Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/IGtSOe_HkqoE52mEOPWn_Yb4Q1I.roa
File: IGtSOe_HkqoE52mEOPWn_Yb4Q1I.roa (raw, json)
Hash identifier: Q7SDcxKsoc9JzLGADvLSyEVZDE5BOfEsCaHrODpSOY4=
Subject key identifier: 20:6B:52:39:EF:C7:92:AA:04:E7:69:84:38:F5:A7:FD:86:F8:43:52
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018CC80135ED999BF47E501A791865FCD1D6
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/IGtSOe_HkqoE52mEOPWn_Yb4Q1I.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 192.44.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:35:ed:99:9b:f4:7e:50:1a:79:18:65:fc:d1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=206b5239efc792aa04e7698438f5a7fd86f84352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:f6:a6:eb:e1:93:b5:a5:ec:42:3c:62:52:
3f:9b:33:78:b3:dc:e5:a5:8f:e8:70:5d:44:57:3f:
73:36:ce:dc:01:69:1b:d5:8b:b3:1f:ac:a6:ba:0a:
a4:d4:df:ff:cc:da:f6:9f:55:2e:44:e0:2d:8f:e4:
67:27:0a:c8:bb:6a:70:5e:67:ea:7a:70:d1:5d:94:
3f:55:c2:0b:9d:d7:76:86:7f:a6:d8:2f:f2:db:82:
82:95:83:a7:a8:d3:96:77:49:5a:03:18:17:2b:57:
f7:fd:ea:d5:a0:e7:90:c5:d7:c5:c3:dd:aa:ff:1d:
39:89:40:05:ca:0d:64:94:38:f3:67:0f:ba:91:10:
aa:13:b0:5f:80:11:48:71:f2:f9:d7:37:01:05:79:
9b:2e:aa:ee:31:e8:3e:b0:07:a2:7a:e9:8a:81:f3:
c9:28:40:b9:59:8d:88:b4:c4:22:4c:85:c1:e8:8d:
e8:ae:f2:c5:95:d7:65:90:a1:f2:6a:5a:ed:c1:dc:
58:ed:f8:65:4c:f9:a8:75:4e:fb:84:fb:23:57:5d:
dc:62:a9:c8:95:03:71:8b:cd:29:cf:3b:d3:53:d1:
91:44:21:5b:d6:cd:85:66:37:6c:24:44:f0:88:d0:
b8:74:c1:f5:a1:8a:03:69:7c:27:56:87:37:74:1a:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6B:52:39:EF:C7:92:AA:04:E7:69:84:38:F5:A7:FD:86:F8:43:52
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/IGtSOe_HkqoE52mEOPWn_Yb4Q1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2b:31:79:d9:25:7d:0a:46:47:cb:4b:67:38:9d:49:21:2d:
82:ef:ed:a1:fc:82:46:fc:67:48:1b:20:a2:88:49:9b:c1:06:
d7:17:67:63:e4:23:e6:98:9b:8a:65:8b:ff:5f:85:06:42:89:
9b:05:ca:54:7c:5c:91:74:30:73:59:2b:9e:dd:46:03:e9:45:
2f:86:d3:6d:3a:aa:a2:35:63:e2:a4:6f:27:79:de:ca:b7:1e:
27:ff:16:d2:b7:f2:50:0b:a9:42:3d:a3:cf:c0:ac:fa:64:b3:
03:98:5b:00:84:85:92:85:82:ee:9e:98:67:00:cb:c0:a5:7e:
a3:25:57:f5:01:f5:a4:5b:49:dd:7a:67:3a:83:0d:21:61:3f:
7c:56:2b:53:3a:05:21:28:79:34:df:40:56:87:8c:58:f6:8a:
59:31:f1:85:dd:4b:7b:1a:8d:15:96:7e:a2:a5:c2:a7:00:bf:
f5:32:12:31:75:4f:b3:b6:aa:22:d3:c1:c9:6a:e4:37:77:a8:
d5:be:81:ba:0d:15:52:cb:d6:3c:74:96:66:27:0f:b7:cc:de:
e1:95:50:a0:4a:60:ca:44:1f:33:aa:b8:ec:2d:64:ef:7a:0c:
b5:d3:13:a7:36:35:47:7d:9b:c6:5b:ab:c2:42:91:99:7a:57:
5e:48:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:00:50 2024 by rpki-client on console-ams.rpki-client.org