Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/IreHy3icxkudti9i-w91scUXBqY.roa
File: IreHy3icxkudti9i-w91scUXBqY.roa (raw, json)
Hash identifier: 1XgSbiLSxpMCg/13EEAH+I9rZtw3SbeAKs8HRsSNZqE=
Subject key identifier: 22:B7:87:CB:78:9C:C6:4B:9D:B6:2F:62:FB:0F:75:B1:C5:17:06:A6
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D6BB255C8670213DDB4A0EBBF67B7
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/IreHy3icxkudti9i-w91scUXBqY.roa
Signing time: Mon 01 Jan 2024 00:30:00 +0000
ROA not before: Mon 01 Jan 2024 00:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210754
IP address blocks: 62.176.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6b:b2:55:c8:67:02:13:dd:b4:a0:eb:bf:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22b787cb789cc64b9db62f62fb0f75b1c51706a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:e4:cc:1f:27:37:0a:2d:fb:36:75:c5:d0:
2a:21:d1:aa:f3:c1:1b:a0:5a:37:05:5a:34:33:7d:
18:c8:af:4b:8c:7e:a6:25:94:48:98:d8:24:75:2b:
ab:21:86:7c:7c:43:6c:ee:f6:52:f1:53:97:35:a4:
98:fb:34:03:1a:a0:23:51:68:00:c1:10:39:c6:e0:
35:1c:64:df:97:46:23:a8:c7:ae:47:21:66:2a:b7:
92:cc:55:ef:df:6d:e0:96:52:35:9e:3f:01:43:92:
00:59:d1:d6:6e:2f:ba:6e:6f:4b:e9:9d:9e:50:6c:
09:dc:bd:63:ff:6b:8a:d8:76:2b:f8:cb:5b:2d:89:
61:3f:d0:d9:90:6f:cf:d7:1e:d0:48:85:95:01:37:
f0:c2:7f:20:0d:2a:7b:13:70:dd:8f:78:8f:a6:e2:
fb:db:26:64:23:d9:56:52:68:74:9c:8b:96:c5:e3:
21:4e:8f:7f:56:be:62:b3:4b:d4:d8:8a:56:95:56:
bf:6f:0e:62:85:4a:cb:98:ff:5b:0b:d7:c7:79:2e:
c1:fa:a9:a2:b0:08:44:91:1e:be:5b:1a:99:49:92:
d9:41:50:ca:9b:50:a7:5f:fa:14:e7:5a:86:fb:43:
dd:a2:9c:87:78:07:30:53:04:0f:cd:75:e2:61:bd:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B7:87:CB:78:9C:C6:4B:9D:B6:2F:62:FB:0F:75:B1:C5:17:06:A6
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/IreHy3icxkudti9i-w91scUXBqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.98.0/24
Signature Algorithm: sha256WithRSAEncryption
84:64:83:68:60:7c:ae:e3:79:34:85:73:03:72:ee:bb:cb:b3:
0c:5d:2e:ff:fd:be:7b:a1:bc:e0:61:a7:6b:ca:6d:10:57:1b:
5b:ad:8a:06:ef:1d:21:b0:ea:a4:e7:76:a4:4b:ea:58:a6:be:
aa:44:0c:eb:bc:ac:92:f5:7b:d2:3b:38:4d:b7:aa:c8:60:8f:
0f:69:98:f8:17:bc:89:91:5b:de:2b:e0:25:a2:69:57:b5:ed:
33:f3:57:b6:ee:14:97:06:96:c2:27:cc:4e:ab:cf:bc:79:9a:
ec:4f:d9:56:a8:d7:ca:1a:2e:06:b8:84:c9:50:5c:09:f7:de:
04:61:44:79:9b:99:4b:59:af:94:76:a1:3b:82:0e:33:1f:a0:
9c:f1:7b:e7:ec:d8:c5:3f:51:19:78:b6:3b:68:f8:0a:b8:90:
49:be:b9:fe:5f:53:5b:c8:88:1c:a6:fe:68:37:89:cc:5e:c3:
d9:db:eb:da:a9:6f:2f:3e:8a:0a:fa:79:e1:e9:da:35:a0:50:
8e:44:5a:9d:d6:03:e8:c7:05:a1:61:43:bd:a6:c6:f6:32:e1:
c2:f6:3a:1b:e7:8d:38:08:cb:73:58:9d:5e:4e:cf:46:19:79:
6a:72:bf:8f:fa:4b:ed:aa:6c:6d:ad:10:40:27:3b:0f:9d:47:
4d:97:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:31:54 2024 by rpki-client on console-fra.rpki-client.org