Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/BB9oU9E7t_zmuUsEp2GNT0VjpIk.roa
File: BB9oU9E7t_zmuUsEp2GNT0VjpIk.roa (raw, json)
Hash identifier: EsuVRjeFs4hTqJWol9B5yeniZFmig2jFjiySKR2OX6w=
Subject key identifier: 04:1F:68:53:D1:3B:B7:FC:E6:B9:4B:04:A7:61:8D:4F:45:63:A4:89
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 019336802D2BB704E4DEA920941BD6930995
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/BB9oU9E7t_zmuUsEp2GNT0VjpIk.roa
Signing time: Sat 16 Nov 2024 19:43:09 +0000
ROA not before: Sat 16 Nov 2024 19:43:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 88.218.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:36:80:2d:2b:b7:04:e4:de:a9:20:94:1b:d6:93:09:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Nov 16 19:43:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=041f6853d13bb7fce6b94b04a7618d4f4563a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:db:a7:11:6e:af:ed:fb:6a:a1:8b:9c:9e:
8f:a5:97:4b:f7:e0:e9:c4:fa:f2:5a:8b:df:b8:e8:
40:f7:5f:dd:e3:52:ca:33:5b:e9:bf:2d:b9:ff:f5:
17:c9:33:dc:ef:a9:5a:39:d5:93:07:89:f6:e5:41:
33:32:a4:cb:34:02:97:eb:f1:a8:7f:88:91:14:36:
2b:23:e9:44:0d:d9:94:c8:cd:6d:5c:9e:7a:d1:d5:
c9:92:45:92:13:c8:20:e4:df:55:cc:23:4e:01:af:
3e:16:0f:d3:2c:e0:b5:db:7c:6a:77:84:74:f9:50:
db:e9:ec:ab:cd:b9:27:84:9c:af:d0:96:d8:07:8d:
25:bb:da:1b:ec:d2:5a:34:23:9a:8c:06:0b:a3:de:
f7:11:c2:04:80:91:fc:59:07:67:17:3b:d6:49:d7:
50:c6:a4:73:13:15:bb:46:a2:b7:c1:8a:71:90:5b:
6a:86:f0:81:67:35:14:f9:5d:79:a2:df:85:df:a3:
b3:13:6f:b9:de:d8:08:af:66:0e:e9:16:72:07:8a:
d1:71:2e:b2:8b:ad:3f:3d:a6:55:6c:e9:44:9e:7c:
4d:21:ca:4a:6b:8f:20:c4:94:9c:e5:f0:fc:2c:8d:
04:88:1c:95:f8:15:7e:ee:20:00:ed:8b:a4:56:3d:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1F:68:53:D1:3B:B7:FC:E6:B9:4B:04:A7:61:8D:4F:45:63:A4:89
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/BB9oU9E7t_zmuUsEp2GNT0VjpIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:68:2f:61:d7:1e:30:d8:2a:21:b4:74:a4:59:ac:1b:45:60:
a1:4b:11:d9:37:fc:5d:36:ec:bf:d2:5c:c3:e9:26:48:5f:d5:
cb:6f:3e:ea:0b:08:24:23:4b:7c:08:a1:46:29:a9:82:a8:ac:
e7:95:31:7a:21:00:18:ed:f3:81:15:88:da:64:48:15:50:11:
7d:f2:be:36:d2:21:f6:19:f0:e9:ce:4d:75:ca:54:b5:fd:24:
7b:24:f8:77:4e:3a:68:67:50:fa:02:a1:42:6e:a5:3f:d1:81:
aa:4d:56:07:ce:8f:f6:e3:19:9b:a6:c5:71:73:ed:93:7a:f2:
59:3d:29:94:1d:56:1a:c9:2d:a8:47:82:7b:64:7e:e1:83:1e:
33:c7:4b:e9:9c:ff:b9:4b:28:82:06:ed:58:0b:f7:bb:94:dd:
40:9b:80:15:bd:73:92:43:d8:74:90:77:9b:10:64:fa:4f:5f:
67:46:1f:37:eb:e9:b4:84:87:b9:f1:9d:49:23:5d:f4:e8:69:
06:91:8d:d5:43:00:69:f0:a6:78:fd:77:e2:b7:65:49:7d:70:
90:33:17:f7:01:cc:e1:e8:99:dc:c6:38:77:41:d9:7a:e6:4e:
20:43:c6:2a:fd:f5:05:ae:bb:da:bf:db:5c:c5:22:4b:0a:4e:
2a:26:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:57:53 2024 by rpki-client on console-ams.rpki-client.org