Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/S_Lg8ldnUSE1hLsw_y_HWUkguDY.roa
File: S_Lg8ldnUSE1hLsw_y_HWUkguDY.roa (raw, json)
Hash identifier: u/Csg7rzUrfpCIOZTkoQJo1fuMDqy234IHWNPAFYXNk=
Subject key identifier: 4B:F2:E0:F2:57:67:51:21:35:84:BB:30:FF:2F:C7:59:49:20:B8:36
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01933BDC8CF76A41B7E5C0A7DE355EA19C6C
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/S_Lg8ldnUSE1hLsw_y_HWUkguDY.roa
Signing time: Sun 17 Nov 2024 20:42:09 +0000
ROA not before: Sun 17 Nov 2024 20:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 88.218.172.0/22 maxlen: 22
185.121.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3b:dc:8c:f7:6a:41:b7:e5:c0:a7:de:35:5e:a1:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Nov 17 20:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bf2e0f2576751213584bb30ff2fc7594920b836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:c4:63:1e:d8:8a:81:83:f2:56:87:db:c1:
f8:a9:70:c4:b0:5a:d7:ea:5b:6e:f8:3a:37:7b:7a:
c5:b4:0e:ee:80:b1:19:c0:f8:ed:09:a6:75:4c:71:
ec:07:bd:98:3f:c4:24:7b:a9:42:de:77:51:21:c3:
1c:cf:6e:ca:a0:55:cf:e0:90:91:bc:d0:e2:f7:1a:
4a:b3:ae:01:a3:40:46:63:5f:41:ae:54:20:d0:8a:
10:91:e7:a5:20:8d:ba:83:39:15:93:b8:4e:70:7f:
9c:28:25:45:33:ce:5f:f2:c8:40:23:a3:37:77:88:
f9:94:9b:c7:14:e7:53:67:99:16:d1:d5:d9:bb:91:
8a:41:7e:6b:99:fb:3d:2c:6b:dc:84:4d:ff:90:09:
18:ed:37:65:c4:19:f7:c5:fd:c2:5e:a8:33:8b:fe:
1d:1a:36:1f:07:d2:b8:e9:f7:10:23:9a:b6:b6:e8:
78:e5:33:d3:1b:25:d4:86:19:c8:15:bf:78:db:cc:
7f:6c:ba:f8:2c:12:a7:e5:d0:0b:69:21:15:60:69:
94:29:56:44:fb:4d:71:68:16:67:b0:9e:dc:c1:7b:
e6:47:ab:e8:32:62:51:dd:52:82:22:cf:d7:74:e7:
80:4f:02:a1:62:04:fb:ad:12:85:ba:22:02:f0:b2:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F2:E0:F2:57:67:51:21:35:84:BB:30:FF:2F:C7:59:49:20:B8:36
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/S_Lg8ldnUSE1hLsw_y_HWUkguDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.172.0/22
185.121.108.0/24
Signature Algorithm: sha256WithRSAEncryption
59:78:3a:d0:10:ce:a6:71:85:ce:0f:38:d6:8c:4a:89:fa:18:
68:44:d1:0e:30:43:cc:c6:44:48:54:5b:03:c2:e0:7d:fd:d3:
c2:3d:8c:8c:9e:94:fd:2b:9b:52:0b:49:d5:d4:3f:e8:ff:59:
cf:90:70:b2:6f:93:b1:03:46:7a:93:07:ba:dd:bb:9e:69:e5:
78:08:bc:88:4c:f5:a9:a8:63:fa:05:e6:a3:e1:cf:ce:76:8a:
ec:a3:00:47:a8:c8:72:c9:cc:1c:0d:c2:a6:5c:ab:24:72:a2:
d8:1d:05:7f:e1:a6:53:3e:f8:43:44:7e:2c:ca:16:5c:99:76:
ba:a5:05:8e:44:b8:ac:a1:a8:dd:ad:19:57:31:09:58:02:7d:
df:82:d3:18:cd:e2:77:d5:ab:20:8c:ef:c4:15:4b:6d:e0:19:
b5:8d:d6:2b:16:27:ae:d8:04:7a:95:ff:d6:bf:e7:bc:ee:a9:
76:2a:70:32:ae:ea:27:f6:f1:f3:71:bc:14:47:d5:28:51:bb:
a4:ee:d7:b5:e0:0f:ea:7b:b0:f6:1d:1c:61:13:31:84:12:62:
5d:5e:c9:d1:b9:d6:bf:73:a5:d5:45:29:a9:9b:16:7b:0b:dd:
9b:44:2a:cb:06:51:42:75:ae:07:e9:4c:c2:fd:7d:32:e8:97:
69:7f:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:35:49 2024 by rpki-client on console-fra.rpki-client.org