Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/6Im1MQa2KOn_5FJw_Y5sT1kcOo4.roa
File: 6Im1MQa2KOn_5FJw_Y5sT1kcOo4.roa (raw, json)
Hash identifier: Uw397wxKNNCs0ZGjg90HETEVz3LYpQadtmLnR1AiBIw=
Subject key identifier: E8:89:B5:31:06:B6:28:E9:FF:E4:52:70:FD:8E:6C:4F:59:1C:3A:8E
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 018CC26D78EB935AC40943D468058B11E5E0
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/6Im1MQa2KOn_5FJw_Y5sT1kcOo4.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212652
IP address blocks: 88.213.208.0/24 maxlen: 24
88.213.208.0/23 maxlen: 23
88.213.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:78:eb:93:5a:c4:09:43:d4:68:05:8b:11:e5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e889b53106b628e9ffe45270fd8e6c4f591c3a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:98:6f:61:cc:c9:8b:ad:e4:a8:34:18:93:
37:62:ef:e7:5c:62:68:05:fa:45:2f:76:0b:91:f7:
ca:13:ff:c7:9f:67:5d:c1:33:ec:6e:02:1e:5d:6a:
1a:81:83:35:1b:02:5c:7b:34:e5:2e:24:16:71:3b:
d2:70:46:05:82:e2:1d:9f:cc:f0:6b:36:91:9e:91:
6f:23:a1:b3:68:2c:a6:d7:ee:a0:87:05:0f:1a:38:
80:df:03:44:a1:41:bf:30:28:e8:cd:cd:71:fc:f8:
3f:69:1d:05:21:c0:31:e6:28:2b:23:2f:8b:e2:5e:
7f:72:4a:82:08:17:e9:26:e4:2f:77:0e:ea:20:0c:
d1:03:c4:a8:03:d2:ed:ac:1e:62:e3:ec:b0:e6:84:
7d:51:42:8e:ad:06:c1:ce:74:21:4e:27:25:62:39:
7d:b0:ca:4a:c9:6d:af:1b:48:0c:55:4a:cb:a8:43:
0a:c4:15:be:a6:f8:7d:b2:72:c4:13:0c:24:17:ec:
64:a9:06:2c:62:fa:7d:08:cb:e6:85:12:5d:3d:bf:
4a:a7:40:43:83:76:ec:56:e4:52:98:13:ea:f8:31:
6a:7a:ae:18:76:55:a7:9b:e3:bc:fd:1b:99:bc:fa:
7c:9c:dc:e8:01:f9:d7:e2:ea:99:92:fd:6c:37:7c:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:89:B5:31:06:B6:28:E9:FF:E4:52:70:FD:8E:6C:4F:59:1C:3A:8E
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/6Im1MQa2KOn_5FJw_Y5sT1kcOo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.213.208.0/23
Signature Algorithm: sha256WithRSAEncryption
95:43:66:a5:a9:23:ce:97:8c:bd:1d:fe:c3:61:7c:0a:e6:a1:
6d:63:9d:66:b7:91:96:29:d0:2e:78:13:a9:e4:18:5b:e5:05:
26:c8:37:bd:a3:98:2f:7c:60:45:d8:c5:d1:01:33:a1:63:89:
8a:a0:63:66:60:af:f4:1e:5c:f2:f0:e1:71:88:9f:78:0d:71:
8e:17:d6:fd:60:79:59:35:6e:e4:71:79:9e:1a:bc:3a:40:83:
5d:39:94:2a:b0:f5:20:18:66:62:2f:fb:e8:ea:c6:ad:f6:15:
77:f5:50:b5:d3:64:2c:fe:b6:1c:dc:04:95:b1:5a:5f:3e:53:
a7:66:c2:77:3d:e8:99:f0:f4:9e:6b:8c:15:69:e1:6a:4e:5e:
ef:28:96:4e:d6:d4:48:4e:9e:08:d2:a4:5d:71:6e:29:56:60:
e9:de:af:51:7b:bd:b4:8e:64:f7:78:81:0d:7e:ee:b1:b1:bc:
ea:53:35:f4:ad:a1:b6:43:40:8d:b4:24:36:88:61:bf:79:d0:
d9:9e:bb:55:2a:98:6b:ef:bc:b0:f7:52:3a:6a:f0:37:7b:92:
45:98:e6:fe:c8:c0:f0:a0:fe:d3:de:6c:a9:92:8b:62:11:b1:
f1:4a:bf:56:08:28:57:5a:1f:ab:86:98:89:7d:ed:24:57:b2:
f4:f1:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:27 2024 by rpki-client on console-ams.rpki-client.org