Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/98wdG89X1LQCZq2giFIGoawUsls.roa
File: 98wdG89X1LQCZq2giFIGoawUsls.roa (raw, json)
Hash identifier: jFXstJENxRgOoomZU5MoHxX4kVz08u04ID99y5JwuWM=
Subject key identifier: F7:CC:1D:1B:CF:57:D4:B4:02:66:AD:A0:88:52:06:A1:AC:14:B2:5B
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 018CC94E6D9780C8EC799B45F355266B5667
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/98wdG89X1LQCZq2giFIGoawUsls.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212582
IP address blocks: 45.88.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6d:97:80:c8:ec:79:9b:45:f3:55:26:6b:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7cc1d1bcf57d4b40266ada0885206a1ac14b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:c2:44:cf:76:ad:0b:d6:70:4c:24:ec:bb:
34:eb:78:02:53:c2:49:37:95:2d:b0:3f:03:48:34:
24:60:d3:3c:fa:c2:ee:0b:64:07:d4:11:f4:99:01:
36:57:07:ef:f2:4f:24:71:99:00:32:22:19:f7:7d:
43:4c:a0:1e:e1:66:f4:12:b5:b6:22:89:f0:69:40:
bc:f0:5f:f7:68:0e:91:e4:0c:2b:ce:6c:43:db:99:
f0:df:96:e6:cd:f8:5d:bd:25:0f:5f:a8:d9:3a:6f:
a4:1d:03:9f:ac:53:1b:e8:e1:f0:e4:07:f2:45:9f:
3c:ea:c9:fb:c9:fd:52:0b:fc:04:ce:72:06:fb:48:
18:ff:d4:d4:de:6b:9e:27:7c:c5:63:77:e1:37:b5:
10:bb:bd:1e:4a:73:13:65:6b:88:49:f6:31:32:5d:
c7:41:c0:0f:8d:86:2b:d7:ce:e1:f2:a0:4f:cf:67:
ca:02:06:32:21:f1:07:ab:68:21:11:68:e9:1f:77:
dc:0d:68:f2:ce:07:1b:6f:0e:b0:ce:44:93:4e:30:
ed:a4:57:b7:54:b9:4f:a5:36:1f:3a:bd:de:31:a1:
97:2b:59:6d:93:ac:54:ee:73:7b:6b:3b:90:a9:38:
c1:bd:1a:74:36:ff:85:8c:fa:f5:c1:ef:a9:c1:7a:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:1D:1B:CF:57:D4:B4:02:66:AD:A0:88:52:06:A1:AC:14:B2:5B
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/98wdG89X1LQCZq2giFIGoawUsls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.228.0/22
Signature Algorithm: sha256WithRSAEncryption
05:24:6e:eb:f6:c0:23:24:b1:e5:3f:64:00:19:71:5c:af:08:
77:fd:65:60:55:48:a0:8a:93:d6:40:6d:8b:9d:06:20:a6:39:
d0:8d:b1:7c:6a:e5:a6:dd:6a:49:03:41:77:d9:e0:32:17:c2:
0d:59:2b:b5:80:99:72:a6:1e:d5:d0:0e:ee:de:b3:5a:08:8c:
32:00:b8:ba:0b:b8:06:b1:d4:97:7d:7c:36:26:c1:0b:2d:b2:
86:ae:3f:76:e0:1e:2a:10:1d:96:b5:9b:6f:74:e7:6e:e1:b0:
e7:a1:bf:35:0c:bd:a3:ce:b9:24:4c:41:47:3d:e3:ae:00:b9:
6a:39:16:64:53:5b:30:a1:76:58:21:21:30:72:69:6c:a0:2d:
1c:95:3d:ae:57:9d:7e:fe:e3:3a:d7:6d:98:99:8a:56:f5:e4:
88:ab:0f:fe:fd:c0:72:8c:48:ee:a1:66:67:07:b6:82:00:eb:
b4:ee:9a:70:d2:4c:9b:0a:d7:aa:88:01:bb:10:c2:5c:8f:79:
97:58:9e:f6:ca:d4:c8:80:2c:87:40:ce:d4:f7:82:0d:0c:f2:
e4:7a:a1:8f:89:58:ff:3d:5e:d6:d2:ee:29:cb:e9:9a:4b:42:
c7:25:5c:6c:a8:f0:56:eb:f0:40:05:8f:84:04:16:64:27:b0:
0c:81:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:57:09 2024 by rpki-client on console-fra.rpki-client.org