Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/E_laWUYCmTV0SCcR-n5FbsSpUAo.roa
File: E_laWUYCmTV0SCcR-n5FbsSpUAo.roa (raw, json)
Hash identifier: I9IAxK/QPcty9PaECGbQkPS55lT6UHIYJJIlcZ9w1c0=
Subject key identifier: 13:F9:5A:59:46:02:99:35:74:48:27:11:FA:7E:45:6E:C4:A9:50:0A
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 018CC726E8E8494E87432B8245659021F188
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/E_laWUYCmTV0SCcR-n5FbsSpUAo.roa
Signing time: Mon 01 Jan 2024 22:31:05 +0000
ROA not before: Mon 01 Jan 2024 22:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 217.169.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e8:e8:49:4e:87:43:2b:82:45:65:90:21:f1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jan 1 22:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13f95a594602993574482711fa7e456ec4a9500a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:be:17:86:0b:14:2c:b9:36:bb:49:5b:f4:27:
da:74:59:dd:79:70:eb:0a:ba:94:61:25:09:11:91:
c9:a2:a1:41:57:80:50:a9:6e:58:50:0c:f4:3e:78:
8a:c8:a4:9f:ca:b9:b0:29:5b:86:c0:9a:2f:01:d8:
1d:9e:5b:c4:0b:9f:0f:d8:80:a1:bf:48:17:0c:44:
1c:07:cd:cc:ad:d1:8b:3c:d0:7e:91:b6:e4:0b:e7:
80:cb:98:3f:f4:4f:6d:8f:4c:75:bc:ee:f1:be:62:
46:64:c6:94:3f:e0:d5:b6:17:70:aa:7b:c0:20:3a:
8c:d7:8c:96:1c:c9:1e:5e:89:f3:9f:eb:18:3a:a0:
c5:73:78:be:a4:af:c0:ea:22:77:dd:9d:20:fa:85:
65:07:95:36:2c:10:cf:62:7c:31:d3:a9:89:d2:7f:
27:61:89:c4:ba:45:c5:ad:8b:68:0b:89:fa:1a:a4:
7b:27:6a:6c:42:7d:a4:b2:50:26:ce:bd:b6:7b:5e:
5d:33:4a:e6:82:fa:74:8a:81:c6:c8:d9:73:02:48:
a2:bc:44:4f:d0:f7:c8:11:07:89:69:af:19:40:0d:
9f:34:8b:83:da:fe:79:11:c0:7d:79:e4:34:9e:0f:
d0:42:57:c3:20:7c:99:2c:26:6a:52:da:a2:f2:f7:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F9:5A:59:46:02:99:35:74:48:27:11:FA:7E:45:6E:C4:A9:50:0A
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/E_laWUYCmTV0SCcR-n5FbsSpUAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:48:82:e1:ac:e9:c4:fe:29:22:7a:3f:94:b4:16:e4:b3:b9:
d9:2e:09:e7:1e:92:d5:5a:6d:bf:a3:dd:1e:aa:81:00:86:60:
a3:0d:3c:db:1d:d7:d2:02:05:c6:d1:2c:45:8d:13:6d:b1:18:
e5:7b:87:ce:03:43:e9:b5:e1:08:76:b4:e1:6e:4f:6c:c8:4e:
53:39:13:4b:77:a0:5b:f9:f5:cf:5c:87:20:21:ae:b4:aa:8f:
f2:c1:7b:00:50:ff:67:60:53:49:5b:ac:6f:c2:f9:68:9d:ca:
f9:3b:60:50:1d:c9:58:fb:10:29:7e:ba:28:de:1f:34:21:8c:
02:09:42:67:59:1a:1c:79:ab:8f:47:f4:b6:9c:1f:a8:0a:ab:
6f:ec:8f:0f:b1:63:8b:1b:7f:80:d4:b6:c9:15:b3:84:e2:d5:
ba:05:92:e8:47:be:92:64:19:6b:e4:c2:0d:51:27:f6:b8:34:
8f:cd:1e:cb:3b:aa:91:6f:8b:eb:49:c8:88:b5:4a:8d:df:d1:
ad:21:4c:b8:27:9a:d6:01:18:da:f8:5c:32:48:a6:bc:77:03:
64:57:dc:fd:aa:fe:83:89:29:2f:ab:53:ff:de:3e:03:87:25:
c2:1c:5d:df:eb:91:18:9b:0e:73:9e:2b:df:c0:4d:56:0f:5f:
e8:95:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:28:15 2024 by rpki-client on console-ams.rpki-client.org