Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ciaSYc0LcRpdH6T6j5I5ioMz7x8.roa
File: ciaSYc0LcRpdH6T6j5I5ioMz7x8.roa (raw, json)
Hash identifier: e++whl1SevgeQuBpZTtbPTbGs5n2jRfXW9MiVGGiihY=
Subject key identifier: 72:26:92:61:CD:0B:71:1A:5D:1F:A4:FA:8F:92:39:8A:83:33:EF:1F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018CC493988D003B133611767EE534518CC4
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ciaSYc0LcRpdH6T6j5I5ioMz7x8.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 217.67.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 19:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:98:8d:00:3b:13:36:11:76:7e:e5:34:51:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72269261cd0b711a5d1fa4fa8f92398a8333ef1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:3b:67:7b:55:46:5e:99:bf:55:26:a1:fe:
57:51:7d:3b:4f:7c:7a:1c:50:a8:f8:16:99:d1:2e:
9c:e4:54:3e:61:43:5f:7e:3d:38:df:36:f0:8e:20:
44:4f:9f:1f:e7:b0:31:3c:2d:5a:b8:48:6d:a8:1e:
08:3e:cb:17:f8:2d:d8:35:33:7f:41:c2:60:c5:26:
3f:4d:ca:f8:ae:7c:4f:1d:8b:2d:aa:fa:cd:29:9b:
f8:c7:38:44:f1:b2:af:8c:f0:3a:9e:87:7f:10:76:
3a:56:d2:d3:98:e9:42:ee:06:51:f4:cd:22:5b:6a:
c3:10:d8:7b:4b:de:c3:22:ee:a0:52:30:a0:bf:11:
08:96:f6:fa:db:09:85:39:82:26:58:f8:36:64:c2:
0f:08:47:b4:dd:1d:11:bf:50:99:b6:54:2b:eb:60:
21:06:f6:2d:16:48:89:8a:c1:27:f5:27:85:4d:00:
a4:5f:8b:2b:e5:eb:4b:95:eb:fa:fe:6e:89:32:b3:
5b:07:e6:d9:b2:96:8f:1a:21:d1:b2:c1:e9:9a:d5:
61:95:32:05:3e:a0:b3:3b:59:f7:55:df:04:25:b8:
6b:9b:23:2c:df:96:c6:17:de:ef:c7:01:0a:e9:f5:
ce:82:b1:06:e3:d4:ad:41:1a:a9:3e:63:9b:b8:03:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:26:92:61:CD:0B:71:1A:5D:1F:A4:FA:8F:92:39:8A:83:33:EF:1F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ciaSYc0LcRpdH6T6j5I5ioMz7x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.67.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:5d:9a:b1:62:b0:a4:1d:11:9e:1b:1c:a9:de:cb:16:08:36:
ba:3f:aa:00:01:7d:43:f7:c2:53:9d:7e:22:31:10:f2:3f:72:
59:d1:e8:c9:b5:36:10:50:f4:85:87:26:93:05:00:f9:8c:57:
b3:74:28:a0:47:dc:3f:b1:40:c5:78:60:1d:74:30:01:01:ec:
c2:b4:6e:7b:ef:80:10:dc:8a:5a:ff:ee:c0:4c:63:4c:05:39:
57:19:30:cd:14:8f:39:b9:21:57:19:8e:9f:91:00:2c:4c:90:
b1:84:9c:e1:b4:4d:a4:4d:b2:79:9e:70:08:1d:b6:b5:4d:6e:
c3:06:1a:af:f3:7c:2e:fe:33:52:f2:ad:3c:d0:d3:9e:5a:eb:
ea:86:7b:41:e6:23:25:8c:bc:77:ec:a2:c4:1a:33:7b:7d:e2:
c4:30:06:d4:2b:2f:ed:f6:70:2e:fe:f6:99:01:8e:36:4e:db:
3e:b4:04:0e:95:31:41:08:24:be:4a:bf:83:ba:20:2e:1c:ff:
79:05:ad:44:fc:b5:3b:49:a8:ec:01:b5:16:29:01:2f:2b:fc:
a1:f2:1b:9a:84:7a:35:a0:d6:49:62:d2:19:3a:58:01:ce:0b:
28:a4:30:3f:e0:28:45:59:49:ee:51:5d:77:39:1d:af:ba:4b:
b2:1e:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:18:16 2024 by rpki-client on console-fra.rpki-client.org