Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/ib7l-7Z3WARTzPtaCzY4VaHN2uA.roa
File: ib7l-7Z3WARTzPtaCzY4VaHN2uA.roa (raw, json)
Hash identifier: LbAFm86FV/q5YHHlgYaJwHS2KZpaT2Hr8FssLFIas1o=
Subject key identifier: 89:BE:E5:FB:B6:77:58:04:53:CC:FB:5A:0B:36:38:55:A1:CD:DA:E0
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 018CC8016644497BB266DE5496880F5D50DF
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/ib7l-7Z3WARTzPtaCzY4VaHN2uA.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47291
IP address blocks: 195.62.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:66:44:49:7b:b2:66:de:54:96:88:0f:5d:50:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89bee5fbb677580453ccfb5a0b363855a1cddae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:b3:3b:d1:c3:a0:4e:3d:18:b8:7e:ce:93:
82:06:8a:34:b9:89:5f:31:bc:ea:77:d6:f4:a0:98:
67:1f:31:f1:77:19:f5:26:1a:10:d7:fa:52:50:06:
bd:0e:fc:66:d8:c8:53:7e:cb:ee:2f:ac:c3:6a:bb:
fc:75:68:2f:ff:8e:01:a5:97:a1:70:7c:9a:a1:af:
6e:f5:22:8e:e3:1d:bf:bb:3b:99:ca:77:bb:1e:91:
8c:71:cc:86:e0:00:bd:2c:2e:ab:d0:26:72:53:a8:
2f:e3:78:98:7e:dc:55:4c:bd:ac:9e:8b:fc:24:a3:
4a:09:3f:3f:25:bc:e8:3c:00:e8:e8:6c:2d:d2:3d:
86:f7:49:ca:15:2a:c6:f3:b8:b0:9a:70:9d:e0:6c:
34:70:d3:9d:d8:96:65:35:f6:81:25:c2:b9:c2:c6:
ff:7e:d1:03:7d:d8:e1:68:0f:c3:f8:91:34:c2:21:
99:d6:68:17:ef:34:e2:40:f4:e4:16:91:55:d6:57:
ec:3d:46:5a:76:5e:d3:21:77:ce:b2:7d:a5:a6:45:
ea:23:a1:59:af:78:76:56:76:98:af:15:75:2a:f5:
a8:60:08:68:c4:9f:d4:88:31:65:21:55:65:7e:47:
57:c8:d9:ee:03:33:5f:4a:87:3d:12:c0:95:5c:5e:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:E5:FB:B6:77:58:04:53:CC:FB:5A:0B:36:38:55:A1:CD:DA:E0
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/ib7l-7Z3WARTzPtaCzY4VaHN2uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:74:26:f8:08:f2:fc:f0:a7:df:9e:6f:4e:e2:1d:8c:d7:67:
0a:44:1e:4f:95:39:1e:a2:45:1c:a3:c6:4a:a2:e4:62:96:ba:
97:2a:42:8b:56:ea:fb:1c:ad:ec:12:ba:fe:84:86:03:c8:89:
4f:d0:94:ba:b4:81:d9:7f:83:ab:ed:64:5f:9b:56:1e:9a:85:
2b:01:ba:b3:79:89:2f:2d:04:4c:be:c7:40:8e:53:c4:6d:5a:
e0:b1:f0:44:95:0b:92:4d:33:e1:2b:e8:52:d1:3d:64:80:fc:
7f:bf:76:38:97:1d:f2:ad:cd:e9:85:56:51:85:2b:ec:54:50:
f1:38:37:98:91:97:79:5a:70:e5:a1:e4:b4:f1:97:39:26:ad:
a7:0d:10:c1:9c:ab:73:41:df:48:40:9e:dc:ec:cf:87:39:f0:
45:69:14:a1:ea:71:0b:b9:12:1a:bc:f2:0c:f9:e8:f0:3f:96:
71:0c:38:2d:b1:5e:a9:27:9d:9a:7a:a0:df:a8:e0:ff:42:3a:
26:3d:64:1a:5d:6e:87:e1:4a:a7:82:93:bf:8e:fa:ab:b0:20:
ff:f0:34:91:aa:69:5e:bc:fb:f8:31:b3:f3:e5:3a:1c:a9:23:
fb:fd:23:b3:80:ea:f5:c8:7f:53:e1:d9:55:61:4d:12:8d:3c:
01:b1:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:15:41 2024 by rpki-client on console-ams.rpki-client.org