Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/1BxQD-tTYR6AI3NyIQAeMV5v8dk.roa
File: 1BxQD-tTYR6AI3NyIQAeMV5v8dk.roa (raw, json)
Hash identifier: NUzkXeHHw+jseVHTZ65/J6ZpBY1QV8EwfoPNhS+Bw/Y=
Subject key identifier: D4:1C:50:0F:EB:53:61:1E:80:23:73:72:21:00:1E:31:5E:6F:F1:D9
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 018CC726E86D30B22D0A31A90B35E36490D5
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/1BxQD-tTYR6AI3NyIQAeMV5v8dk.roa
Signing time: Mon 01 Jan 2024 22:31:05 +0000
ROA not before: Mon 01 Jan 2024 22:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 217.169.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e8:6d:30:b2:2d:0a:31:a9:0b:35:e3:64:90:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jan 1 22:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d41c500feb53611e8023737221001e315e6ff1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:2b:df:35:77:03:9c:80:68:ab:c3:a1:bf:
94:77:52:04:0d:38:5c:2f:9c:b3:f1:3f:f9:37:2a:
02:e9:25:fa:b4:30:02:57:f6:a4:e5:7a:1b:af:4b:
48:6e:a4:cf:55:eb:33:82:5f:5c:6b:bb:ba:ce:05:
d1:c8:82:8a:5e:99:d1:17:b9:af:26:3d:80:90:4e:
bc:8e:f4:77:34:ac:36:14:52:c2:19:f9:2d:c3:e1:
95:63:14:c8:a7:b9:7d:d6:3a:54:1b:80:9c:3f:f9:
94:ec:91:62:64:62:a5:19:d0:41:2d:02:55:5a:2e:
7d:44:ec:be:f4:dd:09:dc:fd:7d:50:28:ac:b0:fa:
d2:53:e7:c2:81:00:ee:ec:f6:b0:17:ef:14:e9:43:
9f:0a:a8:dd:a8:c4:8e:8b:56:73:cd:06:fc:34:06:
a7:b2:7c:5a:55:50:9b:aa:1b:3c:e2:d8:b1:f7:e6:
36:31:84:43:05:50:75:99:4b:b1:ad:92:b9:f9:ec:
94:71:81:72:b7:57:78:9c:86:a2:1d:74:6d:f0:9c:
64:c2:f7:59:18:57:4e:c4:4c:16:53:50:ec:2f:eb:
41:4d:82:0e:54:b9:16:99:29:4b:21:55:99:e8:d5:
0c:f3:cc:ef:08:15:79:e1:cb:87:d0:41:c3:b1:80:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1C:50:0F:EB:53:61:1E:80:23:73:72:21:00:1E:31:5E:6F:F1:D9
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/1BxQD-tTYR6AI3NyIQAeMV5v8dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.202.0/24
Signature Algorithm: sha256WithRSAEncryption
34:76:02:f4:ea:c1:5b:e7:6d:44:e8:91:37:29:ed:26:68:58:
fe:63:5e:0a:5f:81:61:ed:36:02:fc:e2:85:be:62:8b:da:1d:
e3:72:30:35:4c:4f:41:bd:e5:1e:1e:69:7b:d6:0d:eb:09:ca:
e1:43:0d:14:b4:b8:1b:d9:6e:97:1a:4c:46:5f:28:ca:89:60:
bb:22:da:ea:4f:34:4d:05:c9:98:ef:fc:a4:aa:e7:e0:9e:bc:
10:61:f1:77:3f:bb:d8:86:d1:0e:fb:ba:1e:23:23:9d:38:f7:
ec:b7:b5:07:6a:ba:77:9a:66:0a:d2:4d:a7:e5:d9:cf:b1:55:
8e:d7:5c:e6:1e:a4:ea:fa:02:58:0a:84:5e:cd:10:34:af:58:
d5:fc:7d:6d:a5:41:e2:a3:05:87:bd:4b:cf:7c:a1:81:da:d3:
19:76:4a:d7:f7:81:8f:33:5f:40:71:a4:73:89:21:c5:b0:3a:
12:27:26:d1:5a:bd:31:f8:b7:90:36:2f:8a:05:d3:b5:95:fa:
4a:59:5e:bc:c5:fb:41:62:bb:c3:6f:b7:84:63:c3:56:e5:d4:
b6:20:f3:49:de:52:74:ac:29:4e:21:e8:59:56:cf:0e:81:db:
c3:f9:8b:81:79:04:d2:0d:03:18:f6:38:42:5f:ff:f2:fb:24:
6c:ed:1c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:37:47 2024 by rpki-client on console-fra.rpki-client.org