Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/GDdYy6xMgTSXJyJpRsT95KyIndY.roa
File: GDdYy6xMgTSXJyJpRsT95KyIndY.roa (raw, json)
Hash identifier: tGyA8qBdtjp2e6Vus8j870sP0sCKEHn4BQmKB2rqoaY=
Subject key identifier: 18:37:58:CB:AC:4C:81:34:97:27:22:69:46:C4:FD:E4:AC:88:9D:D6
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 018CC7274573F18E98F614A3BC09A4E2DF2C
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/GDdYy6xMgTSXJyJpRsT95KyIndY.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213193
IP address blocks: 88.218.157.0/24 maxlen: 24
88.218.158.0/24 maxlen: 24
88.218.159.0/24 maxlen: 24
88.218.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:45:73:f1:8e:98:f6:14:a3:bc:09:a4:e2:df:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=183758cbac4c81349727226946c4fde4ac889dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a9:e1:e9:9c:79:b0:71:73:9a:14:32:01:87:
d4:15:00:cb:dc:e7:d3:f5:03:c7:ce:8e:ab:85:ff:
05:5a:0a:69:f3:1c:50:dd:3e:e0:46:c7:ad:ce:47:
16:2a:cc:b3:dc:a2:d3:92:b5:2d:7c:e2:9f:47:dc:
83:a7:5e:31:43:bc:c5:87:d5:18:26:d4:b9:97:c7:
27:d9:55:5e:64:66:a9:43:16:37:b5:ff:c6:39:17:
a8:70:92:d6:dc:ec:8a:44:5e:82:8f:76:bc:cf:cc:
21:17:96:70:86:18:bd:77:51:48:a6:9b:93:68:2f:
8c:9e:81:87:eb:8e:78:91:a5:3e:93:37:76:36:56:
81:c2:c0:32:a2:56:71:5a:f5:6a:e1:71:21:dd:b5:
8e:8c:bc:d3:91:01:1c:b7:f0:eb:8d:5d:7f:bb:a3:
dc:ea:14:9e:d0:78:7a:f5:20:ae:33:86:1e:f8:63:
d8:0b:5c:4f:e6:97:c0:c9:c4:b2:8f:74:92:86:e1:
0b:28:7b:6d:14:97:52:2a:62:17:70:ee:d7:c7:c7:
b3:86:84:7c:49:53:ad:8d:29:9b:fa:47:e7:2f:c0:
5a:96:15:72:51:f0:12:65:b4:ef:34:8b:60:ed:79:
53:bd:5c:e9:82:88:d6:88:b1:90:a1:48:32:2b:21:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:37:58:CB:AC:4C:81:34:97:27:22:69:46:C4:FD:E4:AC:88:9D:D6
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/GDdYy6xMgTSXJyJpRsT95KyIndY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.156.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:a9:c0:c7:c4:79:b5:c6:27:57:3c:16:66:8d:df:11:28:6f:
9a:aa:1f:4a:1a:3d:de:ee:bb:f0:e4:f6:46:97:c0:36:23:bc:
03:35:1e:ec:62:9a:38:90:f0:a2:ae:3d:cc:d8:a3:95:d3:4c:
78:07:1f:ab:3a:a2:52:e1:17:d9:c4:ff:88:6a:16:ec:00:5f:
db:72:c2:88:8f:0d:08:a0:c6:3d:06:fd:7a:e7:da:6c:03:c1:
56:d4:81:60:da:f6:28:55:b0:5b:b3:8a:93:6d:5f:73:e5:c6:
eb:25:ce:51:cf:73:85:a7:a3:f5:f1:09:75:fc:98:07:9b:56:
04:a7:59:f2:76:ee:9a:52:47:a6:61:4e:ec:95:88:ca:2a:e1:
98:17:f5:47:6c:8a:d3:c6:e8:fa:a0:4d:40:c0:f9:d4:2f:10:
2b:ef:12:c0:ad:e5:35:0d:7a:20:0d:70:af:4f:4a:4c:91:89:
37:b8:bf:60:c3:1a:88:c1:2b:da:15:40:c8:73:57:b4:a9:ec:
5f:fd:37:1a:cb:17:ff:c4:8b:ec:8e:7f:a2:f2:57:69:77:2f:
6c:11:f6:af:50:76:83:b9:19:78:cb:0d:63:8e:47:eb:d1:2b:
05:ee:3d:c0:5f:9e:f9:5a:4c:35:33:d4:ee:51:ac:ee:eb:9f:
90:c5:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:35 2024 by rpki-client on console-ams.rpki-client.org