Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/w9_UfAR88WiiRx6RZP6h1FBrt0M.roa
File: w9_UfAR88WiiRx6RZP6h1FBrt0M.roa (raw, json)
Hash identifier: w36rHUhrCBmYabIQBIMQFw7+rg8A4ykbk8lbhMdFyU8=
Subject key identifier: C3:DF:D4:7C:04:7C:F1:68:A2:47:1E:91:64:FE:A1:D4:50:6B:B7:43
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5013BB183CA179A5C4AD00CDCCBC22E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/w9_UfAR88WiiRx6RZP6h1FBrt0M.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 88.216.57.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3b:b1:83:ca:17:9a:5c:4a:d0:0c:dc:cb:c2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3dfd47c047cf168a2471e9164fea1d4506bb743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:62:ed:c2:1c:7b:a3:52:8f:96:a3:3d:f7:8c:
ef:4c:f4:b1:c7:e0:e4:83:2c:c6:39:48:89:bc:c4:
9d:83:63:78:93:5b:94:aa:06:f9:3f:67:cf:f0:d9:
86:fd:16:7e:fc:d5:a2:49:51:54:88:5f:58:b1:0d:
b5:56:57:30:26:34:95:37:7d:13:aa:af:25:44:95:
2c:d4:f8:7a:47:7a:19:08:a6:bb:e4:08:a8:71:9d:
30:fd:47:46:0c:ae:70:71:f0:bc:89:c8:54:3b:31:
5f:7c:d9:56:e8:9f:c0:cf:7f:81:a0:f9:0d:da:f0:
6b:f0:16:37:73:80:d0:fb:6a:13:93:01:a4:99:57:
3b:5c:95:e9:cb:d6:3e:2c:4c:6c:38:d8:e8:8d:16:
40:eb:ab:bb:64:f0:ea:1c:ec:a4:2f:f8:f7:01:67:
0b:79:2a:5f:33:f1:ee:98:b3:05:18:3d:3f:22:e8:
ec:05:f3:a9:78:86:c0:bf:81:bd:da:fd:be:01:46:
b7:67:d1:6e:bb:c7:ad:82:b7:80:92:3a:6b:f8:d1:
c6:e3:cc:bd:e8:a6:e2:77:ee:ab:d0:77:54:6b:9b:
eb:a1:cb:55:ec:f9:84:36:70:fe:e5:fe:46:7c:52:
04:5c:dc:91:81:bd:c1:83:cf:14:6b:df:72:0e:ff:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:D4:7C:04:7C:F1:68:A2:47:1E:91:64:FE:A1:D4:50:6B:B7:43
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/w9_UfAR88WiiRx6RZP6h1FBrt0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.57.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:31:a7:7d:b3:19:cc:e9:45:71:ae:ab:d8:a8:55:a1:ef:f2:
b3:5a:72:46:41:25:d1:71:cd:36:06:cd:a4:9f:01:de:3a:14:
32:1a:7d:fa:ad:78:f0:a1:f0:d7:a4:28:1f:6e:6d:f5:5d:c5:
a5:8a:b8:4b:c3:9c:ec:29:f0:0f:62:32:e3:3f:65:18:54:ef:
8c:70:f6:2f:5d:a4:48:b7:6a:46:37:c4:9c:71:e4:58:00:ef:
59:9b:46:42:04:49:ed:05:e2:60:d7:b7:fc:e9:12:d2:dc:b6:
72:f1:f4:b1:bb:be:43:a5:81:ca:df:b4:c9:35:7d:34:3b:0e:
cc:d9:21:12:9b:49:93:5e:af:3a:ef:a7:d2:29:52:55:de:bc:
dc:34:e4:f6:55:6b:ef:9a:2b:8b:f0:97:26:c8:53:1b:1e:fd:
11:80:e4:9a:34:5a:05:5e:dc:cd:7f:25:d3:36:a8:18:65:3d:
fe:7a:66:0f:87:5a:84:ef:19:8e:6b:61:cb:68:d9:2f:4d:ac:
26:76:8d:95:9c:ea:af:98:4e:4b:c5:92:72:d5:22:aa:57:ff:
1e:c8:41:b4:da:a3:15:8f:3c:df:2d:79:0e:73:17:ea:16:9e:
d8:e9:81:0b:82:2a:0a:4a:d8:b1:d6:4e:9e:be:a1:9a:83:34:
33:59:15:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:18:55 2024 by rpki-client on console-fra.rpki-client.org