Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IGLWNXfXo0H2NpXSxDgGfvmGhm8.roa
File: IGLWNXfXo0H2NpXSxDgGfvmGhm8.roa (raw, json)
Hash identifier: nIf4Tjj2YEI9K4mvuT28Zl/01PUjV2xNnbjVO6PGRqw=
Subject key identifier: 20:62:D6:35:77:D7:A3:41:F6:36:95:D2:C4:38:06:7E:F9:86:86:6F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC727718A4DCA07492689FCCC05D99822
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IGLWNXfXo0H2NpXSxDgGfvmGhm8.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8409
IP address blocks: 188.93.104.0/23 maxlen: 23
83.149.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:71:8a:4d:ca:07:49:26:89:fc:cc:05:d9:98:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2062d63577d7a341f63695d2c438067ef986866f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:4a:5a:60:69:5a:4c:55:a8:19:f3:a3:87:
6f:c7:a6:f7:b6:b9:6d:2c:69:0c:f0:80:a0:6c:50:
f4:3d:42:2d:37:2c:08:65:6f:62:30:20:63:93:4e:
e2:aa:84:38:92:4a:c4:37:6b:df:41:96:7d:a4:19:
6b:e8:e0:71:6c:18:de:e0:84:0c:57:69:1a:3f:28:
87:93:a3:b5:42:03:ef:17:ba:ed:27:26:06:5e:73:
c1:df:6e:53:37:bd:d7:96:56:7c:29:fb:7c:d0:7d:
b5:c8:f5:cf:db:b1:b1:3b:55:ff:b9:4c:73:b3:53:
be:3d:c6:fc:49:fc:11:6b:0c:4a:fb:04:4f:e5:30:
12:df:2e:71:5d:c6:ec:3d:87:a8:a4:f8:e3:1e:c5:
3a:fa:d8:11:7a:45:bc:25:0d:73:03:eb:04:75:60:
1b:37:6b:6a:a2:ca:bf:14:c0:9d:9b:84:ab:d7:72:
f3:f1:c5:5a:eb:13:84:10:68:62:9b:2f:33:61:22:
1b:fd:55:e1:2e:63:53:bb:28:9b:41:d5:a1:65:15:
92:ae:d2:07:2b:97:8b:b4:f8:af:33:e1:a0:42:6f:
5f:e6:2f:38:d1:18:66:b5:34:4d:db:6f:20:2c:c0:
4e:dd:d5:d0:b2:56:3f:04:92:4e:4b:25:33:cf:de:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:62:D6:35:77:D7:A3:41:F6:36:95:D2:C4:38:06:7E:F9:86:86:6F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/IGLWNXfXo0H2NpXSxDgGfvmGhm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.149.250.0/24
188.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
14:46:38:5d:67:fc:f7:6d:3f:39:d2:ee:e0:64:7d:7e:3d:18:
6e:7c:c8:5b:f3:7c:44:b4:bb:9b:9b:f2:24:94:fb:69:ac:8c:
48:9e:b5:9d:af:42:7f:48:a2:39:44:64:98:97:72:e2:b7:b8:
19:07:88:da:21:98:fa:07:c6:11:89:50:4f:b8:9d:cd:34:c2:
40:39:72:b5:8e:98:1f:86:8a:fb:20:eb:69:ad:89:f7:c7:2c:
a1:64:08:67:6c:bf:77:8c:27:d9:51:80:57:d6:26:4e:cb:7e:
c0:f9:60:63:1b:72:40:4f:65:4a:32:56:1a:e0:2c:9a:1a:10:
b8:e1:77:4a:cb:d8:86:b9:04:a3:64:11:14:36:38:14:75:ae:
df:1c:dc:ba:a2:2d:3c:ca:71:43:61:27:eb:90:fc:b2:cf:fa:
cf:4a:f8:1a:1f:c4:ae:81:9f:f8:03:f0:c7:c4:81:d5:8c:81:
1a:2d:fb:73:2d:05:de:bd:0c:1f:1e:24:22:2d:ad:d4:3e:22:
31:e8:e9:b7:88:69:60:ac:2b:21:68:2a:c2:c2:bf:2d:b8:b1:
2f:dd:a2:fd:d0:d7:6d:5a:14:3d:fa:e4:69:56:25:67:66:5b:
51:ac:08:ab:4d:c4:82:80:ab:e6:8a:0a:9e:99:e4:cc:69:a2:
1d:a2:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:16 2024 by rpki-client on console-ams.rpki-client.org