Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/jL7iLEnImZYzq2wHfp_2EgbZnhc.roa
File: jL7iLEnImZYzq2wHfp_2EgbZnhc.roa (raw, json)
Hash identifier: WRZR/V84klZxiZbMEVfcvg9EWn5qDefZPnGDSyrWW78=
Subject key identifier: 8C:BE:E2:2C:49:C8:99:96:33:AB:6C:07:7E:9F:F6:12:06:D9:9E:17
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E5C64AC339AB9352401FB02798A1802C9
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/jL7iLEnImZYzq2wHfp_2EgbZnhc.roa
Signing time: Wed 20 Mar 2024 15:04:45 +0000
ROA not before: Wed 20 Mar 2024 15:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31108
IP address blocks: 88.221.82.0/24 maxlen: 24
88.221.86.0/24 maxlen: 24
2a02:26f0:1c::/48 maxlen: 48
2a02:26f0:3d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:64:ac:33:9a:b9:35:24:01:fb:02:79:8a:18:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 20 15:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cbee22c49c8999633ab6c077e9ff61206d99e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:e8:e9:85:c0:18:1f:fa:e4:7c:5f:e0:8a:
3f:46:b5:d6:ae:5e:98:82:3e:09:33:80:6f:93:32:
2a:cf:5d:00:e4:c5:25:eb:8f:aa:49:d6:25:92:01:
d1:3f:a8:32:ee:c7:03:51:14:d5:93:d3:9c:6e:e7:
76:54:07:bf:a8:63:5b:28:42:43:8b:ba:23:34:4b:
33:46:a5:bb:c7:9f:28:14:d0:3d:2b:2a:9a:14:69:
2b:27:c8:83:61:8f:50:c9:c5:58:ab:45:87:c7:c7:
e3:1a:21:b2:ab:6a:be:aa:82:1b:c0:f8:f8:57:3e:
d5:6d:0b:07:5c:0a:c4:6d:fc:ce:27:a2:00:ed:ed:
d0:ee:9d:06:c9:19:ed:85:ca:18:ff:d1:5a:95:e4:
31:a3:72:91:20:82:b8:12:37:b8:f2:2e:24:9b:0b:
bb:c1:1a:0f:8e:c9:74:16:d1:7f:75:94:64:78:12:
5b:15:20:80:1d:f6:30:38:00:85:e1:07:31:fb:b0:
68:10:ef:c7:c7:e9:5c:26:c4:39:83:52:67:db:ce:
a0:b5:96:25:06:f2:44:6b:c6:94:91:4f:3e:76:30:
79:2d:a0:b5:54:9a:88:05:f1:d1:bd:82:f2:a7:f4:
c2:38:c8:bb:79:b6:a7:c6:e7:4c:ad:92:2f:7d:89:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BE:E2:2C:49:C8:99:96:33:AB:6C:07:7E:9F:F6:12:06:D9:9E:17
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/jL7iLEnImZYzq2wHfp_2EgbZnhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.221.82.0/24
88.221.86.0/24
IPv6:
2a02:26f0:1c::/48
2a02:26f0:3d::/48
Signature Algorithm: sha256WithRSAEncryption
60:b8:f3:8a:93:0c:07:28:cc:93:bd:c6:4b:54:02:d8:13:90:
64:20:34:c2:2c:00:35:37:ba:b0:d4:5e:51:0c:46:fc:f6:ee:
e6:d9:b0:a5:29:e4:89:4b:50:3a:7e:86:3f:5d:36:5c:ce:c0:
b0:6e:06:00:cc:9f:47:49:28:df:5e:75:e9:af:22:de:4b:3c:
a9:d2:66:0e:de:d3:29:11:a5:f9:12:21:75:91:44:d4:91:38:
50:2c:90:cb:17:3c:0c:9f:b8:f5:5a:b5:02:74:f6:8a:b5:87:
7f:e3:0c:e4:94:3b:60:a6:75:4e:c7:9b:3e:e6:4d:a4:88:4c:
07:bf:ec:7d:fa:e4:08:86:38:41:7a:fd:a2:da:0e:99:a6:4c:
d0:ae:19:c6:82:46:5b:53:75:67:67:3d:67:31:c2:bc:37:ec:
58:a2:5e:57:62:5b:6c:bf:4c:23:05:71:e8:fb:87:77:63:ae:
49:ba:c0:2b:df:35:63:d8:c2:35:9a:4a:9e:e3:5b:a8:f3:42:
33:9a:18:ff:3d:3a:73:13:f7:0e:b1:1c:e0:be:cd:aa:b9:94:
a9:af:84:0e:8a:aa:3d:8c:0c:f7:44:c5:8a:c3:13:1b:24:a1:
2c:cb:66:a3:92:70:e3:27:95:52:9f:4a:e2:79:d8:2a:c7:38:
b5:16:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:17:24 2024 by rpki-client on console-fra.rpki-client.org