Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ikw2V1X91_7HZ_-ift6Onh5iPSY.roa
File: ikw2V1X91_7HZ_-ift6Onh5iPSY.roa (raw, json)
Hash identifier: s1qpWQ2FQvnwbIRBXb3Zk2Z/TE83A2SPLrtcHlmkN0I=
Subject key identifier: 8A:4C:36:57:55:FD:D7:FE:C7:67:FF:A2:7E:DE:8E:9E:1E:62:3D:26
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC72741660F76749F73996D0D565170D7
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ikw2V1X91_7HZ_-ift6Onh5iPSY.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6461
IP address blocks: 82.98.192.0/21 maxlen: 21
94.31.0.0/18 maxlen: 18
193.160.88.0/22 maxlen: 22
82.98.232.0/21 maxlen: 21
213.161.64.0/19 maxlen: 19
82.98.240.0/20 maxlen: 20
193.28.62.0/23 maxlen: 23
213.152.224.0/19 maxlen: 19
79.141.32.0/20 maxlen: 20
193.28.104.0/23 maxlen: 23
2a00:16f8::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:41:66:0f:76:74:9f:73:99:6d:0d:56:51:70:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a4c365755fdd7fec767ffa27ede8e9e1e623d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:cd:a9:60:97:e2:7a:90:5c:9f:4c:40:08:
59:fd:f2:e3:1f:fa:96:b4:ad:49:1c:7f:d6:ec:bb:
22:b1:60:18:35:93:8f:73:39:53:1b:0b:3d:7b:b6:
6e:1f:0c:be:02:0f:55:d9:cc:8b:65:9b:4c:55:fd:
39:46:e5:6a:5c:ce:05:4a:89:40:e7:ea:75:d0:50:
7a:b2:d9:22:54:4e:f6:89:89:18:11:4d:c3:52:48:
ee:5d:89:10:d6:d7:49:da:64:9c:b9:ef:52:a8:f4:
76:d8:2e:8c:bf:d4:10:e8:36:26:5c:e4:67:ec:bc:
9a:f6:e5:d8:be:15:41:c7:d4:5a:db:81:0b:6c:84:
69:8c:e3:29:0d:7e:ae:0e:3c:6f:22:94:12:37:8a:
a7:6d:ca:89:43:3a:6c:08:3d:c5:e8:e0:aa:29:ee:
09:57:5b:e4:1f:96:00:db:cf:b9:96:e5:57:7d:5d:
9e:69:a4:59:44:65:2f:f7:0a:78:14:9b:fd:d3:2d:
90:db:43:d2:d4:bb:d4:32:8b:d2:68:23:e5:8e:42:
25:3b:4c:bc:ad:7a:a0:aa:ba:38:fe:03:5b:fe:0a:
a4:78:d7:f2:3e:aa:4f:7e:1b:cb:4f:26:af:ae:04:
a3:fe:ed:ea:d5:62:44:7b:cf:03:15:a6:2e:fb:94:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4C:36:57:55:FD:D7:FE:C7:67:FF:A2:7E:DE:8E:9E:1E:62:3D:26
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ikw2V1X91_7HZ_-ift6Onh5iPSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.32.0/20
82.98.192.0/21
82.98.232.0-82.98.255.255
94.31.0.0/18
193.28.62.0/23
193.28.104.0/23
193.160.88.0/22
213.152.224.0/19
213.161.64.0/19
IPv6:
2a00:16f8::/29
Signature Algorithm: sha256WithRSAEncryption
4d:02:f7:5f:c2:ee:77:eb:7e:48:10:1d:ce:77:3d:49:43:18:
71:8d:ab:90:df:3f:f6:5c:24:22:cb:72:5f:db:e8:35:8d:08:
84:d4:5e:b8:97:62:d2:44:11:db:ec:3d:3e:6a:41:a4:a1:e9:
c1:01:50:6d:1b:c4:a6:d3:53:c6:d5:41:cb:c0:29:f6:fd:f7:
7f:7b:15:3d:66:af:0e:78:de:d3:a7:89:14:c0:03:a9:15:bb:
ad:70:82:2d:26:02:f2:a3:b7:c3:e6:fa:fb:3a:73:fe:ea:76:
a4:d8:ba:21:ca:88:60:43:05:ca:f7:64:83:12:74:67:c1:80:
56:45:0f:cd:44:a7:b6:63:01:bc:ef:e3:35:f1:21:9a:25:40:
38:f2:c7:06:b4:b8:91:af:54:ad:c6:26:88:2c:ff:11:e7:d9:
cc:53:f4:dc:73:67:89:37:49:b8:c6:30:84:f7:72:27:08:5e:
41:fc:0d:7a:ea:e1:b8:82:d8:71:df:be:f1:d0:81:5a:ce:23:
03:29:a1:58:ec:d7:a0:fc:bb:c1:5e:ed:3c:bc:45:90:46:d9:
e1:75:23:eb:d5:ce:a5:eb:d2:e7:1e:72:72:c6:ce:54:f6:3a:
a3:16:a5:27:16:37:36:17:94:51:30:15:20:84:ad:f0:a6:e8:
87:4e:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:32:23 2024 by rpki-client on console-fra.rpki-client.org