Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/iYy08qWRns6XrAB5XFyWyPgDIGY.roa
File: iYy08qWRns6XrAB5XFyWyPgDIGY.roa (raw, json)
Hash identifier: S9INXjGlXoAozzWmnkLPFL4ThD4z93p+DLXjqYS+Xy4=
Subject key identifier: 89:8C:B4:F2:A5:91:9E:CE:97:AC:00:79:5C:5C:96:C8:F8:03:20:66
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 018CC5DC0AF4B78E5ACE9A7820E65329D05A
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/iYy08qWRns6XrAB5XFyWyPgDIGY.roa
Signing time: Mon 01 Jan 2024 16:29:41 +0000
ROA not before: Mon 01 Jan 2024 16:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206024
IP address blocks: 145.43.254.0/23 maxlen: 23
145.43.253.0/24 maxlen: 24
145.43.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0a:f4:b7:8e:5a:ce:9a:78:20:e6:53:29:d0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Jan 1 16:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=898cb4f2a5919ece97ac00795c5c96c8f8032066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:3b:f1:78:a4:c0:de:4e:c7:fd:52:ec:e5:
8d:b8:77:73:d3:bb:6e:a3:17:ac:2e:6e:94:df:5b:
39:3d:d3:64:97:b2:a1:7f:9c:c6:09:b9:63:a9:1b:
c7:68:aa:49:ac:6a:df:9c:c5:f2:c0:6a:0e:dc:bf:
8e:a4:5c:45:ba:4b:85:33:88:00:62:99:d9:3b:02:
9c:3c:e2:48:d7:d8:0a:f0:ad:4a:2a:d8:f5:6d:fd:
95:9e:71:8c:fc:17:d8:6c:f2:68:e1:68:28:b5:c9:
42:37:af:0d:3a:e4:74:cc:4a:b8:6e:0f:01:a9:cd:
ce:9c:8c:48:1a:0e:cf:a2:c5:d1:25:82:d3:dc:b2:
f7:dd:3d:8b:bc:26:76:2c:88:f6:ed:1f:3f:44:18:
26:6b:b0:7c:0e:b8:12:82:33:88:26:cc:c3:b3:c7:
c6:f5:1e:88:da:68:ee:57:c5:3d:ee:06:33:42:d2:
53:dc:b9:8a:ab:a8:af:98:3e:91:45:f4:cc:f0:c3:
6e:d7:34:09:94:98:b7:e1:56:4a:33:80:0a:e8:2c:
9d:49:33:a3:9d:1c:dc:bf:c9:36:de:52:78:c2:ab:
42:bb:78:de:0a:fb:9f:c4:88:b9:a9:79:89:c9:d9:
ea:ee:d1:76:f3:fb:34:a6:a8:ce:49:28:a3:fb:48:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:B4:F2:A5:91:9E:CE:97:AC:00:79:5C:5C:96:C8:F8:03:20:66
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/iYy08qWRns6XrAB5XFyWyPgDIGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.252.0/22
Signature Algorithm: sha256WithRSAEncryption
52:63:b0:4f:fa:ac:b6:ba:f0:24:49:1d:90:f5:df:e8:54:cb:
b2:42:3b:63:b2:a8:48:6e:51:bf:80:25:91:38:01:55:a9:db:
b8:64:d4:1a:48:e0:76:4f:79:dc:ee:d6:f3:d8:14:d6:e7:27:
3b:a5:fb:43:3b:c7:1a:a7:fd:75:68:93:11:d9:8c:df:ba:b2:
75:2a:20:aa:0d:c6:9c:b6:c9:a5:36:c9:93:d3:23:d8:fc:15:
00:db:90:3d:30:6b:1b:e9:0c:14:d7:ce:d4:eb:d0:04:96:75:
e8:dd:ed:ab:01:1b:13:a3:d3:37:d0:b1:a2:4d:b2:f9:14:e8:
51:d5:55:1f:84:c4:4c:2d:4e:a1:6c:97:e4:75:61:c9:d7:6a:
a0:cb:5c:1e:9d:f4:80:b9:e5:04:86:fe:a3:4f:c6:de:57:22:
fd:ae:59:37:2e:43:7d:5c:79:0d:d9:3f:ac:89:fd:33:aa:11:
78:39:6a:b6:ae:48:7f:56:03:cc:f6:0a:75:e9:70:7c:14:bf:
d8:42:e1:ba:87:5a:16:2b:f4:73:23:0a:9e:59:88:6f:3a:2b:
9f:95:96:c0:1e:d4:51:c8:11:d7:20:66:36:d4:71:ab:95:04:
2b:67:97:de:a5:77:07:f2:8e:23:9f:0c:8e:33:ba:4a:57:22:
8d:c6:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:46 2024 by rpki-client on console-fra.rpki-client.org