Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/IBZEp_Wxbv2qdyGaj-F4TLgZblk.roa
File: IBZEp_Wxbv2qdyGaj-F4TLgZblk.roa (raw, json)
Hash identifier: tJurjw3Q9CWQRcXzi7ty7Zbg/0GHBIS372vCf8YiEng=
Subject key identifier: 20:16:44:A7:F5:B1:6E:FD:AA:77:21:9A:8F:E1:78:4C:B8:19:6E:59
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 018CC493725E7D29C945B23A0A612E5E04EB
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/IBZEp_Wxbv2qdyGaj-F4TLgZblk.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209275
IP address blocks: 185.174.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:72:5e:7d:29:c9:45:b2:3a:0a:61:2e:5e:04:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=201644a7f5b16efdaa77219a8fe1784cb8196e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:d8:eb:da:ce:b4:c3:1d:ee:e3:09:f9:e2:
b7:96:cc:a7:7a:c3:15:e8:8c:a9:63:20:34:86:1c:
eb:fb:1d:e4:8e:6f:94:87:1a:d1:ce:25:57:27:74:
f1:81:45:1a:ef:eb:b2:2e:63:7f:cd:28:2b:3a:0b:
9f:99:32:cc:0e:63:23:18:93:b5:02:a2:49:67:10:
fc:f7:53:74:ca:b5:b4:92:e8:61:33:c8:72:34:b1:
34:4c:d1:9f:e6:f1:48:a9:f8:15:6a:af:e4:af:af:
cf:09:a6:e8:db:c2:07:01:97:6d:77:ec:20:94:2c:
bc:a5:94:69:f1:0a:bd:ac:04:59:78:7c:cd:9a:92:
2b:fe:32:62:b7:95:64:f0:c6:30:73:50:6f:4c:d7:
c1:d2:ec:7a:5c:49:8e:ce:12:8e:7b:59:3b:59:fd:
73:91:0b:82:e2:f8:01:08:c4:c7:04:1b:1f:c4:bd:
55:ca:00:b5:d1:c8:b6:b3:40:51:07:14:8e:a6:ac:
70:f3:e3:71:9c:13:8c:27:cf:36:96:9d:fc:ef:5e:
3b:5c:0d:d4:31:dd:7b:cc:1b:6b:fa:49:c1:65:d3:
18:d9:3b:95:d2:f6:51:03:e5:d8:80:59:47:aa:fb:
5d:8d:52:29:b1:6d:e6:37:57:34:27:12:22:24:12:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:16:44:A7:F5:B1:6E:FD:AA:77:21:9A:8F:E1:78:4C:B8:19:6E:59
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/IBZEp_Wxbv2qdyGaj-F4TLgZblk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:22:25:e4:5b:ec:69:8c:54:dc:9c:7f:ef:d9:eb:f9:b3:f8:
58:ae:fa:22:41:e7:aa:c9:23:be:76:97:3f:eb:ca:f2:0c:69:
66:4b:12:d4:9b:1b:83:40:12:18:dc:3f:12:89:41:7c:0e:c9:
ce:1a:73:1a:a0:67:89:65:ed:75:f9:52:f4:ce:ad:f1:0c:e4:
e4:d6:ba:21:24:f2:34:d9:f1:a6:d5:b6:0a:6a:50:95:b0:6b:
3d:54:ec:6f:2d:41:85:23:d3:d1:af:6c:85:c9:d8:00:b4:92:
80:29:3c:39:3c:9c:20:58:1b:ca:b0:b7:56:87:d8:83:ed:ec:
e2:7e:3f:98:b7:34:0d:a3:a6:87:42:78:4a:10:b9:cc:95:d0:
d7:99:4e:ec:3d:b1:65:f8:05:e4:11:ed:40:b3:f9:5e:b8:2c:
0c:a4:55:c2:d4:6c:52:fa:9e:e5:ff:f7:f4:e2:94:7d:45:8e:
8b:46:15:6c:c0:61:29:8b:fd:dd:72:27:5c:c4:a2:45:6b:27:
ff:47:12:4f:65:b7:7d:41:79:f3:2e:36:40:1d:c2:f6:59:32:
aa:2a:cc:62:6a:ea:a0:31:93:cd:0f:b9:04:c2:32:bd:41:29:
43:44:fc:0f:cb:40:7d:16:c2:61:20:19:ea:d6:57:26:c4:5a:
9c:8c:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:43:01 2024 by rpki-client on console-ams.rpki-client.org