Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IkumPcB5F1RwBO2PVN7wby9nINg.roa
File: IkumPcB5F1RwBO2PVN7wby9nINg.roa (raw, json)
Hash identifier: 1NjFJmx/KN9uwoyRPMZdy+4RAUu44N3mBbPASIyImX0=
Subject key identifier: 22:4B:A6:3D:C0:79:17:54:70:04:ED:8F:54:DE:F0:6F:2F:67:20:D8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019154B16F43E3D1999AF2B4FAE316B435AF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IkumPcB5F1RwBO2PVN7wby9nINg.roa
Signing time: Thu 15 Aug 2024 06:20:00 +0000
ROA not before: Thu 15 Aug 2024 06:20:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216127
IP address blocks: 194.58.33.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.133.64.0/24 maxlen: 24
195.133.65.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:b1:6f:43:e3:d1:99:9a:f2:b4:fa:e3:16:b4:35:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 15 06:20:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=224ba63dc07917547004ed8f54def06f2f6720d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:68:fe:50:e6:75:cc:26:2c:19:de:02:fd:
46:fd:28:de:58:a7:f3:57:9b:aa:9e:68:c4:a3:78:
75:2f:3b:f9:cd:b1:b5:65:b6:c3:9b:5f:18:1b:2f:
d7:73:c1:23:d8:f5:45:0c:92:3f:55:78:4a:2b:67:
c5:00:9c:79:55:de:b9:8f:2e:50:ee:6b:9b:84:a6:
3b:f9:ed:b8:fc:10:f9:d0:0f:30:df:7c:0d:dc:f5:
4a:7d:f2:fa:d1:4c:2a:8e:e7:8f:27:c2:9d:6a:c4:
88:c3:91:7c:43:49:27:44:eb:62:fe:38:4a:35:82:
e2:08:6c:5f:50:d8:f4:a7:c7:d9:e5:22:b9:74:8c:
fb:a4:b1:9d:c6:05:51:da:c2:e0:03:78:33:9d:7a:
9e:7c:87:98:99:4c:0d:22:f7:04:57:37:ca:7c:ff:
3f:70:57:70:33:3d:9a:6e:ab:4d:a2:4d:7e:97:98:
f0:dd:90:56:37:a2:30:b2:11:7b:0d:e0:4b:d3:25:
dc:91:8c:14:ed:66:5b:f5:a7:61:a0:7c:cd:ae:73:
b6:28:ab:39:09:45:85:b9:5b:47:2f:ce:cc:ae:0a:
33:b0:f0:01:97:14:08:da:35:99:72:e0:55:98:3a:
df:03:06:69:23:e0:d5:30:40:00:02:b9:6f:1a:04:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4B:A6:3D:C0:79:17:54:70:04:ED:8F:54:DE:F0:6F:2F:67:20:D8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IkumPcB5F1RwBO2PVN7wby9nINg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.33.0/24
194.87.54.0/23
195.58.38.0/23
195.133.64.0/23
212.193.4.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:ba:a6:8e:85:b1:9b:f9:bd:d1:fb:1f:5a:50:d3:b8:a4:7e:
68:a8:47:0c:ab:31:f8:05:4f:71:28:0c:2f:29:ab:27:93:0a:
71:b2:ac:02:3b:e7:4a:f0:65:65:4f:90:69:14:11:32:86:25:
85:f0:f4:e8:bb:83:49:2f:8a:db:2a:86:6c:b7:6f:8a:5f:b9:
90:23:e8:7d:18:cf:14:eb:2d:8a:64:2c:14:bb:e5:cf:2b:89:
2d:45:c6:b4:cd:e4:38:75:96:be:3c:8b:e0:ca:a3:c8:96:e5:
a1:09:a2:56:5a:a5:5a:11:76:c9:fb:b7:ff:0d:1b:44:d8:52:
27:8b:a8:69:3f:a2:15:83:60:2e:a4:5d:dc:64:06:f8:91:f6:
dd:a6:ee:40:b9:c5:b1:1c:f7:f2:2c:9e:ca:ed:92:08:cf:d4:
bc:c3:00:9e:c7:44:7b:b2:c3:8c:0f:8c:08:88:9c:e5:d1:fe:
d3:18:f3:94:26:1a:fa:79:8d:3f:f0:ff:0a:c8:8b:02:77:21:
7d:f2:ab:e7:07:aa:b3:ef:89:f0:04:ae:2f:43:5d:90:5c:ed:
05:22:34:05:46:4e:d7:22:f3:02:1f:f6:1f:71:97:e4:ef:8c:
6c:d0:38:64:bc:26:99:87:47:d2:e0:c1:17:bf:a6:4c:e0:5e:
24:01:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-fra.rpki-client.org