Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_z4IaGmb26t2d5DuO4mcncllw5M.roa
File: _z4IaGmb26t2d5DuO4mcncllw5M.roa (raw, json)
Hash identifier: Bi0hnnmbwZ+PYfiogxMyMc5rYz15MCEuSJer4CCt7/g=
Subject key identifier: FF:3E:08:68:69:9B:DB:AB:76:77:90:EE:3B:89:9C:9D:C9:65:C3:93
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018DA8E42AB99C1C949706BECED13BA75592
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_z4IaGmb26t2d5DuO4mcncllw5M.roa
Signing time: Wed 14 Feb 2024 18:32:21 +0000
ROA not before: Wed 14 Feb 2024 18:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 88.209.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:e4:2a:b9:9c:1c:94:97:06:be:ce:d1:3b:a7:55:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 14 18:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff3e0868699bdbab767790ee3b899c9dc965c393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:b3:16:ba:85:ec:3f:7a:28:a7:4c:f7:dc:
6e:a6:2b:fa:1f:cd:ac:e0:fa:d5:5c:9b:80:82:c0:
c5:82:bc:10:d5:83:33:77:f3:eb:69:15:3d:87:ce:
c9:63:ea:ab:a9:e3:0a:71:10:dc:38:5e:d7:c2:48:
fa:e0:f0:5a:ca:d5:1d:61:88:79:a4:41:56:4f:7f:
a2:1e:18:da:cf:99:8e:56:44:7c:c1:b5:93:3c:02:
81:87:02:58:a5:99:ce:ba:c5:d5:b0:7a:61:91:96:
af:59:a5:53:48:f2:6c:54:1d:39:e5:d6:19:6e:78:
6f:03:d1:62:08:8d:42:01:fa:0f:2b:d1:e9:25:ae:
b5:01:7b:70:42:c8:ef:8d:80:b3:9e:63:dc:3c:f3:
75:d1:56:85:67:bc:b0:be:43:1b:86:68:5c:da:48:
29:02:95:d9:cc:1f:1b:64:b2:0c:d7:1c:14:d1:8d:
6d:1f:6e:55:b6:42:13:62:20:39:2a:05:98:a8:b6:
11:f7:3a:93:2d:23:28:3e:dd:60:e9:88:27:a1:5c:
69:8b:30:05:c3:64:7d:90:a5:47:f9:7b:0e:b0:66:
e5:d0:e1:5c:a3:bf:f1:fd:c7:45:7a:16:93:8c:70:
f8:88:6c:6b:db:a4:57:7a:b0:bf:71:ff:b2:9b:17:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3E:08:68:69:9B:DB:AB:76:77:90:EE:3B:89:9C:9D:C9:65:C3:93
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_z4IaGmb26t2d5DuO4mcncllw5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
42:10:58:9d:32:77:a0:a2:c1:8e:5c:0a:e9:0e:b7:13:aa:69:
34:81:c9:39:dc:40:bb:05:62:ea:03:9e:0b:27:57:6d:7e:2b:
c2:cd:e4:18:20:cf:dc:f9:e1:93:60:6f:69:d0:e8:0c:08:c2:
09:82:e9:53:49:88:ef:57:9e:77:3b:ce:c5:55:54:61:d8:09:
a2:8b:95:e8:0c:e9:ef:32:1b:b0:f2:00:12:e4:ee:12:5d:8f:
5c:de:f6:b0:a5:70:e9:a8:10:8b:18:e6:1e:96:38:a8:d8:df:
a5:4d:49:83:a8:32:cb:9a:fa:42:32:4d:67:71:50:12:f7:74:
85:91:d7:0c:d0:be:18:3a:47:1f:67:36:12:6e:4d:db:1e:d6:
61:6b:ff:20:13:84:1a:1f:1c:39:47:1e:26:2a:10:78:7c:ab:
35:75:f3:17:61:ab:ab:58:83:13:73:a3:6e:01:0f:2a:9b:52:
a0:41:3e:fa:1b:a8:1a:3a:0a:98:c9:21:92:4c:9b:d5:b4:72:
b1:9b:55:92:eb:75:3f:81:4c:63:0c:56:d0:d1:16:83:c4:fc:
89:a8:ca:46:d4:72:ff:87:f6:d6:aa:02:8b:24:fd:6a:6e:05:
c2:40:84:68:ce:89:ec:97:9c:7f:87:d8:17:26:aa:51:89:07:
0c:9b:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:58:10 2024 by rpki-client on console-ams.rpki-client.org