Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/8pIr2U9Avs68wGpbngAaWVnYaok.roa
File: 8pIr2U9Avs68wGpbngAaWVnYaok.roa (raw, json)
Hash identifier: QVvTeduVniZFCzh7zynjtSJmLAqP+eYrRr7/gPErius=
Subject key identifier: F2:92:2B:D9:4F:40:BE:CE:BC:C0:6A:5B:9E:00:1A:59:59:D8:6A:89
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 018D3F938F3C7C2E1B33ACC5F33F8966A235
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/8pIr2U9Avs68wGpbngAaWVnYaok.roa
Signing time: Thu 25 Jan 2024 07:44:11 +0000
ROA not before: Thu 25 Jan 2024 07:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62342
IP address blocks: 193.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:93:8f:3c:7c:2e:1b:33:ac:c5:f3:3f:89:66:a2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Jan 25 07:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2922bd94f40becebcc06a5b9e001a5959d86a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:7f:95:8e:d4:13:72:2e:12:4d:50:db:d7:
19:f4:39:67:7b:7e:50:bd:7e:64:ac:ca:1b:15:50:
55:f4:85:4d:bf:7d:71:e7:ec:1e:1b:0c:01:6d:b7:
46:91:e6:61:d4:a6:a6:92:3c:89:8f:06:44:c7:1e:
88:5a:3b:5a:a1:8c:1e:b3:66:ce:81:8c:45:6e:3a:
1f:8b:0f:8e:06:97:73:1b:90:40:71:f4:83:90:d4:
26:ef:16:2d:10:05:35:4b:77:92:b8:48:9d:ad:41:
63:d1:79:7b:8c:7f:8d:89:3d:77:35:a3:bd:c8:19:
44:06:df:4a:5c:aa:c7:cd:3d:1a:18:a6:07:c4:6e:
5a:2b:9e:da:bf:06:26:7f:77:e7:2f:d5:ef:d9:a0:
40:a2:e5:e1:1a:13:23:72:3c:f7:fa:03:eb:ea:ad:
e0:5d:de:cd:49:b0:19:d2:ef:2e:1d:5e:10:af:5e:
de:28:82:fe:d6:03:5b:ef:a2:52:b1:01:0c:26:2d:
2c:42:59:8c:48:a9:2b:65:2e:5a:84:7d:59:af:c5:
3e:0d:c8:bf:e6:f8:df:47:4a:96:2a:61:af:81:04:
2b:d7:4b:74:f3:c5:3b:56:7b:cd:f7:c9:32:66:13:
24:0c:55:84:2f:a5:a1:ef:cb:f6:1b:c0:d7:f3:37:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:92:2B:D9:4F:40:BE:CE:BC:C0:6A:5B:9E:00:1A:59:59:D8:6A:89
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/8pIr2U9Avs68wGpbngAaWVnYaok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:61:37:b2:f0:39:c0:3c:8a:6b:4f:2b:51:5a:3a:1b:7f:26:
0d:c8:38:36:43:f3:6d:f1:25:6a:7f:b9:39:19:da:b5:09:ee:
c5:06:79:62:de:33:be:10:89:a4:2e:9d:b4:c6:0a:fe:b6:12:
0f:37:7a:bb:c7:6a:a2:a3:59:23:d7:0b:5d:9f:93:98:c8:33:
38:31:7c:29:70:c4:45:a9:d2:0c:e5:95:dc:73:c7:6a:d4:31:
c3:f8:fa:c7:52:6c:cc:1f:46:d5:b4:1f:6d:42:11:cb:6e:f3:
1c:cd:14:3f:b4:40:a6:91:95:61:57:53:18:bb:5f:ac:2d:03:
68:83:cc:fe:bd:d3:66:3d:8d:c8:1f:f1:c4:73:70:93:d5:13:
62:f7:92:da:75:bf:cb:d1:1e:78:54:ed:27:bd:5a:fd:1e:39:
90:88:f7:ba:09:72:f3:5d:1a:ee:86:02:50:b3:a0:ae:43:e3:
3b:6f:62:ca:00:37:f2:d7:67:a3:f4:45:d9:5f:a3:44:f2:a4:
02:be:f4:71:e9:8c:88:2b:19:f6:39:1f:86:38:28:23:ab:ad:
a0:b2:ec:39:bc:4f:c0:9b:7c:7b:cd:d4:4d:c0:90:33:34:3c:
7c:a9:9b:26:d7:d5:10:5c:5f:4e:9d:02:a6:f4:52:59:ab:b1:
d5:e6:d7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:34 2024 by rpki-client on console-ams.rpki-client.org