Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/IewQAT7PoAhii9IOjHj5WasXGjI.roa
File: IewQAT7PoAhii9IOjHj5WasXGjI.roa (raw, json)
Hash identifier: nYg/sgldywLDJ7YamopjWyAm7ro3sAvIFHFy8gDadl4=
Subject key identifier: 21:EC:10:01:3E:CF:A0:08:62:8B:D2:0E:8C:78:F9:59:AB:17:1A:32
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 018CC801819BF91E1D85372D3B3998B3B21E
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/IewQAT7PoAhii9IOjHj5WasXGjI.roa
Signing time: Tue 02 Jan 2024 02:29:51 +0000
ROA not before: Tue 02 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62294
IP address blocks: 85.222.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:81:9b:f9:1e:1d:85:37:2d:3b:39:98:b3:b2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jan 2 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21ec10013ecfa008628bd20e8c78f959ab171a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:16:15:b8:48:d1:0d:2b:71:6c:a1:47:27:
5f:08:dd:f3:34:0f:b6:82:c5:6a:22:85:b2:c1:cc:
0a:fc:8e:fa:42:20:c3:91:00:f6:84:6d:e6:7c:79:
0c:5b:41:44:58:b2:b3:0c:85:35:46:52:73:be:b8:
0c:99:1d:05:b7:be:d2:ae:a5:e7:6c:68:30:cd:e9:
b0:18:94:ac:f3:63:af:1e:2c:05:34:e9:d0:c2:6b:
c4:1d:59:8d:57:d1:71:13:d6:89:34:c9:1d:7e:20:
c7:80:4a:66:89:93:32:07:31:f1:e8:d5:fd:a8:b4:
6d:94:e0:0e:97:d0:5b:11:d8:31:25:b7:9b:b8:be:
a7:8d:73:8a:59:1f:01:10:ca:71:f6:6c:8d:ac:50:
a5:88:15:a2:24:f1:51:43:ef:4e:d4:b8:bb:c5:7c:
27:b7:06:d2:e2:49:99:01:96:cd:a2:f5:8d:7e:63:
77:4f:94:65:71:d9:e2:87:ed:47:c9:9d:2a:6d:e5:
9a:f3:d7:2a:f2:75:c3:c7:52:69:45:69:b8:c8:18:
6f:f7:3e:a9:81:39:d2:d1:18:10:b8:97:24:49:21:
c1:69:e2:a2:13:49:f1:6f:91:7d:29:1a:08:85:7e:
78:aa:91:7e:ca:1b:a7:dc:a4:77:af:bd:9d:59:e3:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:10:01:3E:CF:A0:08:62:8B:D2:0E:8C:78:F9:59:AB:17:1A:32
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/IewQAT7PoAhii9IOjHj5WasXGjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.164.0/22
Signature Algorithm: sha256WithRSAEncryption
71:7d:a0:a9:73:af:81:e5:05:87:91:cc:59:c0:02:8e:4b:87:
28:61:5c:1d:e5:30:c9:34:c6:a6:dc:6f:62:49:32:87:d3:71:
0e:3a:90:11:ed:d2:6d:15:31:29:bd:38:2f:eb:d8:94:cc:4b:
2d:9f:39:a5:2d:55:e1:ee:55:cb:f3:02:d5:7c:cb:ae:8e:d9:
55:be:1f:38:cf:7f:e1:23:9d:35:02:56:35:81:84:41:28:74:
19:b8:2a:63:f8:f3:33:b5:33:a6:b6:d5:a8:b6:f4:f0:64:13:
65:d1:ea:ab:5b:b6:41:b1:bc:92:b5:b5:ee:dc:dd:95:2a:ed:
90:76:7a:e1:46:9d:e5:6e:fb:f4:46:e4:17:2a:5f:5e:3e:a0:
e9:33:0f:82:37:07:78:34:57:5e:a5:8c:b7:37:4a:3c:c4:56:
1d:80:cf:bc:c7:77:d1:ac:57:12:b1:56:28:02:60:c7:e5:ed:
50:2f:97:7f:cc:d4:94:9e:d4:23:49:2e:b6:4e:47:69:39:ce:
f9:26:e5:d6:66:c9:0b:2d:e4:1b:46:f9:2f:af:4c:32:0e:a7:
4c:12:7e:6a:52:b4:b1:49:40:f8:a4:cb:9e:18:98:b4:fb:27:
cb:5b:fc:99:44:0e:31:4c:33:0e:4b:1c:2a:3a:70:d8:48:4e:
a1:6a:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:48:43 2024 by rpki-client on console-ams.rpki-client.org