Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/IvNcqRyi5pDhE7CryjlULF3uJk4.roa
File: IvNcqRyi5pDhE7CryjlULF3uJk4.roa (raw, json)
Hash identifier: DPx/+6Hdtre18ORDL9NgXN7Fa0SpTiuyt/rGrM+3McI=
Subject key identifier: 22:F3:5C:A9:1C:A2:E6:90:E1:13:B0:AB:CA:39:54:2C:5D:EE:26:4E
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 018CC86F5DA51223FC005DE0E70ACF65D0D2
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/IvNcqRyi5pDhE7CryjlULF3uJk4.roa
Signing time: Tue 02 Jan 2024 04:29:50 +0000
ROA not before: Tue 02 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 194.165.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5d:a5:12:23:fc:00:5d:e0:e7:0a:cf:65:d0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Jan 2 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22f35ca91ca2e690e113b0abca39542c5dee264e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:4d:58:df:f2:44:8b:66:10:e8:4e:17:34:
ff:8b:a2:c8:c6:bb:70:09:7d:d4:c0:45:89:2f:b3:
45:63:55:33:4f:9a:12:31:99:65:03:2a:09:92:9d:
b7:be:45:3e:8d:0d:36:20:53:3d:4b:f6:76:cc:57:
05:9b:1f:63:c2:8f:84:48:b8:8c:99:63:62:93:c2:
08:84:58:d2:1f:e6:db:d1:c8:2c:2c:f7:27:80:7c:
41:b2:56:bf:0c:90:04:12:9b:0d:d2:c3:7c:a6:6b:
02:ca:47:71:5a:fb:2e:42:a5:1d:4a:7e:a5:08:d1:
8b:6a:89:5b:e6:9f:3a:84:44:c1:cb:a3:4d:72:9c:
5b:99:6b:ce:5b:c8:64:b3:c1:6a:4a:19:0c:68:94:
c8:4b:04:07:f4:83:b7:57:2e:96:f8:f3:13:92:f6:
e1:41:dd:90:bc:53:c2:7c:f9:56:23:31:7d:ac:ba:
0c:bb:10:c5:86:86:7f:c7:0e:c0:ca:3a:b4:c0:bf:
76:17:f0:05:d5:c4:49:9f:6a:08:ea:66:78:95:1a:
9b:ae:41:7d:2a:1d:c1:0e:62:e0:64:b9:2d:22:2d:
4e:96:bc:cb:24:56:6a:08:d1:79:17:19:6d:b7:06:
66:04:ef:91:1c:45:04:b2:45:bc:ec:19:b2:20:9c:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F3:5C:A9:1C:A2:E6:90:E1:13:B0:AB:CA:39:54:2C:5D:EE:26:4E
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/IvNcqRyi5pDhE7CryjlULF3uJk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.59.0/24
Signature Algorithm: sha256WithRSAEncryption
68:de:af:f1:97:24:54:41:38:3b:5b:62:f0:61:bf:1a:dd:38:
f7:9b:13:87:46:88:9d:cf:ae:b5:1e:ed:4c:9e:85:a4:dd:2e:
0d:65:40:ac:2e:81:93:56:8f:23:62:0e:5f:0b:da:c4:72:e7:
b8:11:9e:8a:1f:df:c6:d6:45:01:83:81:23:a4:7e:45:08:68:
59:71:4d:0c:1c:b6:e1:32:a6:a3:1e:30:98:8e:22:89:14:26:
14:41:4e:db:6a:46:dc:a9:98:9f:91:12:b3:85:ba:6f:35:40:
6e:05:4a:0b:22:28:ad:05:06:1c:7e:d7:f8:76:0a:8c:0e:04:
d9:3b:98:77:8e:bc:54:9a:d5:e1:a8:f2:4e:fb:81:4b:ab:09:
c0:27:43:9c:12:9c:06:ff:57:59:2f:1b:6b:1a:fa:9a:71:bd:
88:3a:c2:0d:4e:68:7f:45:6c:ed:8f:91:93:8d:a4:2c:14:14:
df:94:47:4c:e4:a8:50:ae:05:4d:e0:48:76:8a:ff:93:4b:89:
fc:d0:0f:bd:6a:35:95:72:fc:fe:06:14:b6:9c:19:6a:fb:c9:
01:df:8e:d5:07:0b:18:a0:af:47:91:d6:d7:8e:cf:d0:26:7a:
d0:4b:3e:fd:12:5a:16:e9:72:ff:c1:58:02:9a:5f:f9:4a:ff:
db:e6:f2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:35:46 2024 by rpki-client on console-fra.rpki-client.org