBjBFR54hA.roa (raw, json)
Hash identifier: ejLdErYaoTTZRcy2bUGGVJQ3sxEyDpM1ayxZ9Frg7Yk=
Subject key identifier: 0E:71:9E:90:14:5E:27:95:D9:E7:02:17:11:20:63:04:54:79:E2:10
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 018CC86F6F200EA89E9C90CA0DAABC2F7E3D
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/DnGekBReJ5XZ5wIXESBjBFR54hA.roa
Signing time: Tue 02 Jan 2024 04:29:55 +0000
ROA not before: Tue 02 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38913
IP address blocks: 88.214.28.0/22 maxlen: 22
2a09:8b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6f:20:0e:a8:9e:9c:90:ca:0d:aa:bc:2f:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Jan 2 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e719e90145e2795d9e70217112063045479e210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:3e:9f:b6:a6:03:7b:d5:94:09:3b:fb:08:
50:14:c9:78:a8:0c:07:fc:5d:da:10:d7:92:74:d8:
bd:0a:e1:9a:51:47:5e:ba:29:15:fa:41:3b:f3:df:
3d:af:90:80:0b:ad:51:1d:73:ac:97:4d:b3:d9:15:
f9:08:5c:26:b6:af:59:2d:ef:f2:37:eb:2f:b6:4c:
01:af:54:47:b9:85:28:1e:f8:e5:b2:25:5b:15:bf:
63:5a:3d:c5:d7:be:87:6c:07:70:fb:81:5a:39:47:
2f:c0:d5:ab:b8:41:65:00:22:ea:22:58:45:f1:f8:
23:8e:87:f9:5b:56:8f:19:6a:83:58:dd:1f:1d:02:
37:3f:13:ac:77:6e:0a:59:b4:13:02:fb:43:5d:e7:
07:2f:cd:f7:26:89:a3:df:88:c5:a1:3c:04:28:68:
6f:5b:c7:62:4e:10:4d:51:f3:1a:b2:72:64:f8:4d:
8c:f1:fd:50:14:eb:82:f5:a9:a1:80:c0:c2:6b:aa:
57:0a:dc:7a:81:e3:0e:6b:11:f3:de:c8:c6:74:c1:
e4:a6:6d:d7:69:14:a3:6e:ee:93:51:0a:86:79:e6:
a9:fa:22:d4:07:e5:e6:5a:a6:05:87:a3:ed:04:31:
06:31:79:e5:27:d9:15:68:a0:8f:4c:8b:50:87:ad:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:9E:90:14:5E:27:95:D9:E7:02:17:11:20:63:04:54:79:E2:10
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/DnGekBReJ5XZ5wIXESBjBFR54hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.28.0/22
IPv6:
2a09:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:07:91:80:ba:2c:d8:c2:02:46:74:0a:c1:2f:f6:d9:0a:b2:
47:67:0e:1f:0a:db:8e:f7:0a:b6:91:56:0d:2f:23:9c:c7:25:
32:d9:27:ed:e1:68:56:ae:01:69:a0:88:a7:a8:e0:38:7e:d0:
ea:8b:00:5d:99:2e:5e:61:28:d4:34:59:20:be:ac:20:d1:76:
31:e5:b3:8a:4e:bb:4a:dd:70:e1:1f:74:55:65:57:51:e4:51:
e4:8c:5e:0b:c8:16:59:79:6d:9a:98:a8:ce:c3:fd:f6:59:a0:
7b:34:af:f8:cd:2d:6b:51:47:52:09:46:40:27:5d:5a:8a:95:
29:6e:e8:11:83:1a:e6:02:5b:72:2b:65:92:b7:5d:9d:fd:fe:
75:b3:0d:59:b7:f5:f8:13:40:cf:04:e0:a5:ee:86:27:2f:8d:
eb:54:a4:ff:c5:1f:73:36:43:04:91:e2:44:cc:56:45:9f:9e:
fc:19:f4:85:00:1b:13:b1:c4:42:5a:e3:80:be:2d:8a:a6:73:
15:91:20:b8:d9:d2:96:a9:b2:fc:ab:18:39:90:c5:0d:79:22:
d4:81:d9:0a:24:fc:38:87:42:64:c9:5b:3c:64:f1:9f:26:93:
34:f9:40:42:b7:97:67:c3:52:ca:e1:39:da:d7:42:20:4d:a0:
48:42:6c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:02:43 2024 by rpki-client on console-fra.rpki-client.org