Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/byoocndy3PKUdxdUXsA3MClDeqM.roa
File: byoocndy3PKUdxdUXsA3MClDeqM.roa (raw, json)
Hash identifier: 46459WsfSLLO7oz/g6UZjcXvSOP0a/hBTGXppgrx8g8=
Subject key identifier: 6F:2A:28:72:77:72:DC:F2:94:77:17:54:5E:C0:37:30:29:43:7A:A3
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018CC5DC9E3C2BE522C69B0809C9CE5DEF17
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/byoocndy3PKUdxdUXsA3MClDeqM.roa
Signing time: Mon 01 Jan 2024 16:30:19 +0000
ROA not before: Mon 01 Jan 2024 16:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208226
IP address blocks: 88.151.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9e:3c:2b:e5:22:c6:9b:08:09:c9:ce:5d:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 16:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f2a28727772dcf2947717545ec0373029437aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:90:34:52:67:49:ef:bc:5d:1d:88:64:3e:
e0:5a:dd:3b:88:d7:5d:5d:ad:ba:a1:15:0c:71:94:
1e:16:e7:70:24:b5:4c:f7:8d:4e:41:20:3f:97:6b:
13:a7:7b:f0:57:75:17:13:d6:75:47:77:10:ad:02:
41:fc:af:1a:d1:55:34:e9:3c:bb:40:82:8f:a6:3a:
36:c2:05:86:34:24:bb:8f:60:7d:8f:36:57:c0:1b:
aa:d7:dd:68:a4:48:01:eb:0d:25:b0:89:77:e0:2a:
97:25:de:46:1a:3d:16:b6:a6:5f:3e:50:68:45:af:
34:ac:80:29:4c:c7:62:58:66:d6:28:ed:2b:b7:55:
34:0b:17:bf:d8:4c:84:d4:94:68:7c:7c:6b:ac:3d:
a6:46:d3:d9:c9:e6:f9:c0:7f:1b:8e:3c:e1:99:06:
1a:59:9a:60:52:8a:66:9a:bf:9b:94:79:3c:69:aa:
4d:13:5a:15:d7:40:5f:bb:09:34:9c:22:28:d1:80:
67:9f:32:03:fb:be:c5:7a:cf:78:7d:3b:b8:58:97:
01:73:ab:c1:27:3f:e0:ad:27:6c:c9:e0:15:1a:b3:
b3:c6:10:3c:aa:84:c1:11:b8:97:4a:ad:59:cf:b3:
76:ee:a7:24:71:d1:77:7c:78:d4:12:06:93:f1:a4:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2A:28:72:77:72:DC:F2:94:77:17:54:5E:C0:37:30:29:43:7A:A3
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/byoocndy3PKUdxdUXsA3MClDeqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:90:f2:2e:5b:2b:4a:8f:32:4f:c3:c6:84:87:d1:ea:13:ac:
bf:6b:95:7d:c8:72:e8:a9:7d:59:ed:32:bd:29:07:f4:5c:9a:
65:6a:be:64:3f:17:a2:f3:07:60:3b:63:96:56:10:17:53:04:
5f:dd:71:e7:e7:3f:d6:2e:ed:95:1b:24:4a:c8:be:bc:58:a1:
10:21:d9:a4:aa:4b:35:d2:4d:b0:75:f3:3c:4e:9a:ea:bd:7b:
35:da:36:a8:41:5d:62:3e:2b:6e:17:a1:c5:6a:51:75:6a:f5:
ac:24:85:73:a5:94:3f:cc:3f:38:96:4b:29:59:f8:fb:66:85:
9a:74:c7:52:20:b8:c1:b3:87:45:c3:1b:38:b1:89:2b:cd:52:
c1:5e:a3:59:80:b8:a0:47:e3:17:33:b4:ef:af:5c:67:14:a7:
72:4c:72:b7:02:e0:24:09:53:9f:80:1a:df:38:ab:44:4f:52:
09:13:a2:60:64:fe:95:45:2c:13:42:39:ea:6f:f0:f4:19:89:
13:ba:f8:b7:87:4a:fd:bd:b4:bf:e5:5a:94:ca:6b:95:a0:e5:
5c:78:da:d5:13:08:ac:54:64:20:d7:b3:52:23:31:f8:9c:5a:
64:ae:88:f9:de:0a:9e:a8:df:12:f2:e9:55:73:eb:57:c1:15:
18:cf:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:41:04 2024 by rpki-client on console-ams.rpki-client.org