Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/RCyWf3xR1bQjmR133-lDOiSN34M.roa
File: RCyWf3xR1bQjmR133-lDOiSN34M.roa (raw, json)
Hash identifier: NNNJaJGU0RHlbGPukzxrSCZkeIExyktSnj+/x6GX7gU=
Subject key identifier: 44:2C:96:7F:7C:51:D5:B4:23:99:1D:77:DF:E9:43:3A:24:8D:DF:83
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019193745EE5B9781CF4B4D60A2456D86E06
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/RCyWf3xR1bQjmR133-lDOiSN34M.roa
Signing time: Tue 27 Aug 2024 10:49:22 +0000
ROA not before: Tue 27 Aug 2024 10:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47583
IP address blocks: 88.222.208.0/20 maxlen: 24
88.222.223.0/24 maxlen: 24
88.222.240.0/21 maxlen: 24
88.223.80.0/20 maxlen: 24
88.223.80.0/21 maxlen: 24
88.223.88.0/22 maxlen: 24
88.223.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:74:5e:e5:b9:78:1c:f4:b4:d6:0a:24:56:d8:6e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 27 10:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=442c967f7c51d5b423991d77dfe9433a248ddf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:4b:8a:52:b3:c8:e5:af:84:d2:7d:1c:c0:
b2:15:af:e1:e3:d2:10:2a:ee:97:4b:0a:5d:1e:f3:
f5:fb:36:a0:f9:ee:01:4e:25:1b:60:95:03:6b:0f:
ee:56:69:7e:de:6e:c7:cf:83:16:ff:66:4c:1a:18:
55:76:c1:8a:96:d2:d8:bc:73:6f:14:93:0b:ea:1a:
3a:11:b9:6d:ce:e7:bf:96:32:7d:e3:d4:4f:85:b6:
cc:27:39:4d:a0:74:51:d5:8b:f1:7f:97:d9:80:86:
bc:b8:ca:b0:18:c3:ef:b8:41:a4:9c:ec:34:8b:5b:
22:b8:db:59:aa:dc:0c:81:13:24:34:4f:38:2b:b9:
06:20:1e:da:3a:b1:83:b3:5f:9b:fd:72:7c:a0:2a:
9f:fc:95:a9:13:ee:08:ad:a8:3a:56:2b:ac:1f:8b:
a8:2e:e5:2c:22:1c:ca:4c:84:c6:12:96:13:f5:e1:
c1:5f:44:58:72:fc:35:41:44:82:6d:c9:47:f2:cd:
a2:e9:4e:16:b1:58:0d:50:02:f5:c5:59:d9:e2:f8:
66:b6:e5:b4:c2:79:9b:1d:4b:ab:87:e4:94:1c:d8:
f6:02:4a:d5:7c:71:35:fe:ab:12:84:9a:75:b1:7e:
70:dc:a4:67:9b:1d:b7:28:dc:b2:97:06:c3:46:5d:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2C:96:7F:7C:51:D5:B4:23:99:1D:77:DF:E9:43:3A:24:8D:DF:83
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/RCyWf3xR1bQjmR133-lDOiSN34M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.222.208.0/20
88.222.240.0/21
88.223.80.0/20
Signature Algorithm: sha256WithRSAEncryption
62:06:65:f9:2f:3b:d7:a2:98:3e:91:32:ed:f7:f8:14:d4:20:
6e:19:98:35:f6:37:0d:39:62:3e:14:11:79:ae:c7:54:76:db:
75:8e:39:a2:52:bc:e1:45:51:f4:5f:3a:c2:3e:74:05:b9:a3:
55:b9:3f:5b:fb:8f:08:e9:c6:5f:59:87:bb:0e:c8:42:87:f9:
9b:40:a4:77:9e:eb:1a:49:c6:62:45:6c:ff:19:3b:6a:7b:5f:
83:a0:4f:d2:58:e1:42:48:51:9e:4c:1f:5c:9c:0f:80:eb:8a:
73:ab:3c:e4:9d:25:3a:ba:e7:8e:5e:6d:ba:8a:bb:b5:77:b8:
2f:b8:e5:29:54:11:f3:76:92:49:95:2d:5d:e2:ec:64:3a:91:
28:88:e8:d8:be:30:a4:c7:f5:a9:e0:da:31:78:80:18:62:19:
b0:d1:15:99:6d:9c:f3:9c:59:10:9a:c9:1b:d2:f6:17:d5:b9:
43:27:9f:24:1c:78:cc:72:3f:44:b6:82:11:33:a5:5f:72:91:
29:41:b9:53:01:79:3c:4b:56:3a:0f:c2:ef:8c:b4:f4:07:33:
10:82:b5:d7:60:0e:1e:1f:5f:46:ca:cd:f8:7a:8b:82:84:15:
53:78:97:67:3b:1a:a4:69:56:1a:1e:36:61:32:b9:33:d1:a2:
fc:6e:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:08:49 2024 by rpki-client on console-ams.rpki-client.org