Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Ioq8dEgWEGw17FFBHlp8Ijb1B0I.roa
File: Ioq8dEgWEGw17FFBHlp8Ijb1B0I.roa (raw, json)
Hash identifier: 5MRrmrVGkCCoEwU7Wt2uTHAZDxvvw11ihIOBqlM2zTo=
Subject key identifier: 22:8A:BC:74:48:16:10:6C:35:EC:51:41:1E:5A:7C:22:36:F5:07:42
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 018CC4938E08CE13F3923B4CB8DD8DB2FA80
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Ioq8dEgWEGw17FFBHlp8Ijb1B0I.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30785
IP address blocks: 82.150.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8e:08:ce:13:f3:92:3b:4c:b8:dd:8d:b2:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228abc744816106c35ec51411e5a7c2236f50742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:c2:7c:39:10:93:10:76:c3:92:22:dd:1d:
93:d3:f5:8f:2f:66:b8:c0:19:72:38:af:95:37:c6:
7d:9c:70:9f:6c:60:ce:38:f2:f7:0c:85:fd:f0:13:
62:46:47:00:2f:e0:16:14:53:91:9b:91:e0:60:be:
b2:9f:61:69:ae:b1:5e:31:7f:6f:be:ab:cd:83:ef:
93:69:47:97:80:c3:8c:24:ec:a4:f4:a0:db:e1:b0:
41:72:e4:37:23:3e:81:b4:8b:88:f9:a0:1c:fa:93:
a9:1f:ff:4f:e6:8d:74:72:54:83:fb:a7:f7:e5:06:
18:1b:66:64:f2:1b:1f:d1:58:49:43:3e:6c:08:6c:
86:12:2a:3d:07:fc:0d:69:61:32:64:fd:5e:35:c0:
59:75:54:31:fb:a1:17:ad:fe:97:97:53:c4:3d:28:
e1:cb:78:38:ad:7a:b2:d0:24:40:53:d3:7e:91:60:
64:09:5a:04:f2:89:ae:fc:10:0f:28:7c:39:87:5d:
a6:13:b2:71:6f:a6:70:c2:c9:e2:10:92:ac:58:2f:
05:09:7c:e6:d5:0d:98:8a:db:4a:d0:5e:69:b7:c1:
be:57:d8:9a:e7:af:89:8c:79:9b:33:5a:c5:80:df:
97:fc:b2:be:6a:38:0b:02:98:18:74:3a:e6:8f:2d:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:BC:74:48:16:10:6C:35:EC:51:41:1E:5A:7C:22:36:F5:07:42
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Ioq8dEgWEGw17FFBHlp8Ijb1B0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.140.0/22
Signature Algorithm: sha256WithRSAEncryption
51:b7:7f:01:dd:02:25:06:e5:8e:3b:4d:3d:93:11:33:61:6d:
1e:1e:21:11:35:3f:6d:30:d6:48:52:42:a8:a3:ba:45:33:1d:
13:7b:60:3b:3a:1c:1f:aa:dc:00:d5:a8:d0:09:96:5e:18:b8:
8d:86:c8:61:4a:a5:73:21:ba:b9:b2:96:6f:6c:78:bc:b5:cd:
c0:56:25:1f:9a:67:41:8c:f0:70:88:c6:51:07:54:6f:36:e0:
59:29:14:12:99:7d:dd:df:14:35:b6:f9:20:dc:58:4e:b1:26:
e9:0e:46:a6:9b:08:ed:0e:df:e6:d6:25:50:49:d8:61:c7:23:
52:9c:e8:c1:f8:10:87:67:10:ec:2a:36:c9:6f:5c:96:7f:17:
86:d5:11:c9:02:2d:63:7a:bc:2a:a4:13:c4:0c:a8:e9:e6:fc:
17:6c:2c:6c:a4:e6:79:70:bd:6d:7f:94:23:42:3c:fe:3c:94:
12:24:8b:ad:e9:fb:95:59:43:da:f5:ab:d1:26:9c:e6:f9:89:
cf:37:29:fd:09:2c:13:16:3e:e5:85:6b:3e:6c:fb:b6:46:7b:
44:cc:08:c5:8e:c1:89:6c:04:d6:a8:48:a4:69:11:9c:98:3f:
a4:2a:e7:94:1c:64:21:7a:a9:9e:0a:b0:60:66:b1:59:cc:28:
ff:c2:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:31:06 2024 by rpki-client on console-ams.rpki-client.org