Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/U7uH5vJctFYUJQH0FpMX2JKApQY.roa
File: U7uH5vJctFYUJQH0FpMX2JKApQY.roa (raw, json)
Hash identifier: o8Mg6VzatmEBJlHm8UqYd+4kfVY/H3cbHJTkH5bmk94=
Subject key identifier: 53:BB:87:E6:F2:5C:B4:56:14:25:01:F4:16:93:17:D8:92:80:A5:06
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 018CC9BC249786E05F9229B85EF3E12D5E18
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/U7uH5vJctFYUJQH0FpMX2JKApQY.roa
Signing time: Tue 02 Jan 2024 10:33:19 +0000
ROA not before: Tue 02 Jan 2024 10:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47886
IP address blocks: 88.84.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:24:97:86:e0:5f:92:29:b8:5e:f3:e1:2d:5e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 2 10:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53bb87e6f25cb456142501f4169317d89280a506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:8d:4c:cd:f8:20:f8:d7:f9:48:be:a4:6e:
83:57:1b:96:be:7e:a1:a5:be:03:32:69:11:36:91:
35:38:7b:27:26:8a:e7:7b:48:92:c6:6f:02:4a:22:
fb:1a:ed:9c:34:6c:55:d5:cd:21:35:74:b8:55:ef:
fa:08:e0:04:4e:8b:ce:b3:52:6f:29:a3:6e:f3:89:
69:12:9a:f3:95:37:57:e0:4a:09:32:8b:c2:eb:67:
46:5a:37:73:ee:33:9c:fb:eb:9c:e7:28:48:e5:92:
6f:fa:aa:12:2b:75:6e:44:17:13:98:f3:a0:b8:a0:
d6:82:d0:60:f1:78:15:fd:96:83:cb:08:de:ac:b0:
2a:a2:c2:ea:7e:df:92:82:ba:77:63:01:b8:ce:9e:
3e:76:41:67:17:8f:22:06:ec:74:14:ff:de:03:a3:
a8:39:23:36:0c:6f:d7:54:5a:48:a1:bf:dd:4e:9d:
a5:f0:ac:67:91:38:69:3d:f3:ae:a0:2e:73:77:f2:
0a:5f:d6:9a:5f:13:38:1b:f1:61:22:64:4e:37:ac:
b3:91:72:fe:59:b6:62:14:36:a6:4b:87:a7:7f:d0:
f9:e8:7c:85:ac:28:f2:aa:07:bb:0d:d1:82:f1:37:
d9:80:d3:60:9a:aa:1b:9b:52:cf:39:21:34:82:f5:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:87:E6:F2:5C:B4:56:14:25:01:F4:16:93:17:D8:92:80:A5:06
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/U7uH5vJctFYUJQH0FpMX2JKApQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.152.0/21
Signature Algorithm: sha256WithRSAEncryption
66:de:66:17:08:90:1e:b6:48:ae:7b:8c:e8:2c:d4:99:ac:df:
80:b2:a0:ba:4b:1c:e7:0e:9c:a9:f0:7e:a4:0a:ce:4f:07:2a:
b1:7a:2e:cc:e7:0c:69:8d:c9:88:34:14:de:2d:87:fc:9c:74:
25:25:91:98:1f:8f:fc:83:23:42:71:e2:b9:89:39:e8:87:a8:
02:69:5b:e4:0a:a0:29:90:eb:c3:98:67:8c:b1:1d:62:16:aa:
9a:a2:62:e1:ec:10:9f:31:a1:61:35:7c:6f:f0:f0:e2:7d:6a:
37:dd:fd:64:f4:4b:be:fc:ab:ef:e0:8a:8f:d6:ec:84:a0:e6:
ca:f2:7e:cb:c5:84:d8:e0:65:a0:de:7a:a2:75:bc:b5:f5:a7:
1b:61:34:76:d5:fd:6b:4c:ab:56:be:db:db:06:8f:1d:e6:70:
bb:e3:26:0f:a2:6c:2e:12:b2:0c:df:6e:d0:af:ca:f7:c0:88:
47:90:7e:09:cc:1b:a6:26:0d:f9:e4:81:14:a8:77:4b:43:33:
be:65:fe:b9:b9:26:83:98:e1:1f:85:81:9e:37:44:8e:7a:b6:
05:ad:dd:69:d5:9b:f7:f5:f4:da:17:92:b2:7d:a5:bd:6b:6f:
e8:c5:11:3a:33:03:c2:9b:2b:ea:4f:73:0f:5a:69:65:8e:7f:
c4:57:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:21 2024 by rpki-client on console-ams.rpki-client.org