Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/ig_wxWmGLv9VG2UFyXElHyzFwYk.roa
File: ig_wxWmGLv9VG2UFyXElHyzFwYk.roa (raw, json)
Hash identifier: //z1eW75/eif58+LgtWQju2kCW4zvoZJ5lfnBrgbSj4=
Subject key identifier: 8A:0F:F0:C5:69:86:2E:FF:55:1B:65:05:C9:71:25:1F:2C:C5:C1:89
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 018CC3B67B1BA87B24C2FB191215FD2ECA4D
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/ig_wxWmGLv9VG2UFyXElHyzFwYk.roa
Signing time: Mon 01 Jan 2024 06:29:25 +0000
ROA not before: Mon 01 Jan 2024 06:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1955
IP address blocks: 195.199.0.0/16 maxlen: 16
195.111.0.0/16 maxlen: 16
193.224.0.0/15 maxlen: 15
193.6.0.0/16 maxlen: 16
2001:738::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7b:1b:a8:7b:24:c2:fb:19:12:15:fd:2e:ca:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Jan 1 06:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a0ff0c569862eff551b6505c971251f2cc5c189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:13:ca:a8:c9:05:8f:67:d1:fe:b6:59:26:
1f:ea:a2:11:f1:6e:ef:50:48:de:30:a5:e7:d9:8b:
cc:d1:1e:1c:5e:8c:27:04:77:40:1b:b4:44:b5:5a:
1b:6f:3c:96:16:5a:cf:ce:39:7d:96:60:b3:23:a4:
9a:21:70:c9:ca:fc:01:31:50:e9:fd:d8:23:c4:68:
2f:dc:0c:8d:5c:8f:e5:32:98:bb:67:40:ef:46:9e:
e0:0e:2f:25:95:a6:02:76:3d:c9:8a:2d:4c:db:28:
ca:71:27:ce:c1:58:13:af:37:b6:30:42:59:25:78:
ff:7a:7e:7a:51:7e:a5:df:f8:1b:80:7f:d8:43:22:
1b:68:06:d1:54:02:35:a5:c6:b2:1c:9d:8e:40:66:
9a:ef:9d:a3:c6:17:b3:5f:66:50:cc:88:8e:19:47:
8b:40:22:32:98:0e:e3:e4:f9:52:5c:c6:8c:99:78:
b6:33:54:bd:01:fa:a7:a4:56:77:f3:a3:8b:3c:7d:
7d:15:ac:e5:e4:01:43:ea:7b:02:ca:d0:cb:95:ae:
00:d9:41:67:40:4c:72:f3:b6:e6:9c:53:91:19:4d:
d4:99:fa:c4:d2:40:88:82:ff:66:a4:25:53:5c:26:
9c:18:5c:a4:6f:97:7a:e0:ee:0e:70:5a:a3:b6:55:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:F0:C5:69:86:2E:FF:55:1B:65:05:C9:71:25:1F:2C:C5:C1:89
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/ig_wxWmGLv9VG2UFyXElHyzFwYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.6.0.0/16
193.224.0.0/15
195.111.0.0/16
195.199.0.0/16
IPv6:
2001:738::/32
Signature Algorithm: sha256WithRSAEncryption
0f:cc:ad:d7:0d:2b:a9:82:06:e7:43:da:87:e2:2a:bb:b2:54:
dd:9b:2f:37:ce:c0:79:f8:51:95:b8:4c:7e:ba:e7:6c:27:66:
77:f9:f4:3e:d5:d9:b5:a3:2f:21:8c:a6:2e:d6:2c:db:c8:d4:
89:b6:bf:98:3d:1a:46:5e:5e:43:3d:db:e6:02:1f:8a:46:80:
7d:9a:8e:bb:b1:05:53:29:e6:98:72:a4:42:2b:7b:1d:d2:9a:
c3:bb:63:0b:a8:d6:58:63:a7:1c:17:1e:a0:3c:60:94:d6:7b:
83:5f:6f:4f:16:e5:91:08:57:e2:53:40:03:3a:09:c3:11:44:
66:4b:dd:15:00:a8:59:34:09:3a:6f:ff:d2:55:8d:78:27:a1:
39:f6:5d:d9:1a:e2:30:a7:25:53:88:ac:ef:c0:c5:c7:aa:41:
ef:4a:08:28:c5:81:cb:05:f0:63:70:60:2a:8c:b8:a5:8f:a6:
a6:e2:ab:31:c7:96:8b:58:93:e9:cb:26:7f:88:c9:00:0c:42:
a4:aa:18:27:54:50:a2:24:71:99:f8:a4:1f:d0:9b:6a:bf:7d:
e2:ef:9e:a5:8e:94:69:72:be:34:ec:95:08:b5:c4:ba:f2:6e:
e2:f4:4a:26:68:25:8b:84:fb:43:b0:d1:2d:d0:b9:51:99:e2:
3e:f4:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 19:23:50 2024 by rpki-client on console-fra.rpki-client.org