Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/_o-lX4o7n_d_Im-PD0zZi4tiGW8.roa
File: _o-lX4o7n_d_Im-PD0zZi4tiGW8.roa (raw, json)
Hash identifier: TIXWSOWjFTwMqRG9cXJs3IUchUjJUr17yLA88JP6rgY=
Subject key identifier: FE:8F:A5:5F:8A:3B:9F:F7:7F:22:6F:8F:0F:4C:D9:8B:8B:62:19:6F
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 018FF1660B68031A8CCD3AA6BE8C65292514
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/_o-lX4o7n_d_Im-PD0zZi4tiGW8.roa
Signing time: Fri 07 Jun 2024 06:32:27 +0000
ROA not before: Fri 07 Jun 2024 06:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50188
IP address blocks: 88.135.160.0/20 maxlen: 20
213.5.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f1:66:0b:68:03:1a:8c:cd:3a:a6:be:8c:65:29:25:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Jun 7 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe8fa55f8a3b9ff77f226f8f0f4cd98b8b62196f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:a1:08:4d:a8:61:d3:c3:39:a5:f8:dd:28:
d4:fd:49:bc:8d:f0:76:3a:28:9c:78:25:93:8b:ba:
f7:bc:bb:df:88:63:47:6c:ed:34:e5:b9:2e:33:8f:
1d:2f:c1:73:2d:c8:3f:3e:60:43:a7:c3:7c:47:37:
04:95:b1:ad:2a:bd:49:17:22:1b:6f:f1:88:e0:1f:
fb:2d:01:6f:08:57:5e:2d:7f:0e:d9:6d:b7:e2:e3:
ca:5a:0c:46:e1:60:7e:37:20:02:6c:fd:b4:97:c9:
66:96:98:d7:25:50:a7:42:e0:a6:44:64:2c:43:88:
91:3a:07:5f:19:f0:12:92:c2:40:c8:ca:f2:6c:2c:
70:f8:fa:36:7a:91:f4:2e:78:2c:31:80:7b:e7:ef:
05:0e:3d:52:0b:3f:8e:9c:8b:60:01:22:94:35:ea:
b7:59:19:48:1b:c8:ec:3b:93:0c:7b:f9:fa:8e:86:
22:02:a3:83:d1:0b:15:f2:b8:aa:3a:d8:8f:03:f4:
43:ab:45:27:e8:7c:fb:0a:52:e0:1a:8b:ef:57:0d:
98:e8:ed:c9:7d:44:8d:39:e4:0b:99:1c:56:be:0a:
d8:9f:7d:bd:3c:94:ab:af:95:dd:36:0a:3f:7e:47:
64:28:9c:54:9f:c1:5b:57:5e:d5:22:b3:3c:28:50:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8F:A5:5F:8A:3B:9F:F7:7F:22:6F:8F:0F:4C:D9:8B:8B:62:19:6F
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/_o-lX4o7n_d_Im-PD0zZi4tiGW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.160.0/20
213.5.248.0/21
Signature Algorithm: sha256WithRSAEncryption
23:64:d6:e7:44:9b:a2:57:15:94:b3:4a:f4:39:b2:2b:12:e0:
67:d2:e6:6f:3c:d2:dd:4a:55:0e:3a:3a:b5:03:19:51:a6:a8:
f7:9b:ef:b7:50:26:a7:cd:21:0d:3c:67:4f:49:71:05:87:c9:
27:4e:1d:1f:0b:73:9f:4d:a9:74:d6:46:2f:73:4c:8b:60:47:
2b:23:1f:86:95:37:62:0a:06:84:d5:87:3a:4a:4d:4c:67:a9:
f5:5f:3b:3e:f7:2f:8f:f6:6c:cc:a4:0f:4e:17:a2:dc:20:64:
f8:d7:ee:2f:67:7e:28:3a:f5:87:dd:51:c3:d7:df:2e:99:3d:
0f:4a:6f:15:2b:c3:0b:ed:fc:39:f1:ce:19:20:05:e6:71:a5:
33:ca:e2:38:f0:1f:90:81:51:1f:50:88:79:bc:a8:48:91:f2:
0e:7b:37:2b:af:df:38:1b:51:76:00:09:ad:19:54:51:78:04:
a6:f6:9b:f9:e6:8f:eb:87:15:f5:86:f4:3b:21:22:68:01:3b:
35:42:1b:1b:64:0a:df:6b:3e:75:04:f5:55:94:8b:5e:7e:6c:
53:19:f0:d0:54:96:62:e3:7f:91:15:75:fd:c4:ab:25:cd:ee:
bb:63:59:3e:e8:6d:17:0f:f7:8e:e5:e0:b7:1d:7e:7b:ca:f1:
df:2d:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:42:13 2024 by rpki-client on console-ams.rpki-client.org