Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/IK2T8fURoTCV_8Px_7zakdOI0Nw.roa
File: IK2T8fURoTCV_8Px_7zakdOI0Nw.roa (raw, json)
Hash identifier: FCR4P+tDox+P4Fve5crGlzvKDQV1RXxelz7fLORgzTg=
Subject key identifier: 20:AD:93:F1:F5:11:A1:30:95:FF:C3:F1:FF:BC:DA:91:D3:88:D0:DC
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 018CC8705C441CB1A93287F0245302D721F9
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/IK2T8fURoTCV_8Px_7zakdOI0Nw.roa
Signing time: Tue 02 Jan 2024 04:30:56 +0000
ROA not before: Tue 02 Jan 2024 04:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 185.69.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:5c:44:1c:b1:a9:32:87:f0:24:53:02:d7:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Jan 2 04:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20ad93f1f511a13095ffc3f1ffbcda91d388d0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:f8:58:c4:d4:a5:b1:49:62:19:80:7d:bf:
2e:96:a2:2c:79:aa:b5:ec:a2:fb:19:ff:2d:9c:92:
67:f0:14:4d:a2:a5:0a:16:44:9c:b0:0c:db:1a:bc:
6c:78:96:b3:99:59:6c:6b:b7:d0:e2:8f:2e:a4:aa:
48:a9:88:ba:f0:d0:77:f7:06:aa:6e:80:9b:da:c6:
3e:2c:46:1d:fe:86:d2:50:02:4f:b9:12:87:c2:09:
2f:56:f7:7b:51:f3:41:4c:fa:5d:0e:04:55:45:5d:
a7:ad:5c:25:e2:0f:ef:ed:d2:dc:59:c2:ba:28:52:
e0:c4:5a:bd:d3:e2:e2:02:ff:62:4a:7b:9c:72:05:
4c:44:d3:3c:a2:af:04:fe:38:3d:34:b8:25:0b:85:
ff:85:03:8f:89:51:08:da:4f:ba:f7:db:f7:4d:b6:
9f:a9:64:1e:47:76:6d:25:34:92:0a:1c:84:f1:d9:
3e:55:39:81:a7:5b:25:2a:f4:5d:72:49:5d:b4:5a:
91:1e:21:ad:6b:1b:db:91:cc:f3:22:77:c7:e6:fd:
e7:72:e5:11:15:f9:56:87:0c:fe:84:fe:c6:44:de:
4b:45:67:40:f3:75:fa:af:d9:c0:83:3b:d7:85:84:
93:ce:86:9b:6c:3d:24:2d:b1:73:3a:c6:63:42:06:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:93:F1:F5:11:A1:30:95:FF:C3:F1:FF:BC:DA:91:D3:88:D0:DC
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/IK2T8fURoTCV_8Px_7zakdOI0Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.214.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9b:59:f8:d4:6d:b3:9e:a1:a8:c9:19:f7:c3:c0:c8:98:09:
5a:b7:fc:00:0d:cf:77:ae:0b:23:55:bb:9a:73:ef:c8:c4:16:
89:90:1b:07:d9:d9:32:e5:81:13:79:11:10:1b:1d:83:93:e2:
4a:08:a6:ed:e5:cb:4c:a1:2f:66:9c:f3:da:a9:c2:01:b3:ba:
86:3b:6a:70:a4:80:9b:95:ca:bb:4c:a6:fe:5f:47:2c:99:25:
3d:18:14:39:ec:c4:9b:fb:72:c6:83:d8:9f:10:e3:ba:87:29:
ed:43:8d:a3:7f:ec:e9:2f:07:f2:eb:64:4c:73:96:76:6e:f1:
0b:d4:3d:b1:9f:f1:37:79:ba:04:65:0a:00:1a:55:1a:e8:84:
7a:c8:cc:a9:14:cd:75:e8:0a:64:80:d9:f7:b2:2f:b2:86:b9:
e5:45:99:83:c4:33:36:4f:fb:e7:61:f6:7a:77:03:fd:65:65:
4f:6a:02:28:5f:15:81:b5:0f:f1:50:ef:b6:f1:f9:d2:c2:8d:
bd:43:60:4f:c0:9e:3e:45:8a:09:42:23:c7:e5:00:f0:85:de:
16:ff:cf:87:63:59:f6:b4:69:0f:41:3a:ee:14:ab:67:35:c3:
d6:93:26:47:41:70:ab:cb:85:2c:9e:e9:8c:56:cb:a7:ec:24:
19:00:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:22:21 2024 by rpki-client on console-fra.rpki-client.org