Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/Hyp1bpCghw2eCwbfJjWZCyNX8gw.roa
File: Hyp1bpCghw2eCwbfJjWZCyNX8gw.roa (raw, json)
Hash identifier: mIdj8iyEvO02MFpNHjBdL8Hc2sfGpXxnmXqeL9NLOdI=
Subject key identifier: 1F:2A:75:6E:90:A0:87:0D:9E:0B:06:DF:26:35:99:0B:23:57:F2:0C
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 018EC8071AB1D62206710AFECEB71352EA62
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/Hyp1bpCghw2eCwbfJjWZCyNX8gw.roa
Signing time: Wed 10 Apr 2024 12:41:32 +0000
ROA not before: Wed 10 Apr 2024 12:41:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212655
IP address blocks: 88.97.192.0/18 maxlen: 18
88.97.192.0/21 maxlen: 21
88.97.200.0/21 maxlen: 21
88.97.208.0/21 maxlen: 21
88.97.216.0/21 maxlen: 21
88.97.224.0/21 maxlen: 21
88.97.232.0/21 maxlen: 21
88.97.240.0/21 maxlen: 21
88.97.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:07:1a:b1:d6:22:06:71:0a:fe:ce:b7:13:52:ea:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Apr 10 12:41:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f2a756e90a0870d9e0b06df2635990b2357f20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:47:8c:f3:83:53:94:78:9f:8c:ac:2e:55:
ea:72:5e:fb:3e:20:17:e2:25:2c:e7:fe:49:2d:12:
91:84:33:07:21:4b:cd:d0:a1:c9:65:4c:50:62:f5:
c9:35:1f:ea:5d:77:80:51:1b:40:03:f0:b5:96:7e:
4a:f3:13:de:1f:e6:c6:32:84:e4:69:2b:d6:ab:f0:
8d:dd:96:10:75:88:0f:03:f9:42:a2:b3:a5:1b:1f:
1e:9d:8f:9b:0c:27:53:d8:02:0b:77:e5:f6:85:67:
13:6a:60:30:e9:cd:55:a2:5b:6a:9d:1b:ef:d8:b4:
35:98:de:5d:d0:a9:af:cf:95:9f:09:37:97:fe:02:
de:b7:5e:76:ca:68:f4:bd:76:75:b8:7a:50:96:bd:
bf:65:fe:b5:95:0e:91:ef:c0:5d:2d:a6:f8:a9:c0:
aa:33:66:64:19:81:26:85:5b:10:a4:f8:8e:12:7b:
42:ba:de:de:e4:e1:6b:ae:83:72:b4:a7:54:a6:ef:
c7:ee:d4:38:7c:3b:09:e7:bc:7d:27:9b:c5:1c:d1:
dc:cd:d3:dd:91:0e:b7:0c:a9:97:90:4d:75:51:c4:
01:b2:1f:36:51:3a:ac:48:46:04:2f:98:75:76:f6:
f9:33:14:a0:8c:71:48:33:65:7c:7f:60:2b:f5:76:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2A:75:6E:90:A0:87:0D:9E:0B:06:DF:26:35:99:0B:23:57:F2:0C
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/Hyp1bpCghw2eCwbfJjWZCyNX8gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.97.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:d2:65:f9:1b:8b:20:50:d9:f2:07:7c:ea:02:06:e8:84:4a:
55:ce:58:16:48:8c:c2:40:80:30:44:68:09:f4:6e:3a:0f:ff:
8a:29:b1:59:16:60:72:0c:a1:10:c4:6d:b6:71:9a:17:e2:e9:
dc:66:b9:18:73:bb:a7:2e:fb:cd:0e:47:33:44:97:c3:67:8e:
3f:24:48:ee:af:22:10:df:5e:55:9a:e0:6e:fc:59:0d:5c:0a:
d4:e4:2f:3d:f0:46:cd:53:4a:c0:78:f2:63:eb:19:99:8d:48:
76:06:26:be:41:f6:23:84:88:78:8c:46:dc:3b:78:34:1f:b2:
1b:ad:38:05:35:52:84:74:a3:1b:ee:3c:a3:16:dc:38:54:05:
c1:db:a2:16:f6:c9:ee:50:de:2c:cc:aa:01:6f:5f:65:eb:b8:
f7:1a:22:7f:52:5e:c2:7d:73:91:87:31:f4:a5:ac:32:a2:0d:
27:1c:c3:24:a0:35:0d:83:a8:ae:5d:12:dd:be:79:07:3d:0f:
99:be:5d:ad:0d:3d:c4:32:86:03:7a:ce:66:d8:dd:a7:29:db:
04:90:94:43:89:73:b2:27:f8:fb:bb:b4:f1:91:46:ea:a6:b8:
35:76:61:7a:f7:f4:a4:d0:c4:5b:93:ed:07:bc:1a:8b:7d:d5:
5e:11:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:19:43 2024 by rpki-client on console-ams.rpki-client.org