Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/IoS9KhsIlOyLJbYkNQqTLJ8Qokk.roa
File: IoS9KhsIlOyLJbYkNQqTLJ8Qokk.roa (raw, json)
Hash identifier: aw4SgzycgbkwrNrCXC3pNAmowAen22d43wGOLYTBXvo=
Subject key identifier: 22:84:BD:2A:1B:08:94:EC:8B:25:B6:24:35:0A:93:2C:9F:10:A2:49
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018F2063DEF3B096E0D8549C40BF2F7C745C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/IoS9KhsIlOyLJbYkNQqTLJ8Qokk.roa
Signing time: Sat 27 Apr 2024 16:29:27 +0000
ROA not before: Sat 27 Apr 2024 16:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198361
IP address blocks: 2.56.111.0/24 maxlen: 24
45.9.28.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:63:de:f3:b0:96:e0:d8:54:9c:40:bf:2f:7c:74:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 27 16:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2284bd2a1b0894ec8b25b624350a932c9f10a249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:9b:b6:13:e3:71:8b:9e:98:2f:20:62:eb:
c7:7f:5c:f6:86:59:d2:56:d4:d4:dd:20:c2:27:9d:
eb:52:90:d3:46:9b:73:36:8f:02:5c:ac:9e:01:9b:
b3:4c:6f:00:f4:2a:f7:21:36:64:c8:ea:89:6a:5b:
25:13:4f:04:37:8e:8b:6e:5c:f3:e2:78:aa:ec:d8:
67:86:26:0e:64:65:ea:6d:b4:a0:88:61:df:dc:d6:
89:38:f6:88:b4:a4:c0:f9:e3:96:99:69:f1:e8:b4:
54:a0:26:ec:6a:07:cf:51:c5:7e:36:89:6c:10:c9:
02:3e:b0:80:16:1c:27:fa:6e:75:ff:4f:25:b6:4a:
cb:10:c4:60:96:86:27:3f:71:6c:70:f8:11:ca:aa:
48:4f:4f:46:a2:33:7e:30:44:ab:11:c9:fb:f7:71:
1f:c1:8a:2a:9c:be:49:6b:ac:1e:09:3a:51:ad:90:
b2:cf:13:89:ef:67:c8:b9:fe:9b:0f:ab:ca:02:3b:
04:1d:36:42:8f:ba:71:6b:4b:4a:4c:03:e9:8c:16:
c9:40:50:86:8f:04:e7:d5:4e:6a:c8:62:57:5f:89:
a6:5b:55:07:de:a5:c9:99:f9:97:5e:29:16:90:95:
38:a5:ed:7f:04:50:3d:25:6c:e7:07:05:e7:69:43:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:84:BD:2A:1B:08:94:EC:8B:25:B6:24:35:0A:93:2C:9F:10:A2:49
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/IoS9KhsIlOyLJbYkNQqTLJ8Qokk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
45.9.28.0/24
45.88.138.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d2:19:44:51:9f:00:16:b0:f3:cf:ce:dc:d7:33:cd:bb:fe:
d7:7b:9d:99:04:19:7b:7f:3b:5b:9f:2b:16:e6:a4:81:26:d9:
00:87:c0:8b:a6:e1:58:b7:7d:e5:3a:53:74:9e:65:79:54:a1:
a0:1a:b0:57:6b:9a:a7:b9:c3:72:bd:59:84:64:9a:9d:83:9b:
a2:a2:6b:59:c7:c9:46:fb:ff:f3:51:48:76:13:45:21:fc:48:
ef:97:d3:1a:59:f6:bd:04:4d:fb:ee:f1:d5:d7:ed:2e:74:18:
8c:91:28:e9:96:23:50:11:4b:8e:8e:bc:50:37:ab:4e:15:9c:
12:23:5b:06:e4:97:2e:91:f6:36:e0:46:b3:bf:6a:ab:c7:11:
a7:9b:4f:f3:64:08:16:df:ba:0a:f9:3d:3f:42:b1:69:05:88:
3b:4e:06:00:c2:0f:da:89:4d:9a:02:95:af:76:ee:a9:d9:7a:
9a:85:5f:56:79:d7:89:83:f3:d4:2b:a2:ef:fe:77:eb:d3:e4:
91:04:36:bb:62:c1:f8:bf:af:5f:eb:8f:d2:f9:1a:d2:5c:7f:
c0:cc:14:0f:f9:57:6f:f1:23:12:d5:23:f0:ea:32:50:ab:43:
cd:d4:4a:5c:25:56:57:77:cf:8b:19:0b:b3:d5:d2:9a:11:1e:
fc:33:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:43:46 2024 by rpki-client on console-ams.rpki-client.org