Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AymSx-Cn9af47CT6NKABIykyyao.roa
File: AymSx-Cn9af47CT6NKABIykyyao.roa (raw, json)
Hash identifier: dm75Q94B4iIDteEB1P+JQ59PVXpUReZ8jhqrQm4n9s4=
Subject key identifier: 03:29:92:C7:E0:A7:F5:A7:F8:EC:24:FA:34:A0:01:23:29:32:C9:AA
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018E7C519574F3F356C4402DAE8D5D608CEA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AymSx-Cn9af47CT6NKABIykyyao.roa
Signing time: Tue 26 Mar 2024 19:51:45 +0000
ROA not before: Tue 26 Mar 2024 19:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 88.216.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:51:95:74:f3:f3:56:c4:40:2d:ae:8d:5d:60:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Mar 26 19:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=032992c7e0a7f5a7f8ec24fa34a001232932c9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:94:52:0b:19:bc:0c:3f:64:70:1c:1b:74:
06:bd:70:15:fb:d0:21:ec:8c:13:ef:e6:2e:ee:a8:
b7:90:dc:28:7c:69:f0:f2:b3:53:6c:00:b1:d2:40:
c3:27:ee:ee:92:d2:49:67:f9:0e:32:c7:73:1d:90:
da:d8:b3:e6:15:c1:de:03:42:16:d9:b7:1a:74:ce:
e9:42:8f:4d:f6:bc:45:f7:e6:7f:88:3c:83:c3:74:
f4:27:98:af:4e:13:7c:c7:8a:5b:3d:e7:75:d3:0a:
f1:2b:9f:24:fa:f5:12:4d:27:4a:b2:f3:40:13:34:
1e:c3:4f:42:67:1a:6b:b5:c7:de:8c:2e:7a:9b:4e:
d8:b3:a9:09:75:37:5a:ba:fa:19:df:8b:1f:b7:cc:
10:03:a1:cb:02:e0:96:24:fb:4f:01:11:a2:f2:3d:
e6:63:ea:72:ed:9e:e3:cc:42:f9:97:fe:e6:c9:eb:
58:d3:d0:0e:3d:b3:42:d2:6b:7c:d7:bd:50:ff:71:
4e:cb:96:31:ba:4b:81:0e:4e:32:c0:97:1b:fe:f0:
fa:76:3a:48:65:45:4f:78:7c:5c:bf:9e:c2:39:61:
a1:94:c0:69:8e:78:6a:4d:36:93:fa:67:7e:58:7d:
e1:3c:a0:3f:cc:28:d0:91:97:44:ee:2d:1a:98:d8:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:92:C7:E0:A7:F5:A7:F8:EC:24:FA:34:A0:01:23:29:32:C9:AA
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AymSx-Cn9af47CT6NKABIykyyao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:40:31:c1:32:8e:e1:88:84:10:e7:ff:99:5e:78:bc:df:96:
fb:7d:67:ac:5d:1f:08:d6:d6:e0:a8:93:6e:37:cb:b6:d8:f4:
bb:f3:c7:31:85:28:d4:8d:5f:1f:84:d8:3e:56:15:f0:61:57:
d2:ed:c3:7d:59:4a:40:1c:1b:40:3b:cf:4f:62:e4:6a:44:77:
84:97:7b:92:7f:19:c6:02:ca:7f:c8:8f:03:77:7b:a3:f0:58:
eb:39:3c:ac:d9:5c:e9:34:ce:1e:7b:63:02:dc:84:f7:1d:b4:
8d:d7:33:16:f6:42:93:c2:a9:8d:24:f3:71:2b:f1:72:7e:11:
7d:b2:40:6f:5d:47:5b:ba:15:cf:0d:0e:6a:fe:d8:a0:c1:6c:
c8:cd:84:58:78:28:35:0d:82:b3:41:a0:48:16:c8:2d:6f:2b:
aa:ea:80:08:ed:9e:90:e4:d4:cd:fc:1c:9c:a8:5c:68:09:eb:
eb:b8:8d:5e:38:42:d4:b9:09:be:1c:1c:e3:1d:46:39:ce:17:
1a:fc:a2:38:35:7d:41:d1:0a:cf:98:f2:ea:62:b1:5f:18:e5:
1b:2d:df:f0:be:6a:7a:b7:6c:29:af:9d:b1:e3:90:f2:c1:93:
91:c7:93:56:fb:ff:ec:7b:9b:4e:2e:4a:f4:92:4c:88:63:1e:
8b:f4:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:29:16 2024 by rpki-client on console-ams.rpki-client.org