Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/IaVwB85kOESJ-sfgxgtGEh7JoNQ.roa
File: IaVwB85kOESJ-sfgxgtGEh7JoNQ.roa (raw, json)
Hash identifier: tWQeUafYSAfsP0DnIOvD6jvpKQmNwloitWRHGGR08eA=
Subject key identifier: 21:A5:70:07:CE:64:38:44:89:FA:C7:E0:C6:0B:46:12:1E:C9:A0:D4
Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial: 018CC26D22D306C07AF186E010C4DC64F419
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/IaVwB85kOESJ-sfgxgtGEh7JoNQ.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199769
IP address blocks: 92.60.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:22:d3:06:c0:7a:f1:86:e0:10:c4:dc:64:f4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21a57007ce64384489fac7e0c60b46121ec9a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:6e:3e:77:7c:75:be:01:c6:0e:31:9d:67:
47:8a:a6:85:f5:6b:25:51:5e:21:f6:43:04:02:53:
55:09:0a:03:3b:17:ad:29:16:34:e4:88:d1:c1:bc:
fc:4c:27:41:36:c9:9d:f6:19:1e:50:a4:8a:ad:25:
ab:18:8f:e0:df:e5:b3:34:cd:bf:2f:b0:a0:d9:09:
8e:88:03:c7:65:9b:e9:5f:8b:cb:f2:0a:cf:9d:63:
65:4f:9a:d1:ca:59:9f:0a:5a:26:ab:6b:d7:c5:b0:
68:9b:6d:dc:2a:fe:ee:8c:75:51:06:a4:7e:b1:1e:
d3:36:03:55:6e:56:bb:dc:c6:55:3f:29:c2:41:96:
3e:fe:8f:02:99:a5:85:b2:f4:84:55:5f:cb:23:1a:
4c:48:c1:c4:dc:e8:da:ac:5a:fe:e3:5c:ed:b4:25:
cf:bf:ce:3b:16:f1:68:1c:3d:e0:dd:52:6a:20:1f:
2f:c5:be:40:6e:97:c3:e5:b9:43:00:c8:52:ba:24:
7f:75:51:d3:3e:ca:8b:d9:bb:2c:cc:07:e5:a2:6c:
13:9d:00:fe:0a:e2:35:16:e3:c1:a4:22:fb:e6:ab:
6e:ac:41:fd:34:6b:c8:c1:dd:b8:38:f7:a4:e9:42:
cb:49:d0:ac:0f:88:13:43:d7:78:67:bc:8f:fc:c0:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A5:70:07:CE:64:38:44:89:FA:C7:E0:C6:0B:46:12:1E:C9:A0:D4
X509v3 Authority Key Identifier:
keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/IaVwB85kOESJ-sfgxgtGEh7JoNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.149.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cb:f4:75:4e:c1:58:9a:66:8d:23:4e:55:f0:41:fa:d7:db:
ce:4a:c0:18:9e:c2:01:1f:91:7b:f0:f7:29:28:00:9a:68:9e:
85:4d:83:d2:f4:2d:db:9b:a3:86:ec:10:49:a2:95:49:b0:03:
07:34:df:89:d5:3f:54:54:22:f7:63:08:e7:1b:ee:6e:f3:90:
0a:6f:60:e3:65:c6:e5:af:a1:96:a7:93:af:14:98:22:66:f0:
8b:76:ea:57:0b:23:aa:18:be:1d:ef:75:f0:0b:10:39:b2:b6:
e3:d9:fc:96:c5:a6:01:b0:31:1f:97:5b:37:f1:58:bf:3e:8b:
c1:16:c9:02:5a:e4:3f:d4:cc:84:1b:20:cf:74:c2:76:bc:88:
08:05:41:65:a6:49:c3:0d:c5:bb:c0:a0:39:13:a5:73:fa:b7:
a2:b6:17:91:1c:99:66:25:71:2a:65:82:51:ef:3b:fe:84:da:
99:b4:c1:8b:f5:08:e1:2b:2a:48:c1:22:03:63:9f:db:ff:0e:
ff:36:9d:b4:37:ca:4a:7e:dc:64:c3:d8:56:a4:35:05:4c:fe:
a9:a4:ab:2e:9a:fb:fa:03:e1:76:11:71:90:3f:4c:a9:21:ce:
7b:35:15:95:08:a3:66:82:f6:b1:58:a8:1b:02:94:f2:4b:ea:
11:10:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:15:40 2024 by rpki-client on console-fra.rpki-client.org