Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uMr62u1xxUTJx89KjzFYEYK3J3s.roa
File: uMr62u1xxUTJx89KjzFYEYK3J3s.roa (raw, json)
Hash identifier: xgUR3xLRU+VU2FnoH3TYMioZtgvOCOdmzzatLykV86g=
Subject key identifier: B8:CA:FA:DA:ED:71:C5:44:C9:C7:CF:4A:8F:31:58:11:82:B7:27:7B
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018DD577B3D8D3030AE9B1F665E2216DE0C5
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uMr62u1xxUTJx89KjzFYEYK3J3s.roa
Signing time: Fri 23 Feb 2024 10:16:48 +0000
ROA not before: Fri 23 Feb 2024 10:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 88.214.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:77:b3:d8:d3:03:0a:e9:b1:f6:65:e2:21:6d:e0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Feb 23 10:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8cafadaed71c544c9c7cf4a8f31581182b7277b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:f5:b7:a1:10:ee:b6:9a:30:33:14:54:0d:
3c:b6:b8:53:73:ac:f7:f3:77:66:7b:f0:de:3a:2d:
78:01:24:c7:7a:b6:81:e0:86:3f:c7:e2:33:d7:54:
8e:db:53:16:c1:f9:18:81:01:b4:a6:4e:18:6a:63:
71:ca:00:1f:f9:6e:2d:4f:db:50:5d:7a:28:a9:5f:
4e:44:66:58:16:44:99:36:3d:d3:5b:94:48:1a:2f:
04:ea:0b:49:b9:dd:10:4e:e9:fb:0b:f1:08:40:8b:
b6:ab:b0:6b:a9:03:a4:27:f8:2a:71:d9:59:13:16:
07:ac:f6:b5:f4:7c:fb:73:9b:04:8a:c8:48:77:d4:
15:2b:04:35:1b:b1:c0:c4:80:cc:4d:a8:a3:47:ff:
b8:fe:97:c2:ed:5e:69:6d:fd:7d:ee:70:95:f5:b3:
c2:b6:be:24:d3:16:d2:72:e7:0f:c8:93:3d:f8:40:
ff:77:09:37:8c:97:78:11:c9:58:0f:a2:95:42:40:
d1:aa:49:0f:95:f4:93:18:87:fe:1d:81:90:2c:3a:
88:d9:81:16:8d:20:4d:c9:a5:a2:44:9a:31:2a:ff:
f0:be:d1:ce:ff:af:45:ac:59:c1:df:f6:58:ed:cc:
9b:1b:11:2d:92:fc:39:21:06:24:9f:0c:5a:e4:02:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:FA:DA:ED:71:C5:44:C9:C7:CF:4A:8F:31:58:11:82:B7:27:7B
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uMr62u1xxUTJx89KjzFYEYK3J3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.52.0/22
Signature Algorithm: sha256WithRSAEncryption
83:4d:b8:91:58:25:c5:8b:fa:fe:de:76:d6:0e:8a:e3:42:76:
4d:00:1d:ff:88:bc:63:ff:54:ab:50:c9:78:dd:68:79:be:36:
10:1e:4b:d7:f9:29:c1:41:45:61:e4:2a:a6:da:10:28:e1:7a:
4b:af:16:24:30:06:54:8e:81:81:90:ff:0b:99:a3:a9:06:dd:
20:1f:12:78:74:58:0a:ba:a8:ed:cd:19:12:65:38:f4:8e:24:
72:32:49:a3:e7:26:ba:85:ae:87:67:79:94:40:69:95:8d:90:
37:ee:70:6a:7f:80:5d:93:5b:6f:5d:e6:0b:c6:32:30:83:d0:
d1:8a:ef:31:e1:55:8f:47:02:97:93:c6:f1:ad:9a:c0:31:c1:
b7:51:e0:12:4d:ce:bb:e9:75:54:97:83:b1:8f:8e:b7:f7:8b:
3e:2a:48:52:f1:a4:aa:b4:53:69:03:6a:9c:78:f3:8c:63:18:
7c:cb:10:d8:72:6e:52:3d:80:c0:57:b6:ba:53:1f:83:b4:fd:
64:60:d6:34:01:bd:d6:8f:e6:f4:6b:56:06:49:25:bc:30:e5:
9f:43:b8:94:5d:7f:f6:b8:8a:b2:76:73:ff:59:40:21:f9:f2:
f6:0f:0d:19:a0:68:44:89:31:84:74:a2:30:52:c0:cf:88:71:
c6:93:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 16:34:05 2024 by rpki-client on console-ams.rpki-client.org