Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/2ApIqqjcTOXDsU5Zt2_T0FYyVd8.roa
File: 2ApIqqjcTOXDsU5Zt2_T0FYyVd8.roa (raw, json)
Hash identifier: xw7JwCPd3CZyDZ905tt6CbDs4X32yFtfxG1I4dZh2Qw=
Subject key identifier: D8:0A:48:AA:A8:DC:4C:E5:C3:B1:4E:59:B7:6F:D3:D0:56:32:55:DF
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 018CC348C5712CD68B6936D5A3DE140B41B4
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/2ApIqqjcTOXDsU5Zt2_T0FYyVd8.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24579
IP address blocks: 193.110.89.0/24 maxlen: 24
193.111.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c5:71:2c:d6:8b:69:36:d5:a3:de:14:0b:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d80a48aaa8dc4ce5c3b14e59b76fd3d0563255df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:23:ac:24:f7:28:f5:3d:0b:8c:c6:3d:0c:
8b:d5:4d:2c:3e:dd:63:d5:4e:9b:a0:b0:02:f6:fe:
f4:b1:b5:d1:bd:20:86:06:53:08:9d:e4:1a:b6:66:
a4:2b:3d:99:c3:8a:a9:3b:d9:f6:4a:72:ca:39:6b:
5d:40:54:36:5e:90:de:54:59:35:6b:ac:c3:76:2e:
64:5b:99:bf:5d:27:0c:b8:ab:0c:cc:a8:1a:9d:5b:
98:c6:7d:1b:fd:f1:2e:1c:98:54:3e:29:a7:df:f5:
b3:78:39:c7:94:33:52:63:aa:ba:06:a4:f5:95:9f:
d9:7b:63:b8:f4:5a:d1:ff:6d:82:03:ad:7e:48:e5:
00:00:2e:36:c2:4a:71:80:4b:59:28:01:08:2b:dd:
d3:d9:5f:bc:d1:5a:b0:52:79:52:2c:9d:e4:b4:52:
25:94:28:b7:2e:6b:3f:66:c9:3b:76:57:89:e6:f4:
2d:45:92:35:60:26:15:bc:93:e8:24:43:92:4d:19:
68:d0:5d:69:4f:eb:84:b0:30:0f:45:e2:bb:ec:8b:
16:e1:c5:75:06:6f:ba:22:ad:1a:f2:c0:ed:85:fa:
93:5b:87:d4:ed:bb:1f:66:be:b4:0b:56:26:04:e9:
c6:0b:1d:35:4d:6c:92:69:da:9e:50:24:35:ef:90:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0A:48:AA:A8:DC:4C:E5:C3:B1:4E:59:B7:6F:D3:D0:56:32:55:DF
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/2ApIqqjcTOXDsU5Zt2_T0FYyVd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.89.0/24
193.111.188.0/22
Signature Algorithm: sha256WithRSAEncryption
71:e5:12:03:6d:3d:b9:52:de:88:eb:e0:5a:91:0a:3c:fb:b1:
5f:b4:db:0f:86:f3:ed:0a:5d:65:b1:f0:cf:b1:89:1f:17:2f:
fb:7c:aa:27:1e:c5:84:1c:7d:3e:7e:01:c1:e2:50:e6:ac:77:
ae:4a:28:d0:95:2e:d7:05:84:9a:d2:00:fe:02:2d:9b:36:8c:
3d:5f:c7:21:e8:f7:47:79:ae:00:41:d3:b1:d6:be:cf:59:d8:
7a:d2:f5:1f:88:c4:3c:cc:f9:1b:9e:d1:17:c8:12:6b:d1:d2:
3e:06:20:ac:70:fa:cb:32:6b:85:9c:17:71:c7:18:31:5d:e3:
10:f0:ed:8b:61:26:01:54:98:35:50:e1:30:f9:b4:d0:b8:3f:
f7:80:4f:da:b6:88:60:1a:db:14:86:d8:26:7d:1b:1c:ca:74:
04:40:45:2b:dd:80:7a:4a:6a:1c:01:65:86:ec:79:f7:38:c0:
dc:8b:0e:64:85:f2:30:08:db:cc:db:7d:fb:8d:dd:92:7a:36:
63:d7:34:84:e8:ef:68:e9:18:25:cc:12:f0:18:2c:87:b1:00:
ee:d4:4b:20:8c:8d:e7:55:38:68:53:78:5c:2a:65:37:e9:30:
3c:ff:55:b9:e2:46:84:8e:cb:90:b3:ca:62:c2:73:f2:55:3f:
36:29:e8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 00:13:28 2024 by rpki-client on console-ams.rpki-client.org