Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/1C2Ci2Eitkr-KC3scNJZ5hWPXHE.roa
File: 1C2Ci2Eitkr-KC3scNJZ5hWPXHE.roa (raw, json)
Hash identifier: XWbYatI/q77TRgWAAyXWfPgLIr3Qx291nM3tW6mgEP8=
Subject key identifier: D4:2D:82:8B:61:22:B6:4A:FE:28:2D:EC:70:D2:59:E6:15:8F:5C:71
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 0190501990750BA464C9E5993EA3F169C495
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/1C2Ci2Eitkr-KC3scNJZ5hWPXHE.roa
Signing time: Tue 25 Jun 2024 15:52:51 +0000
ROA not before: Tue 25 Jun 2024 15:52:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215826
IP address blocks: 94.141.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:50:19:90:75:0b:a4:64:c9:e5:99:3e:a3:f1:69:c4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jun 25 15:52:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d42d828b6122b64afe282dec70d259e6158f5c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:2e:76:29:62:6a:84:e9:fe:a4:0d:4e:e7:
7a:f5:3f:20:cb:71:33:c4:a2:66:4b:70:df:e3:5b:
64:99:ea:c6:81:1f:a3:a6:7f:23:7d:ad:d1:55:0a:
f9:24:e0:3f:a9:93:93:67:dc:c2:9f:47:5c:e9:d7:
72:51:b2:90:30:4e:52:8b:4d:eb:79:d6:23:7b:92:
a1:96:95:f4:5b:6e:96:75:1f:de:17:06:e3:54:f8:
64:4c:c9:8a:37:51:ef:9b:fd:8c:ba:7c:1a:27:c6:
37:76:4f:26:48:d8:2a:60:16:e7:20:d6:d8:83:fd:
b8:a2:8a:4b:12:4f:76:3b:01:ad:60:77:83:12:71:
f1:84:00:f1:5a:86:d3:9b:c2:8f:b0:6e:de:e7:03:
8b:24:3a:f3:57:07:76:48:7c:2e:28:f4:9b:e0:52:
38:6f:f4:40:c8:d3:e0:d9:6e:0b:00:dd:6a:82:f1:
9a:d5:28:be:17:71:0e:3a:43:07:fe:81:f3:44:eb:
9f:e8:7a:06:9c:80:46:68:2f:aa:5c:36:54:c7:b3:
7a:da:7c:c5:97:d0:05:10:3b:c8:68:40:0f:00:61:
68:51:c7:af:c4:5a:ca:f1:1d:f7:2b:d5:26:ca:6c:
03:49:10:ba:ba:51:3a:22:14:31:ed:5d:4e:d4:e7:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:82:8B:61:22:B6:4A:FE:28:2D:EC:70:D2:59:E6:15:8F:5C:71
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/1C2Ci2Eitkr-KC3scNJZ5hWPXHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.122.0/23
Signature Algorithm: sha256WithRSAEncryption
71:6e:3f:9e:89:7d:54:43:1a:5c:3c:47:97:15:1a:16:b5:cd:
20:8b:64:c8:8f:aa:ee:b5:9c:59:ca:2c:d5:41:ee:96:0d:3f:
e9:77:a7:e0:ce:81:4d:3a:46:2a:b4:d1:4c:43:c0:25:4a:3d:
55:89:fd:e8:36:9f:db:ef:21:b8:09:de:2c:4b:ef:89:cd:0a:
f3:14:d7:31:5a:26:1d:84:d6:fc:22:95:37:06:d9:35:19:2c:
a9:b0:d5:52:0a:ad:73:d0:33:95:32:e7:05:7a:d9:b9:5f:06:
84:4c:54:0b:92:2e:85:be:16:54:5a:fc:10:10:9c:4e:65:85:
ae:25:93:43:01:7b:b3:ba:f0:1c:0e:3f:a9:68:c5:93:55:c2:
17:f7:6a:db:9f:7f:da:8a:ca:12:08:94:bc:d8:8d:68:92:68:
89:5c:88:6e:3d:92:f3:91:92:07:b3:9a:ec:7e:4d:15:d5:cf:
ca:c7:d9:81:12:5f:f2:6b:06:09:f8:1e:ee:99:ca:93:9f:22:
43:e6:32:6e:d9:10:0f:ab:48:5e:a1:4c:1a:f8:53:30:05:0c:
57:7c:e7:f5:c9:15:0b:34:1c:47:bd:c6:a2:df:ed:68:29:e5:
88:3a:c0:7d:47:a9:00:19:d0:9c:b4:66:d9:99:df:7c:2f:13:
9f:f0:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:13:25 2024 by rpki-client on console-fra.rpki-client.org