Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EsI7ujn32y4U8uFwbmeTekyo2Hg.roa
File: EsI7ujn32y4U8uFwbmeTekyo2Hg.roa (raw, json)
Hash identifier: M8Z2yuO7Rc3GojBg4Cy8SjIRfAJ81uPPHSAkaRoTa0o=
Subject key identifier: 12:C2:3B:BA:39:F7:DB:2E:14:F2:E1:70:6E:67:93:7A:4C:A8:D8:78
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01928017BCB2E0829B886729F05B5595F6E2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EsI7ujn32y4U8uFwbmeTekyo2Hg.roa
Signing time: Sat 12 Oct 2024 09:38:11 +0000
ROA not before: Sat 12 Oct 2024 09:38:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215622
IP address blocks: 88.209.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:80:17:bc:b2:e0:82:9b:88:67:29:f0:5b:55:95:f6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Oct 12 09:38:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12c23bba39f7db2e14f2e1706e67937a4ca8d878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:08:53:27:38:ad:c9:d7:b3:8e:3b:a1:5c:
fd:7c:11:2d:80:10:e4:1c:e0:bf:d7:7e:e6:91:11:
d4:04:5b:27:46:9c:af:6b:09:26:90:93:49:11:e6:
d0:ad:e9:77:85:c0:4a:cd:6b:07:c3:6c:df:8e:17:
30:00:40:23:53:55:21:4f:10:b1:93:10:82:55:0e:
92:02:4c:2d:63:77:36:fe:55:92:be:5d:39:a2:11:
83:82:bf:43:86:8b:bb:c1:78:dd:e1:e3:98:f2:d6:
61:b3:ca:70:6b:34:96:12:ff:6a:e5:8e:3d:f0:89:
fb:e4:05:3f:36:c0:66:bc:b9:2c:72:fe:9d:fc:37:
37:84:a4:ee:89:8c:57:ff:0b:7a:73:3e:a1:8a:66:
a6:cc:5b:35:28:4e:3b:3f:05:5a:8a:a6:a4:fd:c7:
0a:0b:ef:1d:d8:53:a7:26:36:30:61:e1:7b:59:36:
2e:5b:f9:a0:44:1c:55:2b:9f:02:79:9f:41:a5:b3:
af:f4:96:26:fc:b9:8e:36:32:41:20:4e:a5:ce:c8:
7d:6c:df:52:00:69:0d:e5:38:3f:c0:ba:4e:7f:12:
23:ed:90:13:50:4d:29:d2:35:52:5c:00:96:f7:c9:
40:d9:8c:6b:46:20:83:dd:71:b4:c5:7c:97:4c:57:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:3B:BA:39:F7:DB:2E:14:F2:E1:70:6E:67:93:7A:4C:A8:D8:78
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EsI7ujn32y4U8uFwbmeTekyo2Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c7:7b:11:0e:c0:b8:8a:88:32:80:f9:56:7a:07:6c:9b:b0:
53:f1:1f:13:60:0f:e8:dd:23:a9:6c:6a:3c:42:94:67:49:d2:
67:6d:da:5a:f4:a2:ff:90:97:dd:8b:4a:bd:f5:d9:56:a7:6b:
46:c7:6c:8d:21:e8:92:90:87:8f:ba:ee:e6:2f:8d:a8:5e:06:
54:d1:c0:0a:2c:fa:5e:64:22:21:3a:7b:b1:52:a9:a3:a6:d1:
4f:0b:a9:53:8c:61:30:9d:19:02:1b:d8:07:71:fa:6f:46:2c:
c9:26:8e:0a:70:cd:2b:bd:cc:42:0a:5b:55:2d:5c:38:d9:a8:
2e:b8:8c:51:f1:94:f5:b0:db:d7:34:ed:48:c2:3d:29:4d:45:
d0:58:ad:21:07:f2:20:47:a0:74:bb:2a:77:ff:be:90:92:74:
e3:d2:c1:84:31:c1:6f:4a:dd:17:ba:3f:a7:12:fb:bb:f9:f1:
b8:46:71:76:c1:93:68:e3:74:c8:1a:5b:1c:e2:78:1a:17:a1:
a4:96:4f:30:f1:3f:90:2e:b5:ae:58:22:b9:d9:fc:0b:ca:74:
5d:94:02:30:81:2c:5f:f0:40:f6:7e:04:ad:62:88:af:0d:f2:
03:c3:b2:1e:42:0f:29:4b:cf:ac:bb:46:e5:87:99:62:62:3f:
55:42:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:37 2024 by rpki-client on console-ams.rpki-client.org