Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IC4uo4CCQxmyKilSfuuKRyvPxZk.roa
File: IC4uo4CCQxmyKilSfuuKRyvPxZk.roa (raw, json)
Hash identifier: A1tXdL5yT0SDSW9L1s1RRUPVGtoboCHur/L9qaiVbLg=
Subject key identifier: 20:2E:2E:A3:80:82:43:19:B2:2A:29:52:7E:EB:8A:47:2B:CF:C5:99
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DAB8028E8F1D03A7608F00A268368
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IC4uo4CCQxmyKilSfuuKRyvPxZk.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34471
IP address blocks: 176.227.155.0/24 maxlen: 24
178.156.34.0/24 maxlen: 24
84.236.158.0/24 maxlen: 24
84.232.104.0/24 maxlen: 24
37.72.16.0/24 maxlen: 24
84.232.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ab:80:28:e8:f1:d0:3a:76:08:f0:0a:26:83:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=202e2ea380824319b22a29527eeb8a472bcfc599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:1b:76:74:1c:73:2d:9c:54:0d:1c:9e:a5:
06:d4:76:a0:33:91:46:2f:ce:55:15:db:51:f2:4d:
46:4a:17:5d:31:de:fe:77:6c:29:ae:30:2c:7d:31:
9f:cc:73:c3:6d:c8:fa:bf:6c:02:d1:ef:a3:62:4d:
a5:42:70:3f:bd:2f:3e:da:27:ca:48:f3:03:9d:93:
53:fd:e4:4b:af:67:b9:82:70:ea:30:51:29:91:fb:
d1:53:14:db:48:9e:46:38:f6:b9:43:2f:4c:b9:c4:
fd:66:c3:63:06:75:9c:d8:7a:b7:c9:b0:af:4a:db:
43:8c:67:89:0b:33:f1:db:c2:cd:30:93:35:b0:09:
43:51:33:15:c0:cb:72:09:2d:7a:fc:53:ed:8a:42:
6a:44:f2:75:0e:32:bc:22:27:89:c5:f5:ff:0d:7e:
61:9d:47:4d:f8:65:12:74:2c:bc:5d:62:cc:e2:d6:
04:dd:f0:52:2e:88:1b:d7:b2:a2:ed:14:23:30:0d:
b1:af:b1:07:17:49:6d:73:04:b5:61:4d:95:02:48:
09:1f:91:93:0f:30:b8:3d:d9:dc:da:fd:6e:92:9f:
13:19:f6:72:e8:5a:e3:95:fe:b9:f9:cf:1f:b6:28:
27:cf:77:1f:cc:25:97:c5:98:f6:98:8c:93:45:09:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:2E:A3:80:82:43:19:B2:2A:29:52:7E:EB:8A:47:2B:CF:C5:99
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IC4uo4CCQxmyKilSfuuKRyvPxZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.16.0/24
84.232.39.0/24
84.232.104.0/24
84.236.158.0/24
176.227.155.0/24
178.156.34.0/24
Signature Algorithm: sha256WithRSAEncryption
81:82:12:ea:f4:aa:b3:c6:ec:d8:33:b3:83:31:f0:33:37:ae:
a7:39:5e:a1:e2:bb:a6:60:fd:9e:26:e8:ce:72:5f:60:76:88:
74:24:ee:27:c7:95:be:90:50:53:4f:27:5c:54:96:a2:3a:2e:
1e:1c:75:71:55:94:0c:1e:44:c0:c2:77:28:db:89:ab:3a:9d:
dc:70:48:b2:0b:eb:56:6c:2a:5c:a0:01:d2:9b:45:21:4c:78:
76:3d:41:ac:c6:23:b1:1a:f2:d2:b2:71:b4:37:23:64:d6:3a:
46:24:3d:34:31:5b:dd:1a:74:92:aa:9b:31:c9:15:7e:c2:3c:
af:29:a3:93:4b:52:5d:22:c9:d0:9c:1f:ac:6e:74:32:fe:b1:
96:15:68:10:62:3c:b3:f6:34:9f:b3:d0:4a:b1:c4:1d:08:37:
1a:e3:77:a1:d5:4a:46:ab:72:ee:99:c0:4f:27:66:84:96:30:
95:ea:4d:9c:4d:11:02:60:f4:13:10:01:36:7b:1e:b0:d2:2d:
d4:b6:0b:f8:96:4b:c2:b2:29:8f:28:aa:1f:b0:b6:28:00:43:
0f:bc:16:93:bc:29:bf:3f:32:41:95:87:d3:7d:e5:7a:b2:6a:
99:ba:5e:3d:f7:fd:55:d0:84:14:02:c7:08:70:fe:3a:9f:e3:
09:29:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:34:13 2024 by rpki-client on console-fra.rpki-client.org