Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/7AC_TZxfaKVauojzB0qVRAI71VQ.roa
File: 7AC_TZxfaKVauojzB0qVRAI71VQ.roa (raw, json)
Hash identifier: ui2TGUJAui0MsmY/NoE+oD6TE5SP1WMGOYLxiMnNtAg=
Subject key identifier: EC:00:BF:4D:9C:5F:68:A5:5A:BA:88:F3:07:4A:95:44:02:3B:D5:54
Certificate issuer: /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial: 018EA3BB9B7638C753831723192EF9858966
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/7AC_TZxfaKVauojzB0qVRAI71VQ.roa
Signing time: Wed 03 Apr 2024 11:32:44 +0000
ROA not before: Wed 03 Apr 2024 11:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34285
IP address blocks: 185.197.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jun 2024 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:bb:9b:76:38:c7:53:83:17:23:19:2e:f9:85:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Validity
Not Before: Apr 3 11:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec00bf4d9c5f68a55aba88f3074a9544023bd554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:02:d4:9a:eb:85:0e:d7:06:50:09:c1:31:c9:
43:0b:86:dc:c0:7f:e8:36:83:b3:fa:30:ae:6d:84:
15:69:e9:8a:51:87:30:ac:0a:28:1a:e5:e7:85:a3:
8e:1c:da:9b:28:fe:68:46:4c:c5:34:66:f9:f8:47:
6e:51:64:da:a6:cd:57:cf:26:46:44:c1:80:b1:87:
d2:d7:20:d7:8b:5a:b1:37:9e:57:d0:10:15:c5:e4:
1b:d4:6f:df:62:c0:b0:4a:fe:65:5c:7e:08:6e:8a:
08:d3:d0:0c:43:e7:3a:6d:bb:5d:d7:4c:b6:b3:33:
1e:66:86:9e:32:2a:6a:1a:bd:72:e6:83:99:8d:eb:
f6:ac:fc:07:a8:21:56:0e:71:4a:ee:b8:61:48:46:
24:bc:de:74:4d:64:bf:19:dc:e1:2f:47:44:0c:c7:
04:e1:db:2d:4b:87:82:d2:e6:7e:62:16:93:0f:4a:
dd:25:27:44:9f:fa:29:69:ea:e0:6a:25:1b:1a:59:
f8:31:dd:e0:1a:6e:ea:23:42:29:6b:ed:eb:e8:5c:
d3:7c:6b:12:8d:dd:14:65:ff:c0:0c:b7:3c:30:8d:
76:8c:ac:a1:7a:bd:26:a8:a7:bc:38:80:de:fe:13:
f8:3d:44:f9:19:e9:9e:54:d3:b6:5f:9a:84:39:c4:
d4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:00:BF:4D:9C:5F:68:A5:5A:BA:88:F3:07:4A:95:44:02:3B:D5:54
X509v3 Authority Key Identifier:
keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/7AC_TZxfaKVauojzB0qVRAI71VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.88.0/22
Signature Algorithm: sha256WithRSAEncryption
15:c5:b6:88:7d:6e:ff:dc:fe:50:38:c4:35:6d:2e:1a:b5:da:
de:fb:00:de:a4:9e:ce:4b:6e:aa:40:8c:b6:53:0c:2c:79:37:
05:2f:2d:1b:0e:81:7a:a1:cd:11:41:2e:f4:fb:fd:3c:00:48:
ff:af:88:bf:1f:04:0a:58:10:79:48:94:a1:03:44:f3:56:55:
19:90:4b:ab:cf:cc:e3:f2:5b:c8:f2:f4:c6:6d:79:82:76:69:
ef:2a:fe:15:61:fb:ae:82:4c:83:e1:68:a8:66:ac:a6:19:81:
e3:7d:d2:91:28:e1:fe:15:e6:3a:ff:8e:bb:10:e6:18:5c:63:
13:0b:f7:68:24:c1:99:ab:bb:c2:ce:d5:97:1c:7b:34:92:94:
69:32:4c:c1:e2:9c:7b:72:fa:62:ec:bb:09:35:f5:77:d4:ef:
ea:12:27:77:cc:b2:dc:e7:20:f2:16:a5:a9:6e:f6:b7:fb:83:
9d:06:d2:c8:07:8f:cd:ef:53:72:04:52:a4:65:17:4d:5c:5a:
d1:10:74:2c:70:9d:65:a6:e1:c1:84:64:4a:8c:96:ff:e4:31:
ca:20:78:89:b3:13:d2:ea:5a:db:62:64:6d:8a:ff:0b:82:10:
6b:e3:6e:88:a3:c5:e4:1e:d6:e4:78:38:be:34:25:a7:b6:b5:
3c:09:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 18:41:00 2024 by rpki-client on console-ams.rpki-client.org