Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/IwPkJaDaCyQRJWYB6-dd_8jvWrE.roa
File: IwPkJaDaCyQRJWYB6-dd_8jvWrE.roa (raw, json)
Hash identifier: z5//vBbYFNmNkJfgjchsQzSdS/7ZQu7Z2MpVMNRmBQo=
Subject key identifier: 23:03:E4:25:A0:DA:0B:24:11:25:66:01:EB:E7:5D:FF:C8:EF:5A:B1
Certificate issuer: /CN=da35b27eb523b67f8d691c8062f3370e149302fd
Certificate serial: 018CC3B6803DC8125FD51A1537CD17CD4F0A
Authority key identifier: DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/IwPkJaDaCyQRJWYB6-dd_8jvWrE.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 193.222.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:80:3d:c8:12:5f:d5:1a:15:37:cd:17:cd:4f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da35b27eb523b67f8d691c8062f3370e149302fd
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2303e425a0da0b2411256601ebe75dffc8ef5ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:6e:c7:38:69:3e:9f:35:38:0f:3d:8d:72:
32:5f:34:f3:3b:c8:ed:75:e6:5c:95:47:a6:10:72:
26:78:a5:ae:52:80:8a:74:c7:a3:73:d4:c5:a6:f1:
ad:7b:b9:b7:da:c9:e2:8a:4f:18:5d:ab:1b:18:1a:
8d:ec:f8:5b:d6:b7:40:54:ac:06:86:c4:7d:29:30:
4f:e4:a3:fe:9a:8e:0c:1d:71:a6:43:3a:34:c9:c2:
46:7d:44:44:ba:bb:ed:f0:51:55:e4:3f:6e:22:60:
41:09:b0:10:04:69:3e:b5:05:5c:c3:d4:47:db:d4:
f1:d2:51:fd:d2:80:70:b5:00:41:8a:5d:7c:1e:e6:
cf:8a:26:ac:f9:31:b9:77:50:98:f3:06:78:61:30:
15:f8:1b:42:e9:20:86:a8:f5:c6:e5:ea:73:5b:fa:
dc:e7:e7:62:da:a8:84:e5:4b:5f:f9:68:34:3c:7b:
4b:d4:82:c6:38:2e:15:cc:0d:b7:af:81:f3:6e:e4:
c6:eb:b3:9f:4e:bb:2f:f1:6d:07:ef:4c:aa:63:9d:
17:a1:8d:1f:99:ee:f8:a4:db:6e:01:01:8e:bd:56:
5a:59:4d:3c:65:93:bb:c8:9e:23:29:6a:f6:f6:60:
60:58:ec:51:f5:7b:c0:87:6b:a0:c2:ff:0a:20:f8:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:03:E4:25:A0:DA:0B:24:11:25:66:01:EB:E7:5D:FF:C8:EF:5A:B1
X509v3 Authority Key Identifier:
keyid:DA:35:B2:7E:B5:23:B6:7F:8D:69:1C:80:62:F3:37:0E:14:93:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jWyfrUjtn-NaRyAYvM3DhSTAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/IwPkJaDaCyQRJWYB6-dd_8jvWrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f3f8c4-19b0-4f3b-88e3-cceaeb5d2db9/1/2jWyfrUjtn-NaRyAYvM3DhSTAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.138.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2e:ea:9e:9e:e6:e8:3a:04:7d:dc:ba:05:14:66:c8:04:e5:
dd:93:00:02:64:20:e0:88:a7:6c:e3:64:99:fc:27:68:56:51:
14:4b:ef:ef:40:41:af:a4:32:f9:22:40:31:bf:ff:b3:fc:ea:
d5:77:94:a2:91:7b:47:cf:41:07:7c:d5:ee:37:53:fb:bd:18:
b9:7b:26:a5:34:a0:ec:fc:d7:9c:23:77:0b:b8:57:72:b4:59:
00:aa:af:5c:d2:c5:64:bc:40:68:81:ac:53:e7:cb:fe:3e:f6:
c1:17:29:48:2d:3d:25:5e:c3:78:46:92:5f:b6:ad:84:8d:6d:
48:a6:75:c8:e3:14:12:9e:11:fe:84:4c:d0:e5:02:50:cb:69:
3c:77:57:ea:2f:88:5b:8e:65:a2:cf:8f:99:f5:7c:78:17:87:
94:a7:85:8b:42:c9:2e:65:d0:ad:b4:b4:ba:7d:56:49:0c:bc:
f2:dd:a5:1c:26:e3:c5:2d:91:60:6c:db:32:32:79:d8:3e:ac:
ae:a2:94:68:57:d1:c6:f1:5c:a3:dc:ea:5d:a8:67:02:f7:99:
39:0a:53:4c:f5:b3:81:a1:f1:97:4f:6f:9e:a0:39:73:8e:69:
29:44:01:b1:7f:93:92:b8:de:45:1d:ce:4a:79:bf:5b:24:66:
5e:65:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:53:51 2024 by rpki-client on console-fra.rpki-client.org