Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/iT22eoh2Zl-CdiA0dGPEnthnqCM.roa
File: iT22eoh2Zl-CdiA0dGPEnthnqCM.roa (raw, json)
Hash identifier: ErNte5Cf7cYGo+tEhgrVY4u0TQH0Epo92HuzmF4BECk=
Subject key identifier: 89:3D:B6:7A:88:76:66:5F:82:76:20:34:74:63:C4:9E:D8:67:A8:23
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 018CC2DAF1B4397B6A2A44C89B4D84138727
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/iT22eoh2Zl-CdiA0dGPEnthnqCM.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44820
IP address blocks: 91.194.40.0/23 maxlen: 23
91.203.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f1:b4:39:7b:6a:2a:44:c8:9b:4d:84:13:87:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=893db67a8876665f827620347463c49ed867a823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:19:84:db:68:2f:2a:c7:b7:59:d1:0e:d1:
07:15:c7:a8:b8:b7:e1:1f:68:22:1e:ad:80:1b:be:
28:60:83:d3:c1:86:45:3e:ee:ad:2f:de:2d:71:a0:
26:e2:89:43:53:f4:74:dc:cc:21:c4:b3:60:2d:6e:
51:33:56:b7:5c:8f:16:07:fb:7c:8d:43:c7:1e:f6:
98:67:4e:4b:bb:8c:f4:9b:64:01:e9:68:24:eb:36:
22:b4:47:a3:95:cf:4d:3b:69:7e:4c:ea:f7:e5:b1:
09:f2:ab:61:bb:cf:34:71:cc:a5:a0:21:c7:36:3c:
1f:16:76:d4:43:b0:e7:0b:e7:5c:9b:4b:d2:8d:ee:
e8:bc:eb:19:52:61:69:e7:8c:35:cb:85:19:f3:2b:
c4:17:2b:15:43:16:e0:dc:30:63:9a:f8:d5:64:8d:
78:7d:86:1a:70:1e:15:89:f2:39:17:9c:01:3a:06:
1e:fe:83:f9:2d:f9:83:ec:2c:c7:54:2a:3a:5a:f2:
d5:a3:d8:98:90:fe:c2:21:19:44:3c:b0:b8:40:9c:
c8:82:6e:aa:aa:bd:11:b9:be:a7:7c:0d:7a:4f:c5:
0c:e4:4e:a4:03:a6:24:d4:cd:59:5e:67:fa:df:d0:
07:9c:34:00:35:7d:fb:05:26:c5:50:02:98:69:c4:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:B6:7A:88:76:66:5F:82:76:20:34:74:63:C4:9E:D8:67:A8:23
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/iT22eoh2Zl-CdiA0dGPEnthnqCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.40.0/23
91.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
83:85:81:0f:a2:de:75:12:61:43:b4:f2:d0:a5:41:87:d2:ab:
0d:f6:d7:9b:9e:82:bc:aa:ae:7b:06:08:f0:40:d3:7a:80:9c:
87:36:1b:e4:e8:37:6c:0b:cf:60:09:d5:63:a3:64:38:d7:7e:
25:61:71:57:aa:4d:e0:cd:7c:e6:2a:5b:fb:20:8e:d1:35:29:
1d:4c:57:5a:05:f1:8c:88:2c:9c:d2:92:16:f8:d5:ed:64:b5:
44:22:9c:f3:cc:95:ea:55:65:bf:c4:69:13:9e:4e:c0:e2:c2:
b9:07:2b:57:1b:c6:89:65:55:ea:51:dd:bf:7a:28:c9:f2:93:
fd:04:65:5e:9c:00:4a:15:78:01:d3:e4:24:bd:25:5b:9e:d3:
ac:96:a9:4b:60:98:6c:8d:99:e0:3c:e6:b3:c8:d1:21:96:75:
4b:76:4b:32:56:ff:cf:1c:b1:07:6a:bf:ec:74:a5:66:c4:4e:
83:db:81:bf:94:4c:ad:2a:35:20:31:f8:09:39:bf:2d:4d:ed:
7a:4a:5f:57:13:53:be:3c:51:05:9e:c3:6b:96:93:e7:3d:07:
f0:2f:02:c2:fc:92:73:bb:b7:6b:3a:ea:0c:29:35:23:03:51:
8c:f1:70:e5:d7:60:00:07:ec:f6:51:e5:e8:2c:a4:01:0f:98:
b8:7d:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:39:32 2024 by rpki-client on console-fra.rpki-client.org