Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa
File: iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa (raw, json)
Hash identifier: UL7/hqPAtlUAPV17SaCcOm/8+EaEmdYUpCIbwuHD0U4=
Subject key identifier: 88:10:3D:54:48:BD:68:13:C5:D0:E9:08:F9:C2:E2:F0:3A:7D:51:9B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0192F81C515BC81A77E36018150964EC6D72
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa
Signing time: Mon 04 Nov 2024 16:57:38 +0000
ROA not before: Mon 04 Nov 2024 16:57:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208708
IP address blocks: 88.209.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:1c:51:5b:c8:1a:77:e3:60:18:15:09:64:ec:6d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 4 16:57:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88103d5448bd6813c5d0e908f9c2e2f03a7d519b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:02:7a:36:f7:de:cf:74:b1:7b:01:9b:f7:
93:5a:80:75:4a:7f:9f:92:ef:49:8f:58:86:6a:5b:
9a:c3:71:42:2a:a9:d9:7a:77:b0:ef:58:ac:28:cf:
1d:49:9f:14:95:25:07:f1:44:a0:b7:78:37:c4:15:
44:64:a4:cc:cb:08:8c:8a:af:f8:4a:6e:1e:0b:4d:
9a:ae:ad:f2:eb:4d:d8:38:c7:23:fb:f6:ee:79:68:
06:60:21:d1:3f:03:c7:aa:43:bd:92:31:d5:86:75:
ad:d3:16:08:47:17:6c:cb:f6:85:4d:6b:96:7c:fb:
d1:e9:23:a4:d2:4a:fa:f6:16:ad:f4:23:44:15:0b:
c7:42:8d:d9:65:dd:da:b5:c5:62:fa:6d:85:e4:ad:
cd:36:5a:e6:7c:03:94:71:35:c5:73:99:1e:29:6b:
5b:e5:b9:27:05:6c:4a:b4:bb:1b:9c:df:52:c9:86:
32:c6:95:59:05:2f:73:36:80:d3:65:0e:79:bc:15:
37:f7:85:5c:ba:cf:a6:43:e1:09:4b:80:ae:7f:77:
aa:fa:a3:d9:c8:58:d3:56:9b:02:eb:0c:10:19:9a:
a7:02:eb:a3:63:64:13:7e:0e:18:99:e9:81:f5:14:
5e:83:a6:b9:c4:73:a9:fb:ff:44:76:05:09:c2:b6:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:3D:54:48:BD:68:13:C5:D0:E9:08:F9:C2:E2:F0:3A:7D:51:9B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:d7:9b:65:f7:69:7f:70:8f:5b:30:c8:07:1e:e9:48:41:d8:
6c:71:c2:5a:b3:f1:04:da:3b:85:1e:54:46:92:66:90:52:9a:
70:de:ab:31:fa:41:15:2d:c0:a3:a7:a8:59:3b:14:a0:48:d2:
b5:75:68:c2:9c:1c:7f:10:96:87:08:4c:ae:9d:ad:2f:d6:6f:
51:7d:48:92:da:54:a5:55:81:4f:ed:b0:0b:73:8c:b3:e0:9e:
c8:6c:b7:41:24:fc:d2:b8:27:0a:0b:7d:0a:1c:ad:8f:46:c1:
bd:cb:d1:52:33:ea:12:1d:b5:19:b4:fb:8b:51:b7:73:60:95:
c2:21:1b:ac:74:a0:16:bf:32:42:00:64:e8:1c:94:9a:43:c8:
af:34:5f:4f:36:44:c4:88:05:72:4e:3a:8d:08:97:90:3e:75:
55:f3:49:3a:7b:96:4d:3b:e8:71:e7:01:68:11:63:a8:d7:d3:
c1:b9:5b:8e:f9:ec:aa:83:25:0d:3a:d6:ec:da:a2:46:01:27:
88:47:db:65:c5:77:56:ac:46:70:33:8b:dc:9c:b9:66:73:40:
3d:c9:5a:d5:0d:72:c4:7f:07:d7:fc:a0:62:3d:6b:1e:13:3f:
5b:4c:d5:f9:c6:f0:f4:99:63:c1:d6:a0:e3:58:a3:36:c7:ee:
ad:2a:a4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:23 2024 by rpki-client on console-fra.rpki-client.org