Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/iJeW95zf0jNAJwYzc0Dbtooo2E0.roa
File: iJeW95zf0jNAJwYzc0Dbtooo2E0.roa (raw, json)
Hash identifier: 3R0tpRQpejZ6iCXgwcpzKM15V2RsTOTSI/scQePe1SM=
Subject key identifier: 88:97:96:F7:9C:DF:D2:33:40:27:06:33:73:40:DB:B6:8A:28:D8:4D
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DABE5429904B7F185AAD078E7601A
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/iJeW95zf0jNAJwYzc0Dbtooo2E0.roa
Signing time: Tue 02 Jan 2024 08:32:39 +0000
ROA not before: Tue 02 Jan 2024 08:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43402
IP address blocks: 84.232.59.0/24 maxlen: 24
94.76.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ab:e5:42:99:04:b7:f1:85:aa:d0:78:e7:60:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=889796f79cdfd233402706337340dbb68a28d84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:87:4f:87:ab:b6:d0:da:8b:e2:71:c6:42:
db:cc:e0:05:65:c9:25:2b:4b:18:79:d1:46:02:0f:
c7:c1:57:09:bc:53:79:f2:15:95:99:0e:b0:24:55:
0b:aa:1d:d3:b0:28:fd:49:c9:66:4e:f8:b5:47:1a:
47:bd:da:64:80:aa:7a:0d:13:77:71:be:f9:04:1a:
ba:c4:9d:4b:ba:c1:a7:2b:bd:07:69:88:b6:47:d9:
1a:17:29:3b:87:d2:63:34:27:bc:e3:39:a0:62:6d:
0d:9c:33:01:52:a6:4f:79:7f:1f:e6:d0:dc:fa:77:
88:85:f6:a3:90:5e:80:6d:14:92:ed:36:e4:28:35:
15:1a:b5:a0:14:25:24:58:0a:d1:2a:b1:13:5d:69:
4c:ac:a4:ee:29:f2:95:d9:96:a1:df:86:18:8e:1d:
dc:44:6a:e7:4b:0e:04:92:d9:9c:ca:56:eb:4d:67:
eb:c3:e9:0d:91:e9:b3:bb:96:c0:50:49:a1:2b:b3:
69:e4:b5:b6:5f:00:cd:62:0a:f0:48:a5:53:1c:4a:
45:fe:11:b7:52:52:9d:13:d9:46:24:db:2a:ee:13:
bb:fa:e3:5c:73:d6:98:e0:84:1b:d3:17:9b:68:98:
c4:27:72:f8:9a:59:f8:02:46:4a:12:ca:a3:61:57:
fd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:96:F7:9C:DF:D2:33:40:27:06:33:73:40:DB:B6:8A:28:D8:4D
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/iJeW95zf0jNAJwYzc0Dbtooo2E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.59.0/24
94.76.189.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a6:3b:f5:5e:f7:fb:ed:15:91:67:3a:ff:1b:39:f2:8d:6d:
a2:19:ed:7f:df:98:ec:4b:df:2c:52:db:f6:87:d6:57:1d:33:
4c:80:bf:a3:37:e2:70:ea:ac:31:a3:8f:25:83:70:25:1d:9f:
07:d0:d7:94:c1:e4:52:25:be:e2:c6:6a:88:e5:c9:07:56:36:
aa:37:60:23:5c:07:74:ed:25:fc:e6:43:eb:2d:77:95:a9:50:
2c:b2:9d:5d:bc:3e:29:e9:4f:5d:c6:be:82:ce:0f:5c:a3:af:
ac:cb:06:b3:f1:88:6a:a2:ac:b8:48:95:72:d6:bd:82:b8:75:
fe:65:38:45:1f:a2:85:06:c8:70:1b:f8:4b:e1:9a:eb:5f:3f:
31:ba:9b:ef:ab:2b:28:cc:e0:58:7b:04:e1:5c:1e:d2:7b:e2:
47:ae:05:9e:9c:df:80:ed:2c:89:a3:50:3d:e6:b4:0e:d4:f7:
ca:4b:ae:da:0c:45:02:83:b3:fb:7a:9b:c0:c9:9b:46:51:3e:
7c:9a:04:b8:e4:90:6a:5f:6e:84:69:f2:4b:45:6e:f9:5a:e8:
3c:fc:fb:e6:62:2b:66:68:e0:f8:e5:5a:07:37:4a:ee:e2:b5:
6c:06:9f:d4:35:87:5c:da:40:dd:7b:81:6b:ab:55:a1:f7:8c:
f1:bc:e2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:53:32 2024 by rpki-client on console-fra.rpki-client.org