Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ig4_7CucWp7qisllK9WAT65yGR8.roa
File: Ig4_7CucWp7qisllK9WAT65yGR8.roa (raw, json)
Hash identifier: BiQjnihwbkqTaoVBUlw3F/Rzk52nkK2a/znpLsbhw/0=
Subject key identifier: 22:0E:3F:EC:2B:9C:5A:9E:EA:8A:C9:65:2B:D5:80:4F:AE:72:19:1F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D3F973ABFF0A4935B3BDF730E9C0CE1D2
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ig4_7CucWp7qisllK9WAT65yGR8.roa
Signing time: Thu 25 Jan 2024 07:48:12 +0000
ROA not before: Thu 25 Jan 2024 07:48:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200017
IP address blocks: 176.57.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:97:3a:bf:f0:a4:93:5b:3b:df:73:0e:9c:0c:e1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 25 07:48:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=220e3fec2b9c5a9eea8ac9652bd5804fae72191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:93:57:70:d1:e9:08:ee:af:1e:ad:b4:78:
fe:2a:eb:d4:e7:5e:d9:63:f4:c7:22:b3:46:df:73:
d5:96:e6:56:8d:62:1c:61:02:62:be:35:22:27:c4:
7e:e7:38:b7:29:70:3d:57:80:7c:b3:95:d5:f5:c9:
4b:6a:0a:08:94:dd:c0:f5:9d:44:ce:35:33:7e:8c:
b9:72:da:6c:ed:33:52:15:3a:d2:7e:17:d3:db:8a:
2b:56:61:d3:1d:4d:1d:5c:2e:16:c0:e6:53:fc:8b:
41:d2:b3:4a:3a:6d:9c:86:c0:1f:40:39:0a:88:93:
3e:ce:2d:45:ab:02:24:65:55:56:80:13:b2:97:1a:
bc:2d:24:61:99:20:72:df:d6:62:3c:8c:c8:c0:0d:
a5:b9:fc:33:5a:c4:8d:e8:ed:99:10:18:46:bb:3e:
ea:03:51:95:b2:f1:f0:04:2c:93:f3:9f:20:da:e8:
39:51:44:6d:e3:21:df:c8:05:43:3f:0e:44:83:ad:
6e:f7:ac:68:fa:6c:d3:32:e9:90:11:72:0e:24:37:
55:b2:4e:e3:0c:d4:7b:02:bd:ca:d1:fd:bf:b9:97:
e4:82:50:19:84:e0:72:ea:69:7c:47:7a:40:0a:a1:
5a:40:27:d4:90:4c:4f:2a:46:80:73:c8:5a:6f:8b:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:3F:EC:2B:9C:5A:9E:EA:8A:C9:65:2B:D5:80:4F:AE:72:19:1F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ig4_7CucWp7qisllK9WAT65yGR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.48.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d8:9b:2d:f9:ce:30:49:3d:e6:a1:1b:1e:fb:39:73:13:1e:
4a:49:f4:b2:3f:c3:18:99:06:45:3f:e8:f6:16:62:74:9d:5f:
6f:0f:03:53:7e:b6:e0:ac:6e:79:69:33:fc:e4:77:d0:17:6b:
c5:68:bf:72:ac:3a:d3:dc:c7:d5:8d:98:49:5d:9f:d0:35:d6:
eb:3d:31:79:9e:b1:9e:d4:84:6b:97:3d:f0:40:ef:11:52:cb:
6c:2a:23:a4:32:ce:d4:cb:85:3a:82:7d:92:9e:09:9c:d9:8d:
a3:44:de:24:38:8f:41:4e:d9:b8:7d:14:df:94:4e:98:99:48:
41:92:ce:b7:b6:15:37:6c:86:95:9d:0d:5b:52:d1:7e:ab:de:
89:77:e8:9f:f3:23:9e:35:d5:3d:dc:1a:13:97:33:c8:ba:59:
5d:0b:1b:2c:c6:c9:8b:4a:7b:b4:c6:66:7e:4b:84:dd:2d:ae:
09:59:d7:3a:96:4b:c5:40:78:c9:ef:74:a1:28:c6:2f:b8:84:
e7:d2:cc:96:84:23:7f:78:ec:3d:08:ec:13:3c:cc:d8:52:d9:
79:ad:dd:f0:ae:34:d1:ab:10:de:2d:2e:41:27:3e:a9:bf:ad:
bb:52:82:d3:58:9a:d2:be:b5:45:a2:af:8e:2d:2c:62:ff:b3:
bc:76:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:37:22 2024 by rpki-client on console-ams.rpki-client.org