Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AQxe9DdSsb9fUXIlMpOVlPyix_M.roa
File: AQxe9DdSsb9fUXIlMpOVlPyix_M.roa (raw, json)
Hash identifier: HLKjpR15OkYqmvHZBX2Rb/8K8I02MrIgag1XpKbKw2E=
Subject key identifier: 01:0C:5E:F4:37:52:B1:BF:5F:51:72:25:32:93:95:94:FC:A2:C7:F3
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE67B5C8DC569CD1FA1B0315E1E9B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AQxe9DdSsb9fUXIlMpOVlPyix_M.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207735
IP address blocks: 88.220.118.0/23 maxlen: 23
88.220.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e6:7b:5c:8d:c5:69:cd:1f:a1:b0:31:5e:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=010c5ef43752b1bf5f51722532939594fca2c7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:cc:15:b3:e4:ae:f1:2d:04:a1:b4:5f:ee:
8d:1d:dc:2c:3f:2c:15:03:cf:50:93:00:42:d9:a0:
90:e1:40:37:4c:02:fa:0f:fc:cd:30:90:6e:cb:be:
65:db:6b:c4:d5:ee:fa:86:2d:a2:03:d9:fd:3f:1b:
7b:e9:ac:36:c6:a1:9c:f9:a0:a8:74:7c:43:a0:a6:
3c:3f:ec:0c:2b:94:63:4d:7b:35:fa:bb:28:2d:3a:
c7:a4:92:19:1b:cf:c3:8a:14:8d:20:64:4e:91:c6:
aa:2d:7d:f4:5a:ec:70:9c:33:ce:a3:e8:16:7f:74:
46:1d:3a:55:91:c9:06:06:62:7a:f6:a7:a4:42:f4:
d6:fc:27:ea:28:09:7c:14:74:5a:44:a2:b4:de:26:
0d:81:bc:99:11:2e:e5:16:15:55:5c:cd:50:1d:a9:
ac:32:74:57:8f:b5:a3:8c:6b:a3:64:d2:14:72:c7:
65:85:46:24:22:58:bf:ec:7b:51:b6:be:d4:9e:00:
0c:15:04:89:3b:10:0a:03:98:7a:e6:2d:69:b4:e5:
60:e9:64:f9:22:f4:05:54:40:a2:3f:ae:99:92:42:
0f:aa:d2:d1:0f:da:72:c2:a2:40:57:df:4d:fc:4a:
b2:d2:75:41:7f:72:2f:e6:33:12:1b:37:2c:28:b4:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:5E:F4:37:52:B1:BF:5F:51:72:25:32:93:95:94:FC:A2:C7:F3
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AQxe9DdSsb9fUXIlMpOVlPyix_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.118.0/23
88.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
07:8e:a1:ce:24:27:94:ab:a6:72:ff:9b:24:01:89:42:73:19:
26:ea:8e:6b:99:3d:2b:1f:df:35:7f:6b:42:9b:10:27:fa:83:
da:e7:6f:d6:38:f5:75:f0:9b:8e:0e:25:8b:31:52:f5:d8:29:
3b:b0:e1:a3:fb:3b:c0:5e:8d:cd:ea:8f:51:de:78:0b:38:20:
85:2f:77:05:6d:a9:d3:0a:20:b4:76:3a:1e:f9:7b:ba:5e:b0:
a9:66:b4:04:8b:44:1c:16:f3:ce:86:69:cf:da:9c:10:57:fe:
b3:5c:63:21:f9:01:93:cf:aa:6f:65:68:f2:79:90:e1:01:c9:
6c:16:ba:9b:1c:85:55:2d:ee:97:d6:3e:29:04:a7:71:ac:6f:
90:49:22:d3:62:b4:7f:8d:8d:44:f5:a0:58:64:8f:26:aa:b8:
72:0f:39:02:c6:77:34:72:af:99:3b:52:05:d1:e2:a6:a5:46:
99:9c:8b:12:4a:ea:66:70:ff:47:8c:f7:5c:94:0e:64:f8:1f:
bc:7a:f3:e7:2e:ca:85:72:62:a0:4f:a2:3f:19:1b:83:67:6f:
4d:fb:74:5c:db:56:cd:0c:00:7a:64:c6:c3:96:29:a2:ef:36:
68:25:c9:84:ea:65:c7:95:c9:45:da:d1:28:48:7e:8e:c7:4a:
bd:9f:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:45 2024 by rpki-client on console-ams.rpki-client.org