Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/mUiOdnSfkO6ooXT96hXEw8DMtQ0.roa
File: mUiOdnSfkO6ooXT96hXEw8DMtQ0.roa (raw, json)
Hash identifier: jCr5xDvWM+7xLHy5HYmCSZ7g/wSsH274Kuqt7jJw68w=
Subject key identifier: 99:48:8E:76:74:9F:90:EE:A8:A1:74:FD:EA:15:C4:C3:C0:CC:B5:0D
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018DE5F18BBF51A5035289E7BE1EAC1E1CF1
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/mUiOdnSfkO6ooXT96hXEw8DMtQ0.roa
Signing time: Mon 26 Feb 2024 15:03:48 +0000
ROA not before: Mon 26 Feb 2024 15:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 88.80.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:f1:8b:bf:51:a5:03:52:89:e7:be:1e:ac:1e:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Feb 26 15:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99488e76749f90eea8a174fdea15c4c3c0ccb50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:9c:79:c5:83:d2:f6:1d:05:f8:dc:ed:30:
82:04:34:e3:cc:c2:40:e6:b8:b0:b8:79:4f:bf:5d:
dd:d9:c1:1d:db:86:b8:1e:46:d7:6f:16:32:28:f6:
74:cc:20:2e:4b:2f:23:b4:d9:6e:80:e6:87:32:8f:
39:eb:8b:fc:34:8b:e1:a6:0a:8a:65:77:08:19:aa:
9f:5d:f2:81:92:00:fc:00:a8:55:96:d7:31:10:40:
14:ac:eb:1c:93:c0:9c:29:03:bd:06:95:ee:a3:89:
3f:14:b3:07:88:8f:84:32:ee:9f:61:ad:9d:db:94:
49:75:9a:77:48:2d:e9:60:c1:7d:66:54:5a:47:2a:
91:b4:63:b4:49:26:ad:bf:7a:3a:e0:14:8e:4a:ee:
66:f4:b6:31:06:f7:05:ec:23:87:58:72:ab:05:29:
d6:02:d3:82:6e:43:ca:9c:22:99:59:20:55:15:83:
d6:a5:ae:73:0c:6f:a1:45:f2:31:f7:c3:d6:bb:3f:
d7:52:a2:9d:6d:f2:4d:62:35:7c:52:31:e4:4f:dc:
4a:11:27:b8:ab:8b:c8:d4:56:1a:40:3f:35:0c:73:
15:af:05:83:90:df:4b:6a:c0:1e:83:2e:a5:0f:db:
3c:b8:57:b1:4b:d9:b4:56:34:6e:8e:ab:1f:24:49:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:8E:76:74:9F:90:EE:A8:A1:74:FD:EA:15:C4:C3:C0:CC:B5:0D
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/mUiOdnSfkO6ooXT96hXEw8DMtQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.136.0/24
Signature Algorithm: sha256WithRSAEncryption
01:20:11:cd:45:ba:c0:40:09:eb:0c:95:04:b1:3d:d7:e6:ea:
9e:b4:6e:db:ee:fb:7e:9a:0c:55:b0:b6:9f:25:79:11:fb:4b:
a3:41:4c:a5:31:bc:8e:f4:b4:65:dd:6a:62:a6:2e:e1:c0:7e:
89:5a:82:a6:d2:17:17:c9:d4:0b:2a:ab:cf:3c:b4:7e:55:84:
64:89:bf:04:1e:30:41:a6:ef:be:f1:8b:eb:4e:67:13:cb:71:
d0:da:aa:6f:7a:ce:55:ed:61:9e:ea:f1:3e:44:2d:9d:fe:7d:
6a:72:36:ce:11:bd:70:fb:a3:ba:69:c6:d8:91:f9:8f:5c:b2:
82:9d:78:79:06:b0:08:28:87:74:cc:6d:ff:8f:b8:67:d4:29:
eb:22:00:1f:15:81:f5:51:20:96:cf:e9:9f:f7:06:dd:81:a2:
e3:a1:5c:ec:ef:aa:3d:8e:9d:52:7b:8d:d2:57:78:5c:f0:eb:
b2:25:10:a1:36:b5:58:94:41:4c:59:21:09:9c:b2:f4:ec:e9:
a1:62:30:e0:09:3d:b9:79:cd:25:10:c9:ca:72:65:0b:ca:9e:
6c:ae:67:f0:de:23:c1:ad:e2:18:a5:a0:da:05:11:28:8a:25:
bf:ab:0c:7f:e5:03:55:69:4a:f0:28:d2:03:48:a5:68:f1:46:
74:60:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:10:42 2024 by rpki-client on console-ams.rpki-client.org