Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i_yvakXlfFE7CXlh3JNZLZJ27I8.roa
File: i_yvakXlfFE7CXlh3JNZLZJ27I8.roa (raw, json)
Hash identifier: yppY2RbxMuZ3lzauPLij1nX1PUaxmv9NCPmyTZ25W0M=
Subject key identifier: 8B:FC:AF:6A:45:E5:7C:51:3B:09:79:61:DC:93:59:2D:92:76:EC:8F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018DF933A79B26B3D7C83FC4FF2E1B9FC8B0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i_yvakXlfFE7CXlh3JNZLZJ27I8.roa
Signing time: Fri 01 Mar 2024 08:48:48 +0000
ROA not before: Fri 01 Mar 2024 08:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 2.58.171.0/24 maxlen: 24
88.151.56.0/24 maxlen: 24
88.151.59.0/24 maxlen: 24
88.151.61.0/24 maxlen: 24
88.209.192.0/24 maxlen: 24
88.209.194.0/24 maxlen: 24
88.209.207.0/24 maxlen: 24
88.209.209.0/24 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.221.0/24 maxlen: 24
88.209.222.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 08:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:33:a7:9b:26:b3:d7:c8:3f:c4:ff:2e:1b:9f:c8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 1 08:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bfcaf6a45e57c513b097961dc93592d9276ec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b9:4f:36:12:cc:88:f2:04:ed:10:63:74:b6:
9e:b7:49:eb:5f:b6:5a:c5:ee:68:7d:c0:cc:44:c8:
fb:a3:d5:a5:47:e6:d3:f3:ac:18:88:63:89:80:06:
f9:0f:ea:ed:34:ad:9c:ba:37:3c:f3:0d:c3:dc:ec:
9f:40:a7:e5:1e:0d:33:38:0d:af:c0:da:b9:5f:95:
fe:a2:dc:e3:f9:e2:f7:36:5a:2d:24:54:25:55:fa:
bb:ba:dc:a7:31:d9:13:55:01:98:c6:5a:00:3f:66:
a5:e3:78:34:54:52:28:1e:49:a1:e0:62:56:83:27:
ea:24:91:c7:56:27:68:f1:fe:6d:5e:c7:f1:c8:1f:
a3:c6:c0:a2:26:eb:e9:54:da:14:69:d9:be:79:f5:
a5:cc:5d:da:d7:47:ae:90:89:11:5e:00:87:5d:64:
86:d4:5a:c6:b9:8b:99:6e:dc:1c:e4:43:15:03:54:
e8:36:e4:2e:d1:f3:0d:ed:31:6f:25:69:7b:da:ed:
c9:6c:08:fd:7d:40:45:42:3f:f1:0e:be:15:0c:75:
e0:9b:7e:65:8d:16:d5:33:86:cc:4b:fc:76:b5:5f:
79:d3:35:8a:34:0b:1c:40:3e:0d:d6:23:fd:78:a3:
4f:f9:bd:5d:85:1f:ea:12:5e:2d:a5:ee:67:4a:9e:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:AF:6A:45:E5:7C:51:3B:09:79:61:DC:93:59:2D:92:76:EC:8F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/i_yvakXlfFE7CXlh3JNZLZJ27I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.171.0/24
88.151.56.0/24
88.151.59.0/24
88.151.61.0/24
88.209.192.0/24
88.209.194.0/24
88.209.207.0/24
88.209.209.0/24
88.209.211.0/24
88.209.221.0-88.209.222.255
88.209.224.0/23
88.209.244.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8f:fa:51:7c:81:b9:47:da:0d:c2:1d:0c:b2:42:ae:29:35:
ca:07:cf:3d:4c:27:fe:1c:f5:80:8f:f7:4d:b6:a1:ca:47:d6:
22:18:04:5d:3a:3d:fd:4d:35:a6:e9:04:17:de:80:62:4a:9a:
44:18:60:9c:ae:26:b4:1b:21:56:e1:bb:82:c1:72:c2:3e:bf:
c5:19:d0:8f:44:8d:94:7d:86:de:b0:48:ec:60:a1:82:fb:c4:
36:0b:5d:fa:4e:4f:34:20:9b:9c:0a:7e:45:ba:52:7b:b3:2f:
e4:5f:0f:84:28:37:1c:2a:b4:7a:2c:96:33:00:b7:be:7b:5a:
c8:36:3c:80:86:ce:0f:7b:59:58:6d:32:6f:c9:ed:48:e1:03:
b0:f5:8b:b9:42:3b:fb:aa:ca:c2:21:de:90:1e:c9:b1:b8:33:
de:c1:4d:83:34:ad:4a:8f:ec:c6:47:0a:92:34:8d:e1:99:77:
7c:cf:d1:f0:f8:81:6c:43:de:b2:35:67:c0:34:54:5a:9c:d9:
ca:11:ae:2a:00:b5:4d:20:bc:8a:a5:b7:9a:a7:65:ed:95:60:
f9:c2:6a:b1:fe:79:6f:8f:b2:b8:98:1e:a8:ba:7e:28:ca:a2:
8a:a2:bd:03:4c:67:63:14:fa:59:bb:00:d6:85:de:64:6b:0b:
a3:02:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:43:07 2024 by rpki-client on console-fra.rpki-client.org