Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/iWtSv40w_08b2FJsgbh6iQGqAyY.roa
File: iWtSv40w_08b2FJsgbh6iQGqAyY.roa (raw, json)
Hash identifier: pCvIXTliTljxFktkIXBCxZkuQXViaRS8Xh63iuSpHwM=
Subject key identifier: 89:6B:52:BF:8D:30:FF:4F:1B:D8:52:6C:81:B8:7A:89:01:AA:03:26
Certificate issuer: /CN=21e7a588f0759ba8f658b3f3d68e55bcfe9c5bbe
Certificate serial: 018CC64A77AF636B08E4961CE72830BD2A64
Authority key identifier: 21:E7:A5:88:F0:75:9B:A8:F6:58:B3:F3:D6:8E:55:BC:FE:9C:5B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeeliPB1m6j2WLPz1o5VvP6cW74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/iWtSv40w_08b2FJsgbh6iQGqAyY.roa
Signing time: Mon 01 Jan 2024 18:30:18 +0000
ROA not before: Mon 01 Jan 2024 18:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42999
IP address blocks: 193.200.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeeliPB1m6j2WLPz1o5VvP6cW74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:77:af:63:6b:08:e4:96:1c:e7:28:30:bd:2a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e7a588f0759ba8f658b3f3d68e55bcfe9c5bbe
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=896b52bf8d30ff4f1bd8526c81b87a8901aa0326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:0e:48:7b:7c:9f:e5:e2:cc:14:7a:45:3d:
5c:1c:05:33:4d:25:f0:75:ce:0d:e9:fb:24:1f:61:
7a:79:5b:7f:b2:7b:f5:f7:21:72:f7:82:c8:eb:02:
9a:f1:dd:44:11:16:73:dc:33:3b:c0:68:1d:56:fd:
fd:f2:c0:c3:e1:0a:0c:63:5a:3c:8b:62:d1:04:90:
5d:ce:0e:27:9e:08:34:cd:69:81:f7:30:2d:6a:08:
fd:26:04:f2:67:1b:77:18:44:82:6d:6a:56:21:17:
b5:69:fa:2d:ed:22:c1:0e:9b:aa:a2:d5:39:d1:ba:
10:ab:0d:6d:89:f0:bb:65:b4:5e:cf:d9:ff:1f:48:
67:cc:a1:2c:6b:68:7a:65:a4:05:72:93:75:cd:03:
9b:90:d6:16:a3:e9:d4:af:67:1a:d5:99:c9:0a:2e:
fa:6a:8c:3c:5a:9d:d9:b0:8c:1a:57:e1:a5:2d:90:
c6:64:94:1c:90:fa:4b:ec:66:d8:5f:7a:f6:1f:6f:
6c:2e:d0:e8:7d:e4:2a:e1:89:1c:a0:e3:36:96:de:
d9:50:37:fe:ec:7b:1a:c2:73:af:98:a5:a5:e1:a6:
79:08:69:29:19:6d:44:1d:75:40:07:e4:0a:2a:4f:
f8:bb:59:92:71:10:b8:89:eb:18:19:d1:5a:46:46:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:52:BF:8D:30:FF:4F:1B:D8:52:6C:81:B8:7A:89:01:AA:03:26
X509v3 Authority Key Identifier:
keyid:21:E7:A5:88:F0:75:9B:A8:F6:58:B3:F3:D6:8E:55:BC:FE:9C:5B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeeliPB1m6j2WLPz1o5VvP6cW74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/iWtSv40w_08b2FJsgbh6iQGqAyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.188.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3d:eb:57:47:06:b7:73:8c:0f:14:b8:7b:d2:54:97:84:89:
0e:c7:6e:ac:a0:06:ae:13:55:29:c6:d1:c8:57:70:43:2e:4e:
e0:4a:65:1e:32:0f:df:98:0f:28:0d:51:5e:a5:ef:2a:b4:46:
ca:fa:c6:03:b6:1f:90:c5:ba:22:41:24:b6:55:20:3e:83:a5:
7f:ba:5a:d6:d0:ca:80:8c:fe:52:66:30:41:0f:44:8d:2e:6a:
cf:98:f2:13:0c:aa:97:d2:d6:77:0a:ee:e6:a1:fe:fd:b5:44:
82:8d:6a:ef:61:e5:c9:fc:d3:95:ff:30:6e:e6:f4:62:7b:58:
23:c6:bc:0d:c3:4f:0a:ca:56:b5:b8:f8:d6:b7:dc:ef:8a:ba:
6d:c1:60:8b:5e:a5:ea:a8:06:59:19:ec:ab:60:fb:6b:0a:ca:
25:2c:e4:dc:4b:5a:f0:3e:d6:3e:0e:f3:b7:29:76:5d:0c:ea:
20:5b:df:c4:88:ff:55:b7:59:cb:75:4c:b4:7f:1d:3f:ac:e2:
f2:f8:d2:2d:f4:3e:b4:b8:c9:f9:57:4a:33:47:25:40:7a:5e:
6e:e6:aa:61:27:bb:e0:eb:da:d2:28:94:67:2a:a4:c3:35:6f:
32:66:81:fd:44:21:58:2f:6c:b5:01:38:fe:ce:47:6d:a8:65:
96:92:8f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:50 2024 by rpki-client on console-fra.rpki-client.org