Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/IZio9bKtV-LU1a4jXwkqJXIljxM.roa
File: IZio9bKtV-LU1a4jXwkqJXIljxM.roa (raw, json)
Hash identifier: hZfMD0SgRoaf5GqZH0e/TBuZ9VabgXVJLSXlG2W8P1o=
Subject key identifier: 21:98:A8:F5:B2:AD:57:E2:D4:D5:AE:23:5F:09:2A:25:72:25:8F:13
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018CC4933F14B73E7AD0D1EBBB956C505EB2
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/IZio9bKtV-LU1a4jXwkqJXIljxM.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204500
IP address blocks: 195.72.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3f:14:b7:3e:7a:d0:d1:eb:bb:95:6c:50:5e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2198a8f5b2ad57e2d4d5ae235f092a2572258f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:50:67:60:94:53:7b:6f:85:1c:92:cd:3f:
a6:db:d6:72:45:da:24:64:58:f3:c6:47:bc:71:b6:
77:12:a6:67:84:00:de:94:cf:42:93:0e:ba:f3:32:
6d:dd:76:aa:47:a0:96:86:fe:ab:f0:c0:9e:fd:4e:
13:31:1d:c8:ec:a1:68:22:8d:5a:9b:d7:a9:f3:ff:
69:13:6e:0f:b7:35:7f:cb:87:39:23:60:b2:e8:ba:
a9:34:ca:0c:61:ed:3d:17:0b:e8:da:cf:79:7a:90:
4e:dd:0a:e2:43:6c:18:b9:24:e5:42:ac:71:f7:f2:
53:28:9e:d2:06:93:54:3f:22:f4:05:60:d1:ab:51:
d7:74:3d:14:e3:8c:a2:cf:56:35:eb:09:0a:49:68:
bc:e8:66:2a:b5:68:8e:e9:1f:39:8c:56:16:c4:72:
ba:a1:ef:64:fc:8a:c8:22:37:9a:74:e6:c3:fd:95:
60:24:23:8c:2b:b4:08:cd:af:47:10:26:c6:ad:9b:
60:e9:0d:8e:79:23:fe:c1:5d:d1:28:31:be:17:e5:
e9:58:b6:96:b8:07:3e:3c:8c:b9:01:60:b0:56:3d:
b4:d8:5d:62:d7:0d:e8:f7:57:6d:31:a4:54:37:18:
61:a1:cb:51:40:2a:9f:de:79:00:98:8f:7e:9c:3d:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:A8:F5:B2:AD:57:E2:D4:D5:AE:23:5F:09:2A:25:72:25:8F:13
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/IZio9bKtV-LU1a4jXwkqJXIljxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.119.0/24
Signature Algorithm: sha256WithRSAEncryption
06:00:b1:a5:bf:48:63:dd:0a:36:60:67:90:38:62:1f:20:6a:
c5:ac:3d:98:6d:8a:bb:45:2e:e7:44:31:37:c2:d7:fe:27:8e:
fc:de:c3:e5:16:e3:28:2c:44:3d:55:db:10:ef:89:99:f0:1c:
70:a7:f6:d1:0b:a4:18:22:7f:3b:42:30:ea:04:70:a0:03:de:
ad:e5:13:ee:13:5f:54:fe:44:9f:6b:09:71:9d:3c:fc:70:0f:
6b:bf:84:71:20:09:76:f4:3b:a4:25:09:9e:76:b9:aa:95:d0:
47:0a:cb:0a:a4:98:a3:d4:6d:d5:17:66:22:de:87:22:2a:79:
b4:bb:e4:2e:80:86:e0:35:c4:38:69:e2:c2:ff:3a:db:81:b9:
b3:11:83:0b:01:37:8e:2d:5a:e5:e7:5a:d7:06:d2:82:1d:5b:
d1:85:7e:a1:1b:92:d0:2d:dd:55:ee:94:77:8c:87:87:94:08:
51:6c:e2:0b:5c:06:fb:bc:7c:d8:eb:53:78:87:58:e0:3a:c3:
9d:ab:4f:4e:e2:9c:83:f0:5d:11:41:1d:93:73:69:44:82:01:
28:d0:e1:54:80:c0:b5:50:24:dc:dc:0a:63:02:8f:c2:bf:dc:
1f:bb:71:14:95:95:88:ff:ef:1e:77:04:23:19:fd:2e:cb:9f:
b5:66:0a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 17:38:52 2024 by rpki-client on console-fra.rpki-client.org