Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ajxA6lhO3asXKigx5WkWNdRsQ-4.roa
File: ajxA6lhO3asXKigx5WkWNdRsQ-4.roa (raw, json)
Hash identifier: hos3iNB0zeqGz8v3O3sNyz1iqqGIzhNNboBk6N7lp8M=
Subject key identifier: 6A:3C:40:EA:58:4E:DD:AB:17:2A:28:31:E5:69:16:35:D4:6C:43:EE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018DA8E42B2648AEBA05E3BD4A47BBD8347F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ajxA6lhO3asXKigx5WkWNdRsQ-4.roa
Signing time: Wed 14 Feb 2024 18:32:21 +0000
ROA not before: Wed 14 Feb 2024 18:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215567
IP address blocks: 88.209.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:e4:2b:26:48:ae:ba:05:e3:bd:4a:47:bb:d8:34:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 14 18:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a3c40ea584eddab172a2831e5691635d46c43ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:f1:5a:31:08:b1:93:92:43:96:73:56:df:
86:ed:b3:06:07:79:cc:09:fd:46:a2:d6:2e:5c:9f:
0f:e4:93:3a:4d:21:1c:77:cf:2c:5d:c9:10:58:8a:
df:9e:b1:a3:90:0b:ee:cb:61:10:b4:d3:2a:7d:24:
48:1d:44:d9:e0:3c:96:3e:12:4c:56:68:01:04:36:
76:b7:e2:ea:74:d3:d8:93:6a:0c:22:bd:1a:1c:9d:
52:ec:32:9e:c1:fe:be:12:3a:4e:7a:6a:54:0c:b4:
fd:7a:80:b3:f6:8a:6f:b5:83:2e:62:ed:32:70:8f:
d7:19:b7:cb:6b:0d:b1:56:04:34:2b:74:cc:bb:dc:
19:73:61:d1:32:04:67:df:9c:db:9c:45:9b:6e:d5:
81:01:a1:52:20:09:d5:8e:8e:3f:d6:d6:45:62:21:
d6:2f:f1:03:23:93:6a:f5:34:68:67:c4:f8:ec:e4:
a5:38:65:2c:86:73:03:3f:b9:54:2d:d7:19:8c:62:
d8:b8:72:1e:74:e1:6d:fe:bd:43:bd:7a:38:3f:3b:
f1:e1:62:09:68:24:18:5a:dc:70:54:1e:a8:26:af:
33:fd:8b:d5:47:b7:19:06:70:4b:22:99:80:1d:bc:
f6:e6:8a:f1:10:ca:e9:69:c9:08:8e:11:98:f4:48:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3C:40:EA:58:4E:DD:AB:17:2A:28:31:E5:69:16:35:D4:6C:43:EE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ajxA6lhO3asXKigx5WkWNdRsQ-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.248.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b6:70:6c:ad:fe:48:b9:32:f8:ee:5f:4e:6b:a2:29:64:24:
97:94:20:85:de:a5:99:ec:70:3e:f8:79:9a:92:41:06:5c:f7:
87:83:6f:f4:e9:3f:cf:dc:65:fe:a4:d8:8f:60:8e:2f:5b:d4:
17:db:7c:b8:23:53:f7:5f:c8:9d:6b:87:ff:6c:9a:03:90:98:
78:72:0e:63:82:76:e1:d2:66:51:c0:0d:f1:dd:92:51:de:31:
43:66:f4:15:84:8c:fe:19:f9:f1:65:12:75:e1:cf:0e:57:29:
b9:42:ac:9c:68:6b:92:7e:89:54:56:fc:89:b6:f6:70:dc:91:
2c:88:d2:22:68:d4:f1:c1:51:25:3f:b2:5a:08:e8:b3:a8:90:
a5:30:f3:bb:52:5c:f5:57:ba:88:c1:d2:2a:26:3b:0d:83:22:
cc:a9:42:45:0f:b4:1a:71:19:4f:de:6d:8b:28:d6:be:88:2e:
3d:a4:ec:ea:ff:92:b1:db:34:c9:b5:96:51:45:1e:2f:1b:01:
b1:54:42:73:d1:b6:d4:a2:41:c9:12:a0:1e:16:a6:87:3a:6b:
3f:8c:c5:2c:65:cb:31:6f:80:1b:11:5e:57:e4:8c:1e:ef:19:
0a:d2:7d:e4:1a:cc:13:46:4d:34:97:94:47:5f:54:91:15:d8:
71:81:f8:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2o5CsmSK66BeO9Ske72DR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQwMjE0MTgzMjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTNjNDBlYTU4NGVkZGFiMTcyYTI4MzFlNTY5MTYzNWQ0NmM0M2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7rxWjEIsZOSQ5ZzVt+G7bMGB3nM
Cf1GotYuXJ8P5JM6TSEcd88sXckQWIrfnrGjkAvuy2EQtNMqfSRIHUTZ4DyWPhJM
VmgBBDZ2t+LqdNPYk2oMIr0aHJ1S7DKewf6+EjpOempUDLT9eoCz9opvtYMuYu0y
cI/XGbfLaw2xVgQ0K3TMu9wZc2HRMgRn35zbnEWbbtWBAaFSIAnVjo4/1tZFYiHW
L/EDI5Nq9TRoZ8T47OSlOGUshnMDP7lULdcZjGLYuHIedOFt/r1DvXo4Pzvx4WIJ
aCQYWtxwVB6oJq8z/YvVR7cZBnBLIpmAHbz25orxEMrpackIjhGY9EiwFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGo8QOpYTt2rFyooMeVpFjXUbEPuMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvYWp4QTZsaE8zYXNYS2lneDVXa1dOZFJzUS00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH4MA0G
CSqGSIb3DQEBCwUAA4IBAQBntnBsrf5IuTL47l9Oa6IpZCSXlCCF3qWZ7HA++Hma
kkEGXPeHg2/06T/P3GX+pNiPYI4vW9QX23y4I1P3X8ida4f/bJoDkJh4cg5jgnbh
0mZRwA3x3ZJR3jFDZvQVhIz+GfnxZRJ14c8OVym5QqycaGuSfolUVvyJtvZw3JEs
iNIiaNTxwVElP7JaCOizqJClMPO7Ulz1V7qIwdIqJjsNgyLMqUJFD7QacRlP3m2L
KNa+iC49pOzq/5Kx2zTJtZZRRR4vGwGxVEJz0bbUokHJEqAeFqaHOms/jMUsZcsx
b4AbEV5X5Iwe7xkK0n3kGswTRk00l5RHX1SRFdhxgfhK
-----END CERTIFICATE-----
Generated at Fri May 3 11:50:17 2024 by rpki-client on console-ams.rpki-client.org