Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/iBttbv_nC2UZESGmFzPEmSbirXY.roa
File: iBttbv_nC2UZESGmFzPEmSbirXY.roa (raw, json)
Hash identifier: WTe05bMdgJXscMIjqK2jRTJJAahu0pyQ1x8KOq3JLJQ=
Subject key identifier: 88:1B:6D:6E:FF:E7:0B:65:19:11:21:A6:17:33:C4:99:26:E2:AD:76
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018D8947B8DBD6C5AD52554802AB55B10F94
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/iBttbv_nC2UZESGmFzPEmSbirXY.roa
Signing time: Thu 08 Feb 2024 15:13:15 +0000
ROA not before: Thu 08 Feb 2024 15:13:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 2a0b:3c41:2::/48 maxlen: 48
2a0c:9e02::/32 maxlen: 40
2a0e:cbc4::/32 maxlen: 32
2a0e:cbc5::/32 maxlen: 32
2a0e:cbc6::/32 maxlen: 32
2a0e:cbc7::/32 maxlen: 32
2a0e:eb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:47:b8:db:d6:c5:ad:52:55:48:02:ab:55:b1:0f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Feb 8 15:13:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=881b6d6effe70b65191121a61733c49926e2ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ae:f8:1b:4b:d7:2b:75:6e:70:1c:de:b6:11:
fb:b9:57:8a:bb:04:87:fa:e2:2a:1a:0a:75:89:ad:
16:47:4f:9c:d1:26:5a:99:6f:c7:1e:4e:a2:d5:27:
ee:f0:4f:f0:07:43:eb:4e:64:0d:38:3d:84:70:90:
f4:60:af:65:60:c7:db:90:2f:20:3b:b7:37:cc:34:
4c:e9:df:84:44:1d:59:69:1e:13:c3:be:b1:3a:f5:
15:76:73:81:3f:6e:6d:c7:5f:17:85:65:97:57:da:
4b:5f:0b:79:4d:fc:f7:9d:d9:9f:f4:12:aa:3b:80:
d3:5f:2d:67:1e:7e:2b:70:9a:04:57:53:94:95:0d:
b1:ce:c2:a0:47:b5:93:0e:53:a9:ad:ea:f6:1d:2f:
0d:2c:5f:02:d6:d3:66:a5:b7:39:24:e7:46:cc:a0:
28:7f:da:bd:ca:45:3a:a3:a6:bf:c2:e8:39:87:81:
1b:78:82:98:e0:34:47:ca:ad:27:6f:96:ff:d0:e7:
16:53:9c:e8:78:21:e5:30:38:4b:7f:03:2f:d5:88:
36:aa:79:d5:5a:52:90:66:62:18:a3:da:ec:20:15:
2a:f2:1b:b4:b4:2d:a4:88:6b:7d:38:38:c2:dc:ce:
8b:ca:c7:44:b1:b9:75:f7:44:b7:74:03:62:30:c2:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:6D:6E:FF:E7:0B:65:19:11:21:A6:17:33:C4:99:26:E2:AD:76
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/iBttbv_nC2UZESGmFzPEmSbirXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3c41:2::/48
2a0c:9e02::/32
2a0e:cbc4::/30
2a0e:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
29:10:37:8b:90:64:02:ce:55:a5:ca:53:fc:93:bf:f0:08:25:
bc:11:e6:5f:b4:c2:e4:62:18:5d:d1:aa:2d:fb:57:a8:2f:6c:
c2:ae:f8:7f:ee:b9:73:e6:01:71:a0:38:6e:6d:b8:71:1e:f7:
8d:4c:ad:d8:62:73:52:51:4e:7f:44:47:41:a4:d7:12:96:79:
e0:53:1c:99:a4:d9:0a:b1:e6:09:62:b1:d0:7f:d0:ae:b3:55:
02:cf:82:26:d7:5a:ab:ba:19:d5:bc:44:4d:90:8f:b2:36:04:
07:17:4f:7a:df:82:56:bb:60:e9:88:ea:13:b6:b9:0d:b2:3a:
0b:45:6c:72:f4:b9:fc:b2:cb:b7:80:ec:0c:89:bd:bd:d1:38:
c4:db:6e:bd:ba:3c:61:03:d5:21:1c:c8:90:95:fa:fe:7c:63:
da:21:7f:df:b7:a5:04:a3:ef:b2:48:c9:08:ec:48:b1:cf:32:
28:30:f3:72:ad:a7:34:be:d8:c8:e9:89:50:6d:5c:1b:73:b7:
c6:78:a0:32:8d:fa:95:96:e9:0a:af:a1:8c:f9:9d:47:46:be:
7c:93:72:d6:59:42:3d:a2:16:88:65:2a:3a:25:ba:9e:e2:01:
1d:1c:59:e7:73:fe:9f:bf:cf:c3:40:5b:00:5c:41:2d:20:5e:
97:e7:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:25:13 2024 by rpki-client on console-ams.rpki-client.org