Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/7bAOF1kyAGDnbYy00SEEcNl3Cl4.roa
File: 7bAOF1kyAGDnbYy00SEEcNl3Cl4.roa (raw, json)
Hash identifier: 4ZHFxKKGODn8G9i5f/IINhj7Iaqdx/0eGIEwCvqrLbo=
Subject key identifier: ED:B0:0E:17:59:32:00:60:E7:6D:8C:B4:D1:21:04:70:D9:77:0A:5E
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018EBCA1A62DEB2166E93A95651953113066
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/7bAOF1kyAGDnbYy00SEEcNl3Cl4.roa
Signing time: Mon 08 Apr 2024 07:34:54 +0000
ROA not before: Mon 08 Apr 2024 07:34:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.218.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:a1:a6:2d:eb:21:66:e9:3a:95:65:19:53:11:30:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Apr 8 07:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb00e1759320060e76d8cb4d1210470d9770a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:22:0b:4f:fd:d2:5b:d2:f8:78:f6:38:18:
fd:ef:c0:78:de:e3:64:0e:f1:29:89:37:3f:b9:d7:
f2:5c:d2:06:c9:db:3a:71:6e:a7:ab:6c:1e:cf:37:
96:3b:ba:82:6d:1b:e3:b6:14:94:02:9f:0b:34:a4:
e8:1b:d7:9c:eb:d0:7f:25:7b:38:da:11:3c:de:ae:
70:23:2d:07:91:76:7f:dc:62:b7:db:e5:b5:79:6d:
b1:80:9d:1e:1f:24:9f:74:76:71:51:6e:e3:5b:c2:
e0:a0:c1:23:0b:44:4c:87:38:fb:a8:7d:63:ef:10:
26:37:3a:ba:e2:e9:0b:de:e5:97:76:66:e3:d6:3e:
d8:2a:9d:e7:3b:fd:e8:97:63:e5:48:39:3d:72:5b:
c5:10:78:85:68:28:f9:f6:52:5a:22:c3:d7:c3:30:
66:ed:dd:6e:ce:4f:74:42:77:34:3a:59:ff:0f:d0:
91:08:aa:49:32:fd:1e:ef:93:e9:45:e6:65:2a:3d:
cd:c2:51:03:ed:7c:31:2a:47:01:09:f4:fb:8f:d0:
96:1c:7f:23:2c:e9:7e:62:2f:83:2e:ac:61:c0:1e:
0e:65:5b:f0:d7:50:71:d4:95:c1:39:b0:00:b9:10:
67:df:31:31:2e:83:e0:f4:53:78:89:a7:59:b3:12:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B0:0E:17:59:32:00:60:E7:6D:8C:B4:D1:21:04:70:D9:77:0A:5E
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/7bAOF1kyAGDnbYy00SEEcNl3Cl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:9b:a4:6b:50:96:44:61:6a:28:ed:29:9b:2e:cd:e2:7e:a0:
9a:e1:7a:dc:77:5f:8a:93:60:5a:8d:cc:4c:e0:d6:27:62:a3:
21:79:0a:79:6e:84:ed:7c:28:80:59:6e:f4:95:01:a3:f6:85:
e9:05:2b:5e:4c:ac:fd:be:73:64:45:34:f9:be:f8:76:ac:d1:
77:91:0f:4c:bb:ee:4a:93:1f:19:a2:11:06:24:46:85:a3:2b:
b3:e2:ca:1a:3a:6f:88:1d:41:0b:c6:b9:f0:a4:9c:cf:61:58:
21:b1:7c:8e:cd:26:2c:40:43:b5:4d:b4:54:92:59:b5:f0:c5:
43:18:c9:0f:f7:18:80:d7:21:6d:86:a5:7e:fb:30:4c:01:5b:
c8:36:36:20:cb:5a:f9:65:4a:53:ad:81:ff:5e:ae:59:a4:ad:
cb:b5:d3:7f:7d:d5:53:ac:e0:c7:db:a3:0b:92:59:ea:75:33:
4a:f4:36:3b:d0:48:5f:ff:03:a3:51:3a:2f:fa:af:86:b2:cd:
31:57:52:57:c0:92:7c:a2:8e:35:53:9d:f1:10:55:29:bc:63:
69:b5:8d:6e:8d:7f:00:83:3d:0c:82:77:46:c6:80:04:00:29:
b7:1a:22:9d:31:f6:36:5b:22:55:29:a3:80:9b:bd:e7:67:a5:
71:14:45:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:56:55 2024 by rpki-client on console-fra.rpki-client.org