Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IZUE3rZnRiwx90oykA9gQU6TIGY.roa
File: IZUE3rZnRiwx90oykA9gQU6TIGY.roa (raw, json)
Hash identifier: 0ts5diiM8l+igBXCJrA7rK3ojcf32a/Pcbzr/SGhI6w=
Subject key identifier: 21:95:04:DE:B6:67:46:2C:31:F7:4A:32:90:0F:60:41:4E:93:20:66
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E195394C53F4C0FCFED33FF00A74
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IZUE3rZnRiwx90oykA9gQU6TIGY.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204483
IP address blocks: 212.243.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e1:95:39:4c:53:f4:c0:fc:fe:d3:3f:f0:0a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=219504deb667462c31f74a32900f60414e932066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:9f:51:db:51:4e:07:d8:b4:63:aa:5d:4f:
af:6f:0a:0a:ac:03:dd:26:98:80:79:76:37:7c:cd:
cd:15:6f:ed:f7:9e:a8:44:2d:d5:bf:41:41:1d:83:
38:f0:e7:e6:8d:93:ae:72:2a:ee:c6:d4:66:a1:e8:
54:e7:bf:e7:43:3e:e1:58:71:1a:eb:2c:3a:e3:1f:
10:45:6d:de:7c:a9:96:6a:9e:37:f6:4f:52:b1:76:
0c:99:89:cc:e8:13:6e:c6:c3:ad:a7:e6:1c:69:32:
eb:77:66:26:97:57:44:96:dd:cb:e9:0c:68:c9:3d:
88:49:08:d9:2b:2c:04:cd:68:e8:a1:09:b0:2d:3d:
dd:6e:5c:39:2b:6f:54:b0:13:77:42:6d:dc:01:68:
00:02:9c:33:77:cf:72:a8:b2:d1:09:0c:d8:e0:11:
77:23:d8:6e:0a:09:d2:3b:22:fc:d3:06:9f:ff:6e:
35:d7:b8:58:d1:b3:61:10:dd:21:f4:ca:b0:19:01:
86:ac:18:7b:8d:3f:cc:70:73:19:17:d2:32:34:41:
c0:bc:d4:52:ab:1c:73:bc:aa:6a:0c:5e:25:25:95:
c7:3c:3b:7f:78:2e:5a:26:92:87:2e:16:5f:80:80:
1b:97:39:e7:3a:a6:b0:75:2c:a7:d5:d4:f3:fc:95:
15:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:04:DE:B6:67:46:2C:31:F7:4A:32:90:0F:60:41:4E:93:20:66
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/IZUE3rZnRiwx90oykA9gQU6TIGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3d:02:a3:28:a7:84:41:01:39:6c:56:f4:4a:44:19:31:dc:
67:ab:e8:8c:43:4f:ce:66:9e:2a:7d:1a:f8:ad:8d:22:c9:46:
e8:cc:f5:64:fd:d2:4b:d5:f0:70:89:c9:65:07:fb:a1:ed:1d:
de:b8:0b:c8:2a:5d:7a:82:1d:c5:1f:ae:0a:c7:9b:57:0c:66:
6e:41:35:d4:56:f5:ab:47:b9:ae:52:a0:a2:cb:74:65:fa:b3:
6b:76:04:97:e8:7c:ee:91:4e:1c:2a:19:6b:47:63:fa:e6:b4:
32:5e:04:86:e3:b8:67:83:1f:3d:e2:84:88:6c:6d:64:fd:c7:
b4:ec:25:50:c6:5d:54:2a:05:d0:6f:37:ed:a8:6e:5f:82:8a:
c9:1f:37:b1:ce:f1:34:a0:27:22:21:3c:0f:01:b0:01:b9:d8:
ca:ef:b0:a1:cf:47:97:0c:6f:3b:b9:9d:24:92:32:bf:3a:6f:
f4:ff:94:03:c7:97:af:cb:fd:79:19:ca:df:29:7d:f4:66:3d:
a6:d0:b1:0b:73:45:de:2a:f5:bb:88:b9:70:10:a2:8f:54:0e:
58:de:ab:3f:4b:57:4d:fd:2c:e6:95:4a:81:ac:ed:46:19:41:
22:2e:34:29:fa:ba:bc:75:8d:49:b3:b7:13:91:f8:04:46:be:
ea:19:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:00:08 2024 by rpki-client on console-ams.rpki-client.org