Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/XConMz4OsqWcLJS53McmQapQqZw.roa
File: XConMz4OsqWcLJS53McmQapQqZw.roa (raw, json)
Hash identifier: jHRWzv7bAcsAmX6ErO+SwnSip9a14dcT4C0po91a37E=
Subject key identifier: 5C:2A:27:33:3E:0E:B2:A5:9C:2C:94:B9:DC:C7:26:41:AA:50:A9:9C
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CF3514F37DDBB83B7B0751B0A404FAB3F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/XConMz4OsqWcLJS53McmQapQqZw.roa
Signing time: Wed 10 Jan 2024 12:20:41 +0000
ROA not before: Wed 10 Jan 2024 12:20:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 88.151.62.0/24 maxlen: 24
88.209.199.0/24 maxlen: 24
88.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:51:4f:37:dd:bb:83:b7:b0:75:1b:0a:40:4f:ab:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 10 12:20:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c2a27333e0eb2a59c2c94b9dcc72641aa50a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:f3:21:b5:bc:30:02:4f:2a:7d:83:57:b3:
63:09:5b:5d:7b:73:19:e5:08:73:ee:dd:72:1a:11:
f5:e2:ee:ed:6e:6d:2b:d2:7a:d0:75:b8:18:43:32:
d2:35:18:19:e1:6d:14:ec:89:07:1b:b8:bb:af:73:
9c:3f:92:92:51:dc:24:45:5e:1b:d4:c8:c3:d3:1d:
73:c2:df:b8:59:0c:7e:16:f0:72:1c:b5:12:d9:b3:
6d:63:ae:d6:86:85:1f:9b:8d:f5:51:b7:44:72:55:
ff:8d:45:df:6a:77:b1:6a:cf:26:16:81:dd:76:f0:
62:c6:26:d0:f9:e4:58:20:62:9d:8b:12:ba:a0:cf:
20:83:ae:38:95:55:12:0c:33:03:5d:25:7a:6f:59:
e8:50:af:42:b1:85:1e:b4:ff:68:7f:40:f7:bf:c7:
db:ac:47:bf:df:93:c1:6a:ec:85:48:10:1e:a9:97:
f8:73:f0:ba:48:a5:d4:83:35:30:c4:cd:4a:e9:c6:
89:95:50:36:74:d4:8f:79:6f:46:99:b7:4a:ee:f9:
87:9b:49:4e:ab:31:82:8d:a3:b1:92:45:4f:82:a6:
7c:3c:52:f7:1f:0a:18:e9:a5:12:1d:b7:96:7f:b9:
74:c9:ad:f7:6b:de:03:53:a9:c4:6a:c3:1f:59:a3:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2A:27:33:3E:0E:B2:A5:9C:2C:94:B9:DC:C7:26:41:AA:50:A9:9C
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/XConMz4OsqWcLJS53McmQapQqZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.62.0/24
88.209.198.0/23
Signature Algorithm: sha256WithRSAEncryption
37:d7:47:11:6d:fb:c0:ca:64:aa:3d:e4:93:ab:99:81:8e:4d:
6c:21:11:f2:5e:c3:80:c2:db:dd:f8:0e:cb:56:f3:ac:ca:d5:
57:e5:00:d1:ed:0c:b7:d6:44:be:06:63:36:00:ce:df:c3:77:
cd:6d:72:6c:62:d1:29:84:07:7a:f5:b3:53:00:be:d2:c2:96:
1a:7f:f4:f8:da:6b:aa:91:9e:f3:8a:6f:7f:4b:bf:82:d4:3c:
82:9b:f3:a7:66:58:44:bf:2b:44:1b:41:10:e5:69:80:1a:f1:
2d:cc:72:32:94:33:50:2f:6d:ee:0f:ac:e2:f1:99:9d:20:f2:
3e:d1:db:b3:7d:de:b9:bb:fc:97:44:90:2a:c8:5d:95:d7:4b:
bb:38:a0:2a:52:c6:84:bb:c6:d5:85:e9:28:13:b6:da:0b:28:
d8:4d:fe:33:d4:4f:e9:84:2d:ee:1c:ef:64:10:20:77:60:3d:
2a:af:ed:14:e6:77:c9:7c:90:18:92:5b:a7:f9:bb:e4:bb:63:
6c:e5:1b:63:aa:63:57:e8:ae:1c:ad:65:35:5a:37:cd:b7:e7:
7f:ea:ce:c7:a8:f8:5d:f0:89:33:ae:8a:ef:b8:cb:d6:a4:98:
43:c1:db:b7:42:2e:6e:e4:92:62:5a:7a:cf:56:c3:54:53:8e:
8d:0e:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:24:50 2024 by rpki-client on console-fra.rpki-client.org