Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/Io2xZuglxcp9WF9u9gMmK6ov_6s.roa
File: Io2xZuglxcp9WF9u9gMmK6ov_6s.roa (raw, json)
Hash identifier: Gm+8lHnN3DZlLdEt1lx6SX7Uf8nQmWK4ldqebzAYqmU=
Subject key identifier: 22:8D:B1:66:E8:25:C5:CA:7D:58:5F:6E:F6:03:26:2B:AA:2F:FF:AB
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 0190CAD7312A6BC8CCDDE215348108AE7EA7
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/Io2xZuglxcp9WF9u9gMmK6ov_6s.roa
Signing time: Fri 19 Jul 2024 11:53:38 +0000
ROA not before: Fri 19 Jul 2024 11:53:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34661
IP address blocks: 46.250.0.0/19 maxlen: 19
109.200.224.0/19 maxlen: 19
185.6.184.0/22 maxlen: 22
194.143.136.0/23 maxlen: 23
213.231.0.0/18 maxlen: 18
2a00:1e20::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:d7:31:2a:6b:c8:cc:dd:e2:15:34:81:08:ae:7e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Jul 19 11:53:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228db166e825c5ca7d585f6ef603262baa2fffab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:9b:1b:c4:cc:88:83:94:ee:0b:08:78:ff:
b8:7a:74:6c:04:f3:d7:cd:02:68:f7:21:31:46:8b:
aa:5a:02:7b:99:f6:d8:05:cb:9c:ec:d0:e1:86:79:
48:58:13:f0:69:d0:ee:30:d5:ad:f7:d9:8d:9f:f5:
f5:9d:27:47:9a:bf:d8:46:5b:5c:e0:5b:c7:77:75:
43:40:0f:10:78:a9:df:c8:f2:f9:35:ff:97:46:67:
87:00:2d:f4:8f:44:a5:82:fc:14:a4:06:4c:30:9a:
c1:3c:0e:53:f5:b6:46:01:83:99:3b:87:a5:28:2e:
72:a9:b2:66:17:3b:ac:fe:b9:4c:bb:03:80:aa:08:
e1:ae:aa:df:67:39:90:e5:b5:a7:17:7e:d3:d3:90:
60:2f:f2:05:59:bb:71:e6:58:2b:65:f4:26:9d:d4:
10:72:84:e0:63:a5:13:25:ff:44:04:6a:ac:84:9c:
2b:c0:2a:f9:0f:ea:18:e9:55:b1:a8:3f:3f:d0:7f:
2d:a6:93:6c:ec:67:ab:d6:71:d7:08:06:53:02:f3:
84:db:95:b0:39:82:d7:ac:1e:7f:b6:14:2d:5f:d0:
29:47:f0:1b:db:89:1b:2b:84:f6:0d:35:6c:5f:1c:
21:c1:ad:fb:1b:2f:9f:c4:e3:13:54:60:93:31:ba:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:B1:66:E8:25:C5:CA:7D:58:5F:6E:F6:03:26:2B:AA:2F:FF:AB
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/Io2xZuglxcp9WF9u9gMmK6ov_6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.0.0/19
109.200.224.0/19
185.6.184.0/22
194.143.136.0/23
213.231.0.0/18
IPv6:
2a00:1e20::/29
Signature Algorithm: sha256WithRSAEncryption
11:f2:51:39:83:c9:69:b1:35:2f:80:ea:0f:c6:12:ca:3d:aa:
fa:32:cd:95:7a:0a:97:79:e1:12:8e:7e:82:c5:1f:70:e9:9b:
ce:13:24:9a:60:70:c8:57:ec:be:03:93:db:24:dd:c8:a1:de:
43:65:ce:72:cb:c3:98:d0:5e:52:73:25:f5:a5:49:d7:00:b7:
3f:26:05:bd:04:f0:38:44:2b:78:9d:f7:5b:62:c8:2d:30:86:
23:54:26:9e:62:84:a3:e3:16:1f:d0:62:f5:17:fd:f2:05:47:
25:60:3e:03:7e:4e:fc:aa:1b:15:ac:b3:ca:f3:7d:31:6a:fa:
25:43:a0:48:44:4d:55:c4:23:23:2e:80:c5:19:42:f0:bf:d7:
29:e8:1a:41:8a:5d:74:3a:e5:b1:91:bc:67:35:fc:3f:27:2a:
01:da:c6:ff:af:0b:42:22:ad:12:c9:84:81:28:56:81:f3:07:
ed:24:23:48:ae:1e:82:ff:ca:64:0b:13:94:fe:70:d9:53:3e:
b8:11:94:2b:ec:70:6b:58:2e:c4:e4:f9:e9:e3:94:bf:36:fb:
d0:69:6f:7c:75:b2:ac:b0:bb:13:d4:08:62:c8:62:d2:64:e7:
bb:ee:02:0d:de:e8:ed:e7:e6:2c:e8:c2:c6:85:b1:dc:36:a1:
1b:1d:1d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:20:37 2024 by rpki-client on console-ams.rpki-client.org