Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/IySF5Am5OV30qDlkGcLBOvBMsOU.roa
File: IySF5Am5OV30qDlkGcLBOvBMsOU.roa (raw, json)
Hash identifier: B3PpCBDcJEhuQFuPDlKjD/t46HJA/B2Gf97IspXbqfg=
Subject key identifier: 23:24:85:E4:09:B9:39:5D:F4:A8:39:64:19:C2:C1:3A:F0:4C:B0:E5
Certificate issuer: /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial: 018CC3B7107CF92EFFBFF7AA5E9160550464
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/IySF5Am5OV30qDlkGcLBOvBMsOU.roa
Signing time: Mon 01 Jan 2024 06:30:03 +0000
ROA not before: Mon 01 Jan 2024 06:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16111
IP address blocks: 193.238.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:10:7c:f9:2e:ff:bf:f7:aa:5e:91:60:55:04:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=232485e409b9395df4a8396419c2c13af04cb0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:73:50:f5:8b:9a:da:77:3c:95:40:a2:ad:
a4:8a:9a:b8:b1:c0:23:75:1b:7a:a5:81:ea:77:05:
a7:59:30:4d:9b:b1:1a:f0:55:3d:97:b4:b9:c8:53:
18:2c:54:23:4e:26:9f:ca:4f:5e:fb:78:d2:60:87:
3d:e7:d6:cc:0b:44:df:de:14:ca:5d:86:96:5e:45:
4c:05:f8:40:af:27:a0:e9:30:23:93:c7:83:f5:09:
69:05:1b:b0:21:b4:42:84:b3:ed:63:34:89:f7:3c:
b9:30:da:9b:1b:da:ee:66:2d:30:c9:18:3b:85:8f:
fc:5c:b2:81:60:73:d0:9f:fe:ee:db:54:c5:cc:d1:
11:c9:e7:2d:09:58:63:47:3d:97:0f:e8:8e:22:2d:
33:19:8e:04:7a:9c:99:b4:21:7b:b3:d3:7a:cb:ff:
f5:98:cb:ac:aa:6d:a9:13:0e:77:3c:b3:88:83:06:
0d:e3:7e:5d:ec:43:3e:5a:a1:00:24:3e:c8:ee:1c:
36:3f:5a:9d:8e:73:d2:2e:87:94:a1:c3:53:be:39:
a1:b8:e4:53:87:af:84:58:71:3e:d6:86:b4:d4:23:
48:45:e3:d5:28:2f:e5:32:05:45:1d:99:a3:14:b5:
2d:43:2d:1a:9c:44:cb:02:4c:d6:de:6d:20:02:40:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:24:85:E4:09:B9:39:5D:F4:A8:39:64:19:C2:C1:3A:F0:4C:B0:E5
X509v3 Authority Key Identifier:
keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/IySF5Am5OV30qDlkGcLBOvBMsOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:18:35:85:22:5c:ff:8f:e7:89:58:9c:23:24:15:5f:1a:34:
7a:52:a4:cc:c5:43:25:5d:56:50:99:af:48:f1:85:7e:3d:6a:
55:2b:3d:fd:fd:d9:56:01:7c:79:f8:8e:7e:16:44:43:94:fd:
02:d3:95:3e:3b:b5:fc:98:cf:f1:48:73:9a:f7:5c:91:7b:38:
96:22:6b:6b:bc:65:a8:e3:60:26:80:f2:7d:50:d5:8c:f3:02:
61:bb:3a:0a:ca:96:bf:36:36:dd:84:67:7a:40:69:30:31:a6:
a6:ff:9d:62:b0:57:3f:9f:9f:04:b7:9b:97:64:a1:4e:c8:2d:
8f:d5:6b:e5:81:6d:a9:ba:cf:9a:d5:77:2d:76:b9:36:36:fb:
76:d0:4e:84:8a:74:e6:e3:cb:1a:09:3c:fc:ac:f5:28:11:24:
97:82:a4:a2:17:3a:97:6e:45:d4:d1:c5:24:1f:17:b1:c1:89:
b1:36:64:19:2f:f1:8a:b6:8b:0a:de:4d:0f:ca:4f:68:2f:68:
78:d3:16:c8:e3:1f:f7:05:30:45:93:15:c7:02:85:3e:a5:0c:
d5:ad:20:e8:19:27:79:40:5d:8a:93:3a:00:5c:50:13:47:09:
03:d0:1e:cd:99:94:46:3c:18:ab:b7:75:d1:1d:f1:55:6e:c7:
65:5a:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:18:57 2024 by rpki-client on console-ams.rpki-client.org