Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-1KbULcVmaaUrj5xdptIs5_JOFM.roa
File: 1-1KbULcVmaaUrj5xdptIs5_JOFM.roa (raw, json)
Hash identifier: 3dKPX0t61icWgAglml1ujWUl260xhme4TwmpO18nmoM=
Subject key identifier: FB:52:9B:50:B7:15:99:A6:94:AE:3E:71:76:9B:48:B3:9F:C9:38:53
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DACAF77ECC99D9C164E3093967EE9F
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-1KbULcVmaaUrj5xdptIs5_JOFM.roa
Signing time: Mon 01 Jan 2024 02:29:27 +0000
ROA not before: Mon 01 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 88.220.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ca:f7:7e:cc:99:d9:c1:64:e3:09:39:67:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb529b50b71599a694ae3e71769b48b39fc93853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:30:25:29:83:1e:dc:2d:87:97:f6:80:ac:
2b:c3:ae:32:25:0f:ef:25:a4:24:c6:63:22:f7:29:
09:87:6a:90:b5:64:b2:16:c9:e5:57:81:b2:32:37:
c9:bc:16:f2:d5:f5:5e:b6:70:30:de:68:8b:e2:d1:
a5:94:21:83:63:bf:f5:54:4b:85:7f:b8:c5:9c:d8:
d8:5a:6f:56:02:9b:0b:33:6b:4f:e6:97:26:f5:56:
27:e6:20:a8:08:4d:ab:12:a5:57:6f:35:4c:36:fc:
e8:6d:a5:cc:6e:06:3b:db:f9:61:92:8c:cd:29:c4:
6e:b2:4f:dc:f3:d5:5d:01:e4:28:fd:5c:41:8a:70:
6c:07:37:e5:3b:bb:7c:4f:75:79:7b:23:4e:a1:de:
b9:bb:41:a3:0c:d7:9b:77:15:59:01:ba:61:d6:8f:
26:3f:b2:82:0d:7d:c5:3b:20:77:4b:91:4d:5c:7d:
f4:59:73:34:fc:d0:3c:19:a7:1d:da:b4:a4:cc:f2:
d9:61:5f:50:0b:97:46:63:64:25:dd:a0:3b:78:15:
1f:92:a5:09:15:c2:08:18:c0:49:04:8a:e7:9a:ab:
5a:18:a7:10:0a:8f:8e:bb:44:9d:8d:3d:e6:3b:c2:
ca:e4:28:af:4f:74:1e:3f:24:ab:fe:bf:d0:d6:36:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:52:9B:50:B7:15:99:A6:94:AE:3E:71:76:9B:48:B3:9F:C9:38:53
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-1KbULcVmaaUrj5xdptIs5_JOFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ba:10:a9:b0:c5:58:ff:6e:ef:3a:af:04:59:98:2b:17:6c:
b9:ab:c3:99:f0:93:ba:e6:d1:eb:7c:34:5c:11:a5:a1:fe:fa:
c7:c9:a7:7e:1f:2c:75:c7:e7:08:0f:28:4c:1c:1e:fd:0d:f5:
ba:2c:a2:f3:90:eb:45:01:32:e8:f4:72:23:89:df:13:a2:02:
3b:84:30:75:b9:dd:47:a8:a2:3e:c8:97:3c:92:b1:78:bf:c5:
62:06:ec:51:8c:69:a1:c2:23:06:d8:dc:68:a1:97:fe:e1:d8:
52:15:6b:d4:d8:ae:0a:d3:c6:f4:97:e6:94:fe:f8:d7:61:1d:
93:ea:b8:6b:b5:a1:2e:c7:31:69:7a:5c:32:e7:67:5b:09:ca:
e2:d3:a5:6e:38:3f:29:2d:62:9c:b4:cc:18:2f:4c:f7:1b:29:
e7:40:0c:84:e3:f8:25:23:6a:56:1e:bf:ab:93:ad:10:ff:07:
45:c2:4e:06:03:c7:51:10:d1:35:44:1a:c6:ec:b2:93:79:4a:
cc:71:e7:0f:23:37:ce:5b:45:34:a5:52:62:d4:d4:86:d1:ca:
17:ba:ea:fe:6c:6f:de:47:46:df:01:1c:27:d5:39:1d:66:19:
4a:b6:6e:e7:27:73:39:9c:48:e9:0c:81:0c:f9:b0:06:74:8d:
a1:7c:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:40:28 2024 by rpki-client on console-ams.rpki-client.org