Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lppxMgDPwnzn5w9fjTKCMhXPxfY.roa
File: lppxMgDPwnzn5w9fjTKCMhXPxfY.roa (raw, json)
Hash identifier: 5D+0VWqQiAQ59VJyylhuwCuXAtyuLEV7TIlU3f1+n1Y=
Subject key identifier: 96:9A:71:32:00:CF:C2:7C:E7:E7:0F:5F:8D:32:82:32:15:CF:C5:F6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD16ECF2D87DA6A718988BE73D801
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lppxMgDPwnzn5w9fjTKCMhXPxfY.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39599
IP address blocks: 88.220.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d1:6e:cf:2d:87:da:6a:71:89:88:be:73:d8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=969a713200cfc27ce7e70f5f8d32823215cfc5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:f4:a4:98:7f:76:38:5c:51:6c:0a:4f:8c:
b8:33:bd:38:ca:15:e8:a0:cd:b8:b0:e1:e8:a1:7a:
20:d7:c5:9f:0c:d8:e6:44:5e:91:0c:ce:37:b8:6c:
33:5a:cf:f7:9f:81:c6:ee:06:e4:69:22:c2:cc:ee:
0e:98:ed:78:78:05:88:00:5f:23:07:ef:c0:ee:f9:
8d:2a:c2:a0:8c:6d:34:c5:db:f2:7d:df:99:b7:9a:
09:76:66:e4:99:fb:84:8c:91:d1:47:b1:a4:2e:15:
dc:28:3f:4c:ad:5b:24:a6:53:68:52:2f:51:4d:d2:
50:10:52:96:7e:d9:c2:95:50:26:5a:ec:94:b9:df:
de:5c:dc:1f:33:a6:d3:27:5a:c1:1e:44:20:4f:7e:
ae:c3:01:04:78:3b:35:fe:cc:5f:96:81:1d:e4:c0:
25:92:bd:58:54:28:21:ad:b2:9b:50:cf:c3:5b:52:
b1:cb:43:96:91:ed:b4:e6:a0:3e:bf:e7:21:59:ba:
ec:7d:68:15:e9:26:cb:a9:4f:f5:22:b4:03:7b:68:
b1:ae:fb:da:21:5a:7b:58:0b:df:67:d7:90:c1:45:
f3:38:c0:04:16:78:37:a0:65:6a:59:10:df:60:74:
51:35:b4:ed:74:73:20:8e:7b:26:26:9b:45:77:07:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9A:71:32:00:CF:C2:7C:E7:E7:0F:5F:8D:32:82:32:15:CF:C5:F6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lppxMgDPwnzn5w9fjTKCMhXPxfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8e:42:5a:d4:38:b3:24:be:92:30:b5:21:42:4f:f7:bc:ff:
41:ed:bb:c0:ba:b3:bd:89:fd:b9:3e:6b:c5:8e:b1:f0:31:18:
cc:84:70:be:7b:22:c8:73:76:4d:2e:a5:93:e3:1f:d6:76:3f:
57:15:16:6c:e2:b8:8b:63:c2:21:ba:c6:a5:d2:45:af:6a:49:
89:7f:9f:1f:ac:fd:01:18:48:f4:16:6f:91:fb:5e:81:64:db:
38:46:74:21:58:0c:de:17:12:0a:4f:d1:24:be:3a:e4:d9:23:
3b:aa:ce:ee:cf:f9:6e:96:90:f1:b4:f6:4f:61:1a:52:c8:f4:
92:1d:07:97:30:92:fa:a7:aa:81:fd:2e:a3:17:56:e3:55:f2:
3b:25:8a:80:91:45:7b:37:bd:2d:18:39:5a:c6:1e:20:d0:0d:
28:18:cd:c0:30:84:4c:73:a7:a8:ee:53:a1:8a:55:aa:cb:b8:
7c:e9:72:23:83:99:2f:94:04:4b:68:a1:2e:c9:8f:be:d7:8a:
d9:ef:c4:14:4e:21:a4:22:6c:92:a3:0d:4f:2b:81:39:6c:78:
50:48:e2:59:73:08:de:db:60:eb:f2:55:08:51:c7:8b:87:b2:
f0:b5:f4:d8:4b:f2:a2:44:d7:64:43:c6:2a:ff:8c:ac:b3:17:
38:51:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:42 2024 by rpki-client on console-fra.rpki-client.org