Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/DznCbwsoPny7z3-bXS9iEwF-Xsc.roa
File: DznCbwsoPny7z3-bXS9iEwF-Xsc.roa (raw, json)
Hash identifier: Rq5qacVd4m6IFDm6jvSSs8u+jXBf16SU9VoZJ2X6o9Q=
Subject key identifier: 0F:39:C2:6F:0B:28:3E:7C:BB:CF:7F:9B:5D:2F:62:13:01:7E:5E:C7
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD88BB09064850708A5C2C28009EE
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/DznCbwsoPny7z3-bXS9iEwF-Xsc.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197136
IP address blocks: 88.220.77.0/24 maxlen: 24
88.220.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d8:8b:b0:90:64:85:07:08:a5:c2:c2:80:09:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f39c26f0b283e7cbbcf7f9b5d2f6213017e5ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:d9:52:9a:59:b2:a5:95:16:90:d7:ee:50:
55:08:ce:16:e9:a4:06:44:a0:3a:a6:2a:fe:10:a2:
6b:0b:6b:9a:54:9b:c6:90:06:66:48:43:ac:4f:b2:
a0:3f:55:1d:e3:a9:3f:77:41:ac:59:bc:00:21:8d:
1b:5d:f8:cf:61:6a:93:70:ce:71:b7:ba:c9:cf:97:
99:41:a0:0f:9c:8b:2e:59:21:27:d9:26:25:fa:c9:
bf:ab:87:14:03:ff:fe:9f:31:2c:0c:45:09:f5:fe:
09:f0:98:b0:40:69:42:3a:ce:aa:0f:32:bb:dd:31:
68:73:e5:d1:2b:d7:fc:ae:c4:43:25:d7:53:07:eb:
2c:ef:72:8c:54:c3:8a:09:64:6c:d2:9b:54:37:39:
62:58:50:22:e5:af:7f:d7:63:46:b3:f9:b9:ee:f6:
fa:0d:6a:e5:37:2e:7c:93:2c:42:3f:58:ff:10:26:
2a:b0:5f:25:34:fe:b6:60:aa:b8:04:9e:ac:b2:3b:
a1:5f:cf:ba:9b:12:70:f6:e0:86:52:f5:89:50:28:
a6:1e:e5:42:df:b2:5d:6e:63:54:32:6e:d5:ab:40:
97:1c:f7:62:a2:e4:40:8f:54:4f:cf:24:75:96:8d:
ac:ac:36:cc:f0:6d:c2:be:00:76:ad:01:10:7f:bd:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:C2:6F:0B:28:3E:7C:BB:CF:7F:9B:5D:2F:62:13:01:7E:5E:C7
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/DznCbwsoPny7z3-bXS9iEwF-Xsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.77.0/24
88.220.85.0/24
Signature Algorithm: sha256WithRSAEncryption
af:8b:be:f7:76:71:e0:4a:13:d2:d7:8c:b7:53:34:db:9a:eb:
45:a4:80:a7:74:2d:c7:f8:e0:f0:53:b7:30:2f:66:7f:aa:a8:
ec:69:1b:f1:e5:e6:27:bf:58:e7:c5:24:21:e0:3f:31:50:5f:
7c:f5:6c:9d:94:d5:27:db:b3:fa:67:9c:fa:a8:8c:ce:26:56:
f7:59:d7:9d:06:8b:72:9c:81:db:8d:13:a5:a3:2a:10:9a:5b:
7b:a8:f8:dd:b9:37:42:ef:f5:16:cb:79:1b:d6:3f:fb:a3:46:
05:4d:96:b1:9b:d4:9e:10:54:f0:bc:e5:f4:3e:6b:51:03:ec:
f4:b8:2d:5a:4c:56:ca:99:68:b9:fa:08:4b:e2:03:12:22:a8:
f6:14:3e:59:b4:8f:67:ba:0d:d9:63:f9:41:c8:b5:66:cf:40:
0a:c1:77:3d:e6:a3:6c:00:25:1f:62:1e:f8:43:31:f2:ff:f8:
70:f1:c1:ff:8e:6f:db:cd:23:c3:c4:62:ba:c1:7c:36:38:0b:
52:8a:82:9c:8d:23:af:28:20:30:ad:ef:82:f4:6f:ed:00:2d:
0f:9c:52:91:61:a4:ea:3f:b0:74:d2:74:75:80:65:ce:f7:f2:
fa:d0:77:a3:41:a3:c6:ca:47:7b:35:42:c8:41:90:e8:86:bd:
e9:e8:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:31:38 2024 by rpki-client on console-fra.rpki-client.org