Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ba_s8NB-EktAjHGJhekVhcm6m5E.roa
File: Ba_s8NB-EktAjHGJhekVhcm6m5E.roa (raw, json)
Hash identifier: rGtA++D1mXMJKxClUwN+bdOuQjFEv95V91FElnDtYCk=
Subject key identifier: 05:AF:EC:F0:D0:7E:12:4B:40:8C:71:89:85:E9:15:85:C9:BA:9B:91
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD314453C0CF76B1AC1F76ECF4B03
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ba_s8NB-EktAjHGJhekVhcm6m5E.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49664
IP address blocks: 88.220.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d3:14:45:3c:0c:f7:6b:1a:c1:f7:6e:cf:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05afecf0d07e124b408c718985e91585c9ba9b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:e8:6c:00:bf:95:ee:79:3b:9d:5c:5b:d2:
0f:ef:5a:45:90:47:93:2f:35:13:d7:3b:18:28:98:
7d:2e:75:6d:d8:f1:71:fd:f7:bf:a1:3a:e6:0b:c0:
40:50:07:de:44:6e:f9:62:79:74:14:65:73:34:e4:
8c:ef:26:2a:c7:07:ce:7c:d2:80:1c:8a:98:a7:d9:
56:66:8f:11:f7:d8:64:7d:e1:3a:6e:16:9f:57:6f:
a7:49:2b:a9:73:e9:2f:5c:48:61:9a:fb:86:dc:c7:
9c:7a:66:88:b6:c2:af:53:57:a2:c8:75:dd:1d:fe:
d7:2f:4b:94:ef:51:81:d4:ee:13:40:60:7b:cd:52:
99:f3:b5:a8:51:7e:a5:0d:0b:f2:fd:08:f0:1b:e1:
ea:3c:88:91:47:b6:b3:10:c3:eb:e6:61:e9:9b:6a:
31:ec:e1:14:79:80:d5:86:43:07:c5:c2:e9:0c:ef:
0b:d3:57:ad:0c:ad:42:4a:33:e1:45:44:b2:0d:dd:
dd:bc:5e:04:6a:d7:8d:f1:e3:77:e6:49:fb:23:0d:
55:3b:61:22:8c:ec:99:e7:9a:b8:6c:ae:fb:bb:38:
a3:70:ab:fd:5a:48:e8:c5:a9:df:eb:62:4c:7b:cd:
26:03:b0:7a:f5:cd:91:78:c2:32:d3:fd:5c:53:05:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:EC:F0:D0:7E:12:4B:40:8C:71:89:85:E9:15:85:C9:BA:9B:91
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Ba_s8NB-EktAjHGJhekVhcm6m5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:bc:67:b3:c0:69:c7:0a:42:6f:01:61:e1:f3:4b:a6:6e:0f:
c4:81:8a:c9:df:ac:a7:66:91:34:eb:a6:49:a4:68:0e:60:b0:
24:1a:4c:cb:94:c8:ee:e2:7e:18:5a:0c:7a:8d:32:ef:ba:5c:
46:6f:99:2b:8c:12:b2:af:41:de:81:59:fe:2d:94:da:4f:79:
ea:c6:ac:df:1e:36:cc:88:3a:a3:63:95:61:71:60:75:6c:ec:
dc:7c:43:7d:d1:cd:4e:52:0e:4d:15:dd:00:73:96:6e:d6:15:
32:ca:a3:65:72:ca:c9:4a:4b:e3:33:89:a2:5b:af:ad:f4:2d:
81:b6:31:51:f9:dd:88:33:39:d0:d5:26:40:8b:0b:7d:db:bc:
db:04:a1:bf:99:78:68:89:5f:53:99:8c:a4:4e:48:69:6d:e0:
5c:71:39:85:4a:94:92:ca:d8:88:5f:92:93:bf:8c:47:93:b6:
9f:5b:0b:59:b6:d4:50:27:85:00:23:40:4f:1b:2e:4d:fe:51:
b8:a5:b2:19:bb:cf:cf:a5:78:57:dc:83:62:ca:d7:c3:7c:2b:
71:4f:3b:6c:c2:93:ac:59:64:7d:49:28:68:4a:63:72:eb:ff:
a9:e7:09:e1:29:0d:c6:4b:f1:99:23:24:47:c3:22:f3:92:fb:
c4:38:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 21:45:21 2024 by rpki-client on console-ams.rpki-client.org