Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/IuR1Ga_rMCicaLAzd4V8YEqpUoI.roa
File: IuR1Ga_rMCicaLAzd4V8YEqpUoI.roa (raw, json)
Hash identifier: ZHpvCl0yIsSMLycDIxc/wQDeljz5Rhdg8jjZHdYHA+I=
Subject key identifier: 22:E4:75:19:AF:EB:30:28:9C:68:B0:33:77:85:7C:60:4A:A9:52:82
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 018CC6B7FF346A10052BF4D37915FC908CE7
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/IuR1Ga_rMCicaLAzd4V8YEqpUoI.roa
Signing time: Mon 01 Jan 2024 20:29:56 +0000
ROA not before: Mon 01 Jan 2024 20:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15922
IP address blocks: 217.18.64.0/20 maxlen: 20
178.255.192.0/21 maxlen: 21
2a00:19c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ff:34:6a:10:05:2b:f4:d3:79:15:fc:90:8c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Jan 1 20:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e47519afeb30289c68b03377857c604aa95282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:46:43:55:4b:e9:f3:33:2c:de:73:d7:d3:b5:
6e:ce:83:98:ae:ab:2e:c7:27:1f:16:7c:e5:8c:fb:
67:7f:10:04:51:1d:9a:a8:05:44:e9:64:f9:14:5c:
c3:b4:9a:81:c7:4e:ec:ed:f8:ad:81:4a:72:25:49:
2b:44:fa:2d:0d:86:29:30:9f:45:90:0a:62:51:73:
cd:8a:3b:7a:76:a0:ff:c7:81:22:5a:18:19:05:4f:
d9:27:be:d1:d5:d2:4d:6e:5e:df:dd:24:97:c5:26:
a2:80:28:3b:4a:14:2d:60:f5:74:bd:27:3b:9b:12:
f0:d5:77:d5:16:6a:b3:90:9b:52:8b:b2:38:ce:59:
a3:6a:db:77:10:61:4d:79:3f:3c:fa:29:6e:a1:d5:
70:14:14:50:d4:54:1b:49:43:63:c2:a4:fa:d5:a9:
c5:b0:3f:8b:1a:dd:df:62:78:88:d7:3e:bc:30:a4:
61:14:4f:e1:cc:de:38:9b:10:42:81:af:01:51:49:
ff:ee:c2:01:0a:fe:5e:54:01:89:8e:a2:b5:86:70:
a0:24:75:3e:39:e1:c8:a0:68:55:5c:95:d8:da:7f:
f1:c5:59:95:a8:09:b8:29:f5:df:98:10:a5:d7:e7:
fc:f8:6d:7e:4d:83:4b:a5:56:f9:8e:2d:31:ca:7c:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E4:75:19:AF:EB:30:28:9C:68:B0:33:77:85:7C:60:4A:A9:52:82
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/IuR1Ga_rMCicaLAzd4V8YEqpUoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.192.0/21
217.18.64.0/20
IPv6:
2a00:19c0::/32
Signature Algorithm: sha256WithRSAEncryption
85:94:97:38:88:4e:b5:a0:18:df:51:65:15:94:17:28:c9:98:
4c:bf:e1:25:4c:29:40:65:23:13:8e:c4:ac:5e:de:a2:44:e4:
b8:4b:aa:5f:6e:38:f9:c0:c8:49:ed:24:67:23:56:5c:03:34:
21:d5:9b:58:ea:5a:0c:bd:be:f0:02:33:ce:9b:37:b2:f4:7e:
8e:75:bb:8c:f1:fd:12:9a:b2:6e:19:0e:47:26:71:2e:c5:b7:
97:00:24:f0:03:5f:92:e8:1f:8c:38:3b:5e:83:95:64:36:5a:
cc:9d:26:6b:e6:ac:af:96:35:79:bc:6d:9f:58:c5:2c:ab:54:
56:09:55:de:bb:04:fb:98:86:3d:b3:58:6b:53:ec:4f:2a:56:
dd:0b:c0:50:f0:26:1e:25:95:8d:fa:2b:3f:fc:1f:73:6d:8f:
1f:5e:fd:03:dc:1f:f4:7f:b7:67:d1:c6:93:e6:f0:6c:2c:50:
16:b6:72:74:3b:be:36:a2:50:44:aa:da:4d:2a:8b:43:74:a9:
ce:e1:8f:cd:0a:d1:67:ea:8d:20:39:ed:a9:a9:14:35:b9:47:
a9:a4:44:3a:39:89:b8:d9:81:38:a0:1b:6c:80:1e:e4:ac:a9:
ff:f3:28:01:dd:00:3f:6a:88:dd:e1:36:7f:6c:3b:08:c8:89:
eb:22:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:26:22 2024 by rpki-client on console-ams.rpki-client.org