Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/IxMNJnsNPUhU5-uAW6lnmxJWKxg.roa
File: IxMNJnsNPUhU5-uAW6lnmxJWKxg.roa (raw, json)
Hash identifier: w1S9j+TOzwQIdiZf8RNMPeNCvhNQ3w+03CgTYefQzC8=
Subject key identifier: 23:13:0D:26:7B:0D:3D:48:54:E7:EB:80:5B:A9:67:9B:12:56:2B:18
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649D5F9656C0710E29D732FEAB16447
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/IxMNJnsNPUhU5-uAW6lnmxJWKxg.roa
Signing time: Mon 01 Jan 2024 18:29:36 +0000
ROA not before: Mon 01 Jan 2024 18:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 82.103.105.0/24 maxlen: 24
195.34.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d5:f9:65:6c:07:10:e2:9d:73:2f:ea:b1:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23130d267b0d3d4854e7eb805ba9679b12562b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:58:13:9a:52:70:d5:52:32:3f:e1:a5:c9:
8e:a4:28:b7:3d:54:50:83:de:03:8d:a6:ef:2e:12:
da:c1:ba:30:86:9d:07:63:27:f8:2c:27:1e:fa:57:
61:6a:e8:a1:da:1f:c8:2e:9b:be:40:d3:af:66:2b:
b5:a0:1c:6e:91:ec:f3:f9:5c:80:c4:77:7b:89:86:
66:f2:40:e3:b8:9a:35:d6:03:26:66:41:80:d7:c1:
19:0b:1c:9e:34:59:7b:85:fc:e6:bf:6b:31:2e:54:
53:c4:59:a1:48:60:21:8a:c3:9a:d9:05:59:96:00:
a2:a0:e0:9b:e7:d9:ca:6a:64:4f:4d:5a:bb:15:b1:
ac:83:34:9c:26:fe:89:0a:bf:d7:14:26:fa:aa:b7:
7e:c0:02:69:60:bc:c6:ac:63:6f:88:be:37:fe:06:
71:1d:69:49:d4:03:84:79:ee:3f:23:92:ed:a4:6c:
31:2f:2d:fc:64:9b:11:a6:b9:00:82:68:45:c2:63:
35:64:08:86:26:57:7b:45:5b:10:cc:58:44:cb:82:
e9:c7:77:6a:87:38:aa:80:bd:d3:5e:81:8b:56:ef:
c7:42:0a:0c:c2:6b:73:ed:07:94:47:23:bc:98:0f:
79:3f:21:b3:98:a9:64:3e:c2:82:f7:a1:36:a8:d3:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:0D:26:7B:0D:3D:48:54:E7:EB:80:5B:A9:67:9B:12:56:2B:18
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/IxMNJnsNPUhU5-uAW6lnmxJWKxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.105.0/24
195.34.109.0/24
Signature Algorithm: sha256WithRSAEncryption
69:cd:94:ac:f2:e8:5f:11:6c:5d:51:60:39:be:c8:b6:92:8e:
92:d5:74:61:2b:0a:b5:a4:f9:95:62:da:91:d9:2a:07:64:37:
56:44:59:00:0a:72:ff:05:c3:26:7d:3a:c6:4b:30:07:94:54:
fb:c1:cf:c2:b7:b8:04:93:45:4d:62:c5:9d:c5:ea:82:dc:d8:
6f:38:93:b1:4c:dc:b2:f2:d5:eb:eb:4f:12:d0:8e:c2:c3:d5:
ec:72:62:98:c6:e2:10:31:21:ee:a9:57:37:8c:28:07:ea:1c:
0c:55:83:ca:e7:85:54:15:42:67:e2:98:a0:cb:60:de:21:d3:
25:8c:9f:9f:e4:6b:ad:7a:0b:23:d2:26:3c:df:28:1f:b1:13:
fb:45:75:5a:ff:8f:b5:87:1c:94:d9:22:93:1e:55:95:44:a7:
5e:7d:7c:d7:a5:5f:e4:5c:eb:00:c9:d5:5f:fb:a0:b0:59:87:
ad:f6:70:1b:3b:55:4d:a4:c1:96:6b:ef:62:46:45:45:cf:d3:
44:a0:40:21:0b:f4:71:19:e7:ea:c8:9a:28:24:c0:af:3f:e3:
6a:7d:13:2e:8c:78:a6:ae:88:78:33:6f:0c:f2:34:27:1f:3c:
27:93:e6:78:32:8e:ad:44:7c:1e:f3:99:cd:dc:bf:a7:27:2b:
bd:4a:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:11:40 2024 by rpki-client on console-ams.rpki-client.org