Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wumIqUqoj_YPMoAAYJkKoBmaEr4.roa
File: wumIqUqoj_YPMoAAYJkKoBmaEr4.roa (raw, json)
Hash identifier: 1lTLnE234YVVFB8NDLbSkHrjAXdvxoyZhXqgSovXjho=
Subject key identifier: C2:E9:88:A9:4A:A8:8F:F6:0F:32:80:00:60:99:0A:A0:19:9A:12:BE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5013B3661722963D51179CCB95FDB7B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wumIqUqoj_YPMoAAYJkKoBmaEr4.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 88.216.57.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3b:36:61:72:29:63:d5:11:79:cc:b9:5f:db:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2e988a94aa88ff60f32800060990aa0199a12be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:bd:b6:6d:41:8f:3f:4e:99:cf:07:2b:e9:
8e:2d:36:72:35:5d:dc:d1:6a:7c:39:0d:bc:08:15:
b0:74:1b:4f:06:7f:4d:e5:eb:64:0b:b6:a3:a9:96:
48:d3:41:63:75:d2:12:f9:3c:e2:15:d0:10:38:ee:
b9:c3:f9:9f:9d:eb:ec:62:2a:78:78:28:e2:08:af:
8c:8f:ea:0d:26:6b:c5:e6:dc:15:94:34:3f:66:e6:
69:17:cf:43:72:14:2c:bc:9a:c7:45:18:d5:62:c4:
b3:06:1c:2e:70:65:e9:14:84:1f:a2:c4:10:5a:ac:
5a:03:1a:60:34:bb:a7:1c:9c:20:cb:2c:3a:57:b9:
d1:15:29:10:57:11:07:2a:71:2f:95:3a:42:27:8e:
53:7e:3c:a3:b6:cb:ef:79:c1:6c:4b:36:ed:20:22:
5d:6b:52:54:d2:e1:05:a2:29:ba:cb:50:3e:ba:4a:
c8:12:10:6c:ce:4f:ba:27:78:50:5a:26:eb:01:dd:
26:77:c6:a4:7a:f2:f3:38:9d:65:80:14:c8:4e:16:
94:80:86:7e:7c:d8:e7:6d:46:96:ed:d8:f7:e6:6a:
b3:a3:e1:bd:91:0e:ff:22:78:e3:2a:5f:52:ad:e9:
7a:0f:81:a2:0a:93:bd:30:7b:9a:cd:9d:48:af:83:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:88:A9:4A:A8:8F:F6:0F:32:80:00:60:99:0A:A0:19:9A:12:BE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/wumIqUqoj_YPMoAAYJkKoBmaEr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.57.0/24
88.216.228.0/22
88.216.236.0/22
Signature Algorithm: sha256WithRSAEncryption
93:8f:46:e5:e4:2c:e2:3b:43:02:31:cc:8a:20:dd:00:27:c1:
92:2a:09:e3:5b:6b:40:59:24:3f:74:78:55:aa:b4:b9:ce:fb:
4e:7d:5b:95:8b:37:83:7e:d7:1b:a4:63:51:c1:f3:68:49:e7:
83:08:ff:81:6e:19:bb:8a:0f:60:63:91:cc:1d:d0:32:19:c2:
62:bd:25:45:12:de:fd:ef:97:2a:2a:c4:5f:09:16:a0:83:02:
76:aa:65:c5:17:ef:e4:e5:b1:32:11:a6:21:41:c8:a2:74:d3:
10:d2:c0:2c:85:f3:4d:6a:c0:18:0c:ae:03:b6:2f:51:de:8c:
ea:48:de:4c:98:6a:ee:6d:a0:11:b2:a4:4d:35:de:b1:1b:49:
ca:e9:06:7d:5f:fa:63:b0:9d:50:e7:79:5d:59:da:4b:06:35:
15:cf:38:22:84:ab:d8:fc:65:ca:d0:92:0e:0b:2f:2d:36:1a:
d9:5b:05:32:9b:e2:f2:39:9a:49:eb:88:6a:68:64:dc:f8:a6:
53:11:39:bb:70:8b:a1:76:71:a3:c3:96:f8:99:4d:e7:76:8e:
f6:6f:90:97:93:03:4a:9e:41:08:46:55:d2:7c:db:b8:75:aa:
cc:e7:ed:19:e4:2c:58:f7:14:48:43:31:0c:35:09:09:da:8b:
be:c8:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:48:18 2024 by rpki-client on console-fra.rpki-client.org