Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/Is16l07e0tF-hh_CgJcAbiQHFDY.roa
File: Is16l07e0tF-hh_CgJcAbiQHFDY.roa (raw, json)
Hash identifier: Ixek6RSL5zcRux20zEcJXgpfF2wPJknKmJLvs1PZlug=
Subject key identifier: 22:CD:7A:97:4E:DE:D2:D1:7E:86:1F:C2:80:97:00:6E:24:07:14:36
Certificate issuer: /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial: 018CC86F89EF6C1534D99422226A30E10E9E
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/Is16l07e0tF-hh_CgJcAbiQHFDY.roa
Signing time: Tue 02 Jan 2024 04:30:02 +0000
ROA not before: Tue 02 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212576
IP address blocks: 185.196.62.0/24 maxlen: 24
2a10:74c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:89:ef:6c:15:34:d9:94:22:22:6a:30:e1:0e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22cd7a974eded2d17e861fc28097006e24071436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:74:06:b7:07:60:7b:cc:34:2e:5a:db:7e:
1d:c2:13:ad:c0:47:04:3f:14:07:3a:de:7d:b7:47:
d5:17:8b:7a:1e:f6:34:03:c4:bc:59:d8:7c:82:97:
93:cb:fa:6c:bd:77:02:1b:28:a6:e4:fd:29:32:52:
c5:95:49:62:29:51:ea:a5:e8:25:1a:4d:26:33:8a:
08:aa:fa:31:12:6e:cf:b4:36:29:e4:f3:31:4f:6a:
9b:9b:b8:04:79:85:46:84:10:af:78:db:d5:33:1c:
9b:b7:e7:83:63:5d:e7:74:ca:fa:ad:d9:5e:11:bb:
d5:48:a6:0b:7b:50:09:81:97:8c:ca:fa:75:c8:79:
7a:78:c4:03:e7:00:30:1c:30:50:79:00:53:21:5f:
04:0c:1c:20:66:7a:57:f2:c1:b4:91:dc:18:03:76:
c2:21:cb:a5:8b:4b:15:56:f8:13:fa:eb:21:ca:6c:
6e:6f:cf:85:74:8e:d2:94:55:a9:7c:ce:3c:c6:1a:
2d:a6:03:e2:d9:a3:90:a6:95:12:36:12:dc:94:cc:
08:4e:cf:9d:a7:31:5b:ef:40:e8:98:40:5e:d8:c9:
d5:a7:16:b1:fb:4a:28:ad:79:09:49:18:25:f4:0a:
7b:62:b3:21:bd:63:bb:94:1a:c9:16:b8:68:04:a7:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CD:7A:97:4E:DE:D2:D1:7E:86:1F:C2:80:97:00:6E:24:07:14:36
X509v3 Authority Key Identifier:
keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/Is16l07e0tF-hh_CgJcAbiQHFDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.62.0/24
IPv6:
2a10:74c0::/32
Signature Algorithm: sha256WithRSAEncryption
24:57:06:5d:95:89:3e:25:0b:5d:ce:ff:00:59:d7:00:70:58:
06:9e:6e:e2:15:eb:86:b4:2f:b4:07:bb:df:c2:5a:6e:f3:05:
6f:04:f2:7b:b0:b0:3a:b0:50:d1:b7:d7:dd:42:44:95:0f:05:
4f:99:31:c3:56:8b:7a:28:c1:46:9c:9f:9a:eb:ba:9f:ad:8a:
e7:ad:77:ef:99:6a:7e:57:85:da:e6:7c:9f:31:46:a8:a6:1c:
62:ae:22:62:f8:66:35:c7:83:6f:09:21:28:b5:28:b1:36:1a:
0d:ff:a2:cf:e7:a1:bb:f1:65:ff:e1:f3:87:eb:9c:2f:16:80:
de:ae:e7:3c:47:0e:54:44:0e:fe:22:e9:60:24:a3:66:28:08:
f8:12:7e:0a:15:7f:fa:20:17:11:19:3a:57:41:af:b0:59:f0:
24:88:5f:9c:d1:9f:f7:93:18:74:f5:63:39:d6:52:4a:e9:63:
ff:48:09:b4:34:54:61:19:54:7d:9c:a6:24:6b:93:40:a8:02:
13:8c:61:93:22:44:e0:7f:13:4b:72:49:d6:2e:10:4f:70:c7:
d2:e7:aa:70:21:7c:30:eb:af:79:c3:10:9e:76:58:75:0d:4e:
c4:55:68:59:42:e8:bc:da:e2:8d:85:cd:7c:1a:26:7b:46:e3:
43:d5:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:46:21 2024 by rpki-client on console-ams.rpki-client.org