Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/I3HJIV_MzoOsySZFUa28RaJLQLE.roa
File: I3HJIV_MzoOsySZFUa28RaJLQLE.roa (raw, json)
Hash identifier: ToEWhpwHi3+WapyL9bGhPXujvb+xf+nuIA87QjuZKAs=
Subject key identifier: 23:71:C9:21:5F:CC:CE:83:AC:C9:26:45:51:AD:BC:45:A2:4B:40:B1
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 018CC5DD120C37219D93F8B1B4D9DB3DE86F
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/I3HJIV_MzoOsySZFUa28RaJLQLE.roa
Signing time: Mon 01 Jan 2024 16:30:48 +0000
ROA not before: Mon 01 Jan 2024 16:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 88.214.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:12:0c:37:21:9d:93:f8:b1:b4:d9:db:3d:e8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Jan 1 16:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2371c9215fccce83acc9264551adbc45a24b40b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:9c:85:e3:c0:d2:3d:7b:f6:a3:54:33:d7:
4f:df:79:8d:24:9e:70:2d:64:0e:79:75:00:0a:e5:
9f:96:11:e1:6a:be:9a:fe:19:e5:98:de:94:68:f6:
a2:31:38:f8:11:1b:87:21:cf:a5:45:5d:4d:82:25:
15:35:99:86:41:56:51:e6:c1:c5:e1:d7:e0:4a:95:
08:5c:78:0d:19:c3:fe:e3:dd:c5:6e:bc:c4:a7:ba:
9e:d6:0e:40:f2:eb:de:6e:a6:5d:02:b6:04:03:15:
36:7a:6b:c9:b9:08:c2:77:8b:9e:8b:49:f7:f9:0c:
d5:99:66:cc:e7:35:de:c6:98:10:b1:63:93:c9:a0:
51:88:75:74:67:d0:26:2a:77:a0:80:9e:00:62:60:
92:fa:bd:43:77:48:70:77:3b:ea:d2:0a:5b:a9:94:
aa:dc:07:57:17:bd:45:7f:dc:45:81:c6:20:4d:28:
4e:74:81:c6:4c:fa:a5:66:1e:5f:8e:d5:92:71:74:
08:42:d6:26:2f:c4:54:1c:32:a1:50:f1:8b:10:25:
51:44:ee:c7:47:90:97:7f:74:f3:20:69:bf:c9:79:
d2:88:97:54:ec:be:82:ee:ee:4a:8c:3d:94:a7:1f:
8d:63:b3:2f:82:82:1d:81:a3:a2:ed:38:3d:33:ac:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:71:C9:21:5F:CC:CE:83:AC:C9:26:45:51:AD:BC:45:A2:4B:40:B1
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/I3HJIV_MzoOsySZFUa28RaJLQLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.41.0/24
Signature Algorithm: sha256WithRSAEncryption
02:89:93:85:80:bd:65:58:8c:0f:62:70:c3:b9:84:0a:bc:ce:
50:a6:f4:ba:48:58:34:e9:e1:fc:b8:15:37:ef:7f:f5:a4:59:
e1:dc:29:05:f9:28:66:25:a5:4e:04:18:4f:17:10:28:8d:57:
09:fa:64:03:7f:03:c6:ab:4d:6d:6c:d1:e0:16:0b:bc:ce:ef:
44:f1:9c:3a:c8:1e:26:fa:8e:45:4a:01:8c:11:b4:fd:25:28:
ab:35:8d:6d:53:58:50:b4:76:a1:8f:8f:73:da:f9:2d:07:76:
ac:ef:f2:53:13:d3:a3:67:f4:94:ae:da:87:5e:45:7d:f1:9d:
cd:6c:cf:8d:e7:24:bb:12:77:5d:f7:14:82:88:aa:6a:d0:3c:
b1:9b:db:12:65:01:b2:53:70:8b:e7:99:a8:20:45:86:d5:69:
fb:1f:1a:75:29:e7:7a:db:36:18:24:b6:78:5f:16:24:fb:4d:
05:fa:d1:8f:51:cf:35:d9:fd:0e:f5:74:59:38:aa:71:f1:3e:
1f:0e:db:91:48:97:fd:76:bd:e4:e3:43:c4:1e:97:c1:8e:e2:
f9:65:53:d7:5f:f7:6c:4e:14:0a:41:97:b2:42:b6:d5:a3:bd:
9d:10:8a:a9:04:96:83:f2:c1:f3:02:96:a6:bd:53:e3:5a:22:
c7:23:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:44:46 2024 by rpki-client on console-ams.rpki-client.org