Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ikpj4jEaS2DoLgaAtEHrLHIjbjc.roa
File: Ikpj4jEaS2DoLgaAtEHrLHIjbjc.roa (raw, json)
Hash identifier: XySfojAZAgmgAuLkk/BdqsdZo0ICghtyJKx6Krx90k0=
Subject key identifier: 22:4A:63:E2:31:1A:4B:60:E8:2E:06:80:B4:41:EB:2C:72:23:6E:37
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018CC6B94ACC67E038BC3A0E6D9F94D2BFAE
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ikpj4jEaS2DoLgaAtEHrLHIjbjc.roa
Signing time: Mon 01 Jan 2024 20:31:21 +0000
ROA not before: Mon 01 Jan 2024 20:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 149.154.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:4a:cc:67:e0:38:bc:3a:0e:6d:9f:94:d2:bf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 20:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=224a63e2311a4b60e82e0680b441eb2c72236e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:bf:14:87:df:d2:41:74:01:44:d3:e9:10:
c0:86:d3:34:c3:e8:9f:2c:60:41:77:60:85:8b:08:
50:a5:a6:7d:07:76:6a:db:54:58:1a:1c:20:8b:3d:
b1:3a:b3:ce:86:f0:b5:45:d5:d0:f4:25:62:38:2f:
87:fa:17:44:39:ba:3b:5b:9f:f6:4c:9e:8a:10:19:
1a:d5:c3:ad:9b:0c:c4:a9:e5:a7:78:23:72:09:22:
5c:fd:b6:c5:60:9a:b1:fc:a8:2d:9b:27:dd:ec:5e:
4b:70:69:5b:a3:94:03:37:72:5d:06:72:b8:d1:b5:
38:4d:e7:16:04:76:ea:94:ba:c6:c7:c4:c8:ee:bb:
bb:1a:ab:81:ba:30:2e:b9:b0:48:07:59:98:89:25:
1e:1d:78:5d:5f:ed:3d:a9:60:b5:05:ec:88:6c:83:
6f:13:19:af:a6:eb:6c:62:00:b6:80:35:32:c1:cb:
32:ea:0c:d5:7c:07:a1:bd:87:82:a0:e0:36:98:fc:
b6:bd:23:e8:df:3b:a4:ea:6b:bd:b9:07:5c:60:ee:
d8:cb:c7:b4:4b:c5:ac:d8:df:a7:3e:cc:dc:78:0e:
d4:bc:da:83:4c:9e:7d:c5:c3:db:a4:77:4b:1d:f2:
27:0f:7a:73:86:69:25:ac:a3:d2:59:eb:d2:72:2c:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:63:E2:31:1A:4B:60:E8:2E:06:80:B4:41:EB:2C:72:23:6E:37
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ikpj4jEaS2DoLgaAtEHrLHIjbjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.154.159.0/24
Signature Algorithm: sha256WithRSAEncryption
40:45:db:61:50:4f:2f:00:24:d5:aa:f2:70:fb:5d:b2:e2:b5:
f9:88:40:61:dd:d9:d0:1f:18:23:03:63:64:b7:ff:08:91:31:
fc:3f:95:1c:1a:88:2d:53:b7:36:00:f7:90:24:9c:31:24:af:
56:71:5f:4d:07:99:ff:64:b0:1d:f6:6e:2e:36:ec:ec:dc:14:
9d:36:9c:2a:8d:3b:11:a1:a6:84:55:87:e6:d1:3c:6b:ba:2f:
79:1f:21:10:f9:78:d7:7a:ea:c4:c7:2d:1c:4e:5a:e8:c7:e2:
2d:c7:1c:1a:b3:e7:6f:75:7c:67:d7:ec:cc:90:79:a6:cc:79:
e8:49:5f:82:0a:52:a3:76:9d:9e:eb:da:47:d1:44:ac:db:df:
a9:0a:84:08:0e:f4:e9:2e:81:9e:8e:04:99:51:24:ee:d5:c9:
e5:1a:73:c7:03:0f:a4:b0:01:0d:36:48:6f:1e:f3:32:7a:bf:
a7:44:51:f2:13:ae:0a:a0:8b:f8:5a:ee:76:26:82:dd:ad:83:
3d:dc:f4:6b:75:93:ef:b6:9e:24:6f:92:8a:85:31:91:72:dd:
81:d7:2b:03:e9:6e:03:88:ae:37:f5:e7:4a:a3:2d:9b:a3:5c:
0b:0b:71:d7:fa:e1:76:df:73:44:25:85:61:07:13:8d:4f:68:
83:36:26:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:46:38 2024 by rpki-client on console-ams.rpki-client.org