Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Iufpoeacca8fvKdci_Q0C20cVzo.roa
File: Iufpoeacca8fvKdci_Q0C20cVzo.roa (raw, json)
Hash identifier: U5MG3HIFbWFdsHm9f4e2uXYiQlUFYdda7DfpP8cBti0=
Subject key identifier: 22:E7:E9:A1:E6:9C:71:AF:1F:BC:A7:5C:8B:F4:34:0B:6D:1C:57:3A
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D0694B74775A1E242746C679BE138
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Iufpoeacca8fvKdci_Q0C20cVzo.roa
Signing time: Tue 02 Jan 2024 08:31:57 +0000
ROA not before: Tue 02 Jan 2024 08:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200579
IP address blocks: 2a0a:280:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:06:94:b7:47:75:a1:e2:42:74:6c:67:9b:e1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e7e9a1e69c71af1fbca75c8bf4340b6d1c573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:ff:89:b0:1b:35:af:41:db:00:13:04:bd:
68:1d:66:b9:15:59:91:c8:c8:ef:5e:2b:5f:44:1e:
af:6b:94:4c:1c:05:13:d9:31:c2:b4:0b:63:26:41:
71:62:6f:ec:74:94:d1:a2:c7:02:ed:fb:43:e5:5b:
0d:8a:05:f5:5b:bd:01:0d:28:a2:c8:b4:e1:f8:4f:
4c:b3:b2:72:dc:61:db:11:8d:72:35:f9:ed:e0:06:
ab:ee:3c:5c:11:f7:48:25:a3:08:27:e9:32:2b:f5:
06:60:69:8e:d8:da:8e:7d:e4:aa:ab:6a:90:a6:f1:
b6:8c:7a:81:d7:91:e8:14:9e:4d:36:08:a1:d9:ea:
de:96:ae:2c:7a:1c:e6:95:3d:0d:35:85:d2:b1:71:
4a:79:91:ab:62:60:d7:c9:b2:07:32:da:db:82:02:
98:9f:79:2e:45:f8:99:be:98:2c:77:8c:59:a8:f9:
f9:40:22:71:a1:aa:dc:5c:36:c2:b0:84:28:9b:4f:
c7:f0:21:74:b2:ea:7e:4a:6a:a8:bd:cd:1a:06:73:
ee:2c:a7:d4:96:d9:be:a3:44:8b:a6:7e:6b:42:e1:
55:d5:50:23:10:5f:39:53:40:9d:8b:7e:33:ec:cc:
fc:f9:a4:7e:f0:fc:26:82:7d:ed:0d:1c:09:66:34:
2d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:E9:A1:E6:9C:71:AF:1F:BC:A7:5C:8B:F4:34:0B:6D:1C:57:3A
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Iufpoeacca8fvKdci_Q0C20cVzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:b000::/36
Signature Algorithm: sha256WithRSAEncryption
51:4b:e4:ec:fc:ca:f9:45:b7:8a:fe:5e:17:80:79:60:df:21:
b2:7a:c8:f1:49:94:54:c2:a8:26:e3:ce:d3:a0:8c:8f:57:b5:
52:ac:62:e1:79:be:f0:92:06:6f:12:ae:10:18:b2:80:e7:5b:
cb:0e:0b:4e:ab:9e:89:af:70:0d:33:b3:ba:78:3f:3a:26:c5:
7e:d0:2f:b5:6f:b6:b7:42:29:63:88:45:51:24:d4:99:83:10:
1b:a7:9b:18:1b:f4:e0:b4:c9:d1:94:2a:ef:40:e9:f9:9c:e7:
75:65:18:17:17:da:1b:ad:72:16:b9:a7:b9:b5:88:52:bb:65:
b4:3c:df:28:37:48:e9:ac:2f:5d:b0:57:18:0a:66:fb:e1:a3:
91:83:a0:34:27:63:b6:58:82:29:a1:54:46:0e:d4:04:a3:5c:
a0:c8:47:f5:02:20:39:db:d3:19:e0:8b:0d:a4:42:81:2d:d7:
0f:7f:d5:62:b2:6e:fe:f6:52:6d:30:85:0d:e9:7a:32:87:1d:
77:a9:62:cb:b4:93:48:79:f9:60:32:cf:00:ac:87:a9:74:85:
8f:d6:b1:5b:67:3e:d1:ec:2e:c8:76:84:8d:3a:e0:c9:ab:b4:
18:28:10:a3:c9:d0:5c:4b:55:13:4f:8c:e4:86:e5:ec:aa:eb:
4a:8e:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:33:14 2024 by rpki-client on console-ams.rpki-client.org