Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bLDSJy_jsjknKsqMZDpy5crk5gA.roa
File: bLDSJy_jsjknKsqMZDpy5crk5gA.roa (raw, json)
Hash identifier: PjTrj2zJ5zdI3pONyNnNq7Ph04rdxk6C4FnGZ1GqlcE=
Subject key identifier: 6C:B0:D2:27:2F:E3:B2:39:27:2A:CA:8C:64:3A:72:E5:CA:E4:E6:00
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD9F885D1232568C35853E6FD215D
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bLDSJy_jsjknKsqMZDpy5crk5gA.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198023
IP address blocks: 88.220.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d9:f8:85:d1:23:25:68:c3:58:53:e6:fd:21:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb0d2272fe3b239272aca8c643a72e5cae4e600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:21:c5:1c:04:8c:a3:16:99:92:0f:0e:29:6c:
e3:33:ba:51:93:50:80:a7:1c:71:f1:d4:5d:75:da:
35:7e:28:ee:6c:88:8b:8d:36:b6:6b:4d:23:3a:14:
fc:ad:c3:64:03:56:ee:2a:e0:1d:23:10:2c:4c:a2:
b0:21:a3:07:f4:85:ee:2e:a9:77:30:50:c3:b2:7d:
16:50:8f:ab:5f:b7:5e:62:1d:bd:29:78:67:89:9b:
cf:a3:5c:32:f6:2b:9d:59:85:e3:0d:68:62:b5:0d:
6e:7e:84:61:1e:ab:ec:28:f2:37:f1:97:6b:cb:7a:
5d:0f:f4:0a:82:50:75:3c:df:34:f4:28:9c:1a:a4:
c4:2d:c1:23:5e:52:2b:7e:bf:90:b7:2e:87:59:8d:
4c:dc:23:d0:17:16:f9:ad:50:9d:b1:9c:ef:56:94:
2c:5c:3f:93:4f:1e:93:09:b6:ad:53:28:22:e3:52:
68:7e:e4:75:6f:a3:1f:4c:b4:00:01:32:d7:de:7e:
ba:81:6b:da:63:6a:e4:3c:bc:87:b1:10:cd:22:bb:
47:ff:18:20:77:5d:b5:66:24:0c:20:19:44:2c:bf:
23:8d:22:96:37:7a:cc:00:df:91:29:ac:57:ce:84:
04:48:70:c3:8d:c8:35:dd:3e:a2:60:64:a6:5c:24:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:D2:27:2F:E3:B2:39:27:2A:CA:8C:64:3A:72:E5:CA:E4:E6:00
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/bLDSJy_jsjknKsqMZDpy5crk5gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.181.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7c:01:3a:5e:d9:c4:04:7c:6c:79:fa:25:cf:42:2f:48:02:
78:d8:47:06:94:c8:d4:99:d1:ae:5a:f8:15:20:83:66:41:6a:
58:19:ef:ca:0c:dd:57:f9:ae:30:5a:83:33:bf:13:02:95:49:
f2:d0:74:00:69:1b:a3:a6:24:fb:73:1c:07:00:3c:d7:c6:a7:
ee:e7:67:2c:d6:ef:71:a1:c8:64:51:2e:8c:a0:ad:c5:86:ee:
bc:9a:97:44:42:92:a4:47:43:58:0f:26:2e:f3:01:18:4f:e0:
d5:56:40:c4:71:3c:43:d1:50:90:92:bb:a9:61:62:ad:58:68:
d1:0a:66:75:f5:cd:0a:96:40:29:52:17:8f:d3:dd:ec:5a:b4:
c0:45:38:8a:b7:1f:14:3a:62:c8:f0:c6:43:a2:5f:08:54:9b:
ec:7d:55:57:c7:ab:3d:f9:c5:97:bb:49:90:be:66:6a:6e:d5:
0b:ea:b7:6e:c0:cb:e6:b7:d0:e4:f3:7a:92:6f:81:c4:98:06:
0b:8a:ca:57:9a:44:b7:18:bd:f9:ea:5e:44:fc:67:83:45:a6:
2c:be:ec:5a:95:eb:65:75:de:1c:65:e1:f4:45:79:8b:d9:30:
fc:89:a3:32:2a:87:7f:f1:32:c7:e1:6d:27:fb:89:62:42:4b:
15:e4:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 21:45:21 2024 by rpki-client on console-ams.rpki-client.org