Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/r7SqlmNQB5TNKrRvMdO3Eb9YW0A.roa
File: r7SqlmNQB5TNKrRvMdO3Eb9YW0A.roa (raw, json)
Hash identifier: XhPApRBe+stY708MC9trtpiVbY7UtI4eC9AaVmmMhMk=
Subject key identifier: AF:B4:AA:96:63:50:07:94:CD:2A:B4:6F:31:D3:B7:11:BF:58:5B:40
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018E134A9FB173D807B247F9045705C48DC8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/r7SqlmNQB5TNKrRvMdO3Eb9YW0A.roa
Signing time: Wed 06 Mar 2024 10:24:01 +0000
ROA not before: Wed 06 Mar 2024 10:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 88.209.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:4a:9f:b1:73:d8:07:b2:47:f9:04:57:05:c4:8d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Mar 6 10:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afb4aa9663500794cd2ab46f31d3b711bf585b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:63:80:f4:25:63:6d:24:93:d8:88:51:78:
8d:41:c3:53:25:30:26:f9:6b:0c:0e:2d:b9:a2:ea:
74:47:f4:65:a7:c4:7a:e7:e6:ed:71:7b:97:04:22:
d1:bb:3c:58:a5:93:27:00:73:80:87:c1:a7:33:dd:
2e:a9:e6:56:de:59:73:a1:e0:9c:ab:11:03:d6:39:
8a:85:36:1c:9d:3d:17:57:ea:0f:ee:cd:67:2d:a6:
f7:2a:42:f5:18:f8:fe:35:eb:c9:10:31:02:ee:75:
7e:2b:5e:d3:db:9d:02:f3:9a:ea:b5:cd:12:67:42:
d8:aa:24:4d:34:01:4e:52:31:93:cd:94:fa:27:52:
d8:eb:de:59:d6:fe:9a:a2:a6:f5:61:4c:97:5f:e9:
a2:50:24:41:e6:c6:d6:20:41:b8:bc:bf:ea:55:79:
91:62:31:af:b7:c4:85:70:95:37:ed:b6:01:31:72:
23:32:b0:b4:29:72:22:dc:02:90:19:f4:75:ba:cb:
30:eb:a6:fc:43:5b:64:f4:b9:a7:e9:f6:6c:90:5c:
ff:7b:41:6d:4a:fe:9e:5a:ba:00:b2:06:77:9a:6e:
51:40:f8:43:13:75:e7:51:48:01:6c:68:c2:91:cd:
0f:2c:eb:8c:0c:82:1d:b6:dc:e7:72:8b:8a:0c:e5:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B4:AA:96:63:50:07:94:CD:2A:B4:6F:31:D3:B7:11:BF:58:5B:40
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/r7SqlmNQB5TNKrRvMdO3Eb9YW0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:be:c2:51:42:16:01:9d:49:3f:da:9c:57:27:5f:25:83:38:
46:50:5c:d6:a4:94:62:72:f1:15:9d:98:a0:77:e1:89:61:50:
41:ba:40:0e:dc:ef:dc:9f:0d:be:32:61:b5:8c:93:56:10:fb:
7f:37:ee:87:8f:e5:76:93:9c:01:1d:d8:92:61:99:ca:29:1b:
31:de:9f:de:40:3c:6a:73:bf:27:42:d6:02:01:b5:aa:57:4f:
be:07:99:6c:08:3b:2a:08:95:53:39:c4:eb:a6:86:21:56:b6:
37:7f:58:b9:ae:13:cc:cd:b0:2d:1b:0c:7b:80:bc:33:51:78:
d1:d9:b2:04:ad:1f:19:61:79:d0:8a:df:64:6e:17:e7:a0:65:
56:55:aa:ef:e4:5d:73:bc:d9:bd:cd:1d:e2:73:f9:76:7a:3c:
a0:90:85:7a:cb:0f:cd:6b:05:cf:2b:0c:20:d0:6d:76:e2:01:
11:65:74:98:04:01:c8:28:bb:e8:21:af:12:c3:4f:f3:4a:0b:
8f:c1:96:5f:c6:ca:a7:10:a8:9e:d7:e7:5f:25:44:84:ce:c0:
ea:b1:48:74:1d:3f:ef:b2:d2:ec:8f:0e:5a:f5:7b:24:79:57:
81:6a:8f:44:36:e3:0b:1e:44:43:ec:b5:37:eb:4d:73:75:96:
a5:84:65:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4TSp+xc9gHskf5BFcFxI3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjQwMzA2MTAyNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmI0YWE5NjYzNTAwNzk0Y2QyYWI0NmYzMWQzYjcxMWJmNTg1YjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cNjgPQlY20kk9iIUXiNQcNTJTAm
+WsMDi25oup0R/Rlp8R65+btcXuXBCLRuzxYpZMnAHOAh8GnM90uqeZW3llzoeCc
qxED1jmKhTYcnT0XV+oP7s1nLab3KkL1GPj+NevJEDEC7nV+K17T250C85rqtc0S
Z0LYqiRNNAFOUjGTzZT6J1LY695Z1v6aoqb1YUyXX+miUCRB5sbWIEG4vL/qVXmR
YjGvt8SFcJU37bYBMXIjMrC0KXIi3AKQGfR1ussw66b8Q1tk9Lmn6fZskFz/e0Ft
Sv6eWroAsgZ3mm5RQPhDE3XnUUgBbGjCkc0PLOuMDIIdttzncouKDOUZ/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK+0qpZjUAeUzSq0bzHTtxG/WFtAMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvcjdTcWxtTlFCNVROS3JSdk1kTzNFYjlZVzBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNH1MA0G
CSqGSIb3DQEBCwUAA4IBAQDCvsJRQhYBnUk/2pxXJ18lgzhGUFzWpJRicvEVnZig
d+GJYVBBukAO3O/cnw2+MmG1jJNWEPt/N+6Hj+V2k5wBHdiSYZnKKRsx3p/eQDxq
c78nQtYCAbWqV0++B5lsCDsqCJVTOcTrpoYhVrY3f1i5rhPMzbAtGwx7gLwzUXjR
2bIErR8ZYXnQit9kbhfnoGVWVarv5F1zvNm9zR3ic/l2ejygkIV6yw/NawXPKwwg
0G124gERZXSYBAHIKLvoIa8Sw0/zSguPwZZfxsqnEKie1+dfJUSEzsDqsUh0HT/v
stLsjw5a9XskeVeBao9ENuMLHkRD7LU3601zdZalhGVN
-----END CERTIFICATE-----
Generated at Fri May 3 05:43:26 2024 by rpki-client on console-fra.rpki-client.org