Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iWhFm14jBiXGrr38QojUHc-PEcs.roa
File: iWhFm14jBiXGrr38QojUHc-PEcs.roa (raw, json)
Hash identifier: uzvLN5HP69YfYwKFJ1uugdTUPEGTgSuuqB/gYJQYkD8=
Subject key identifier: 89:68:45:9B:5E:23:06:25:C6:AE:BD:FC:42:88:D4:1D:CF:8F:11:CB
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E9F2B661A75D530CF6B672ACDE369C2CE
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iWhFm14jBiXGrr38QojUHc-PEcs.roa
Signing time: Tue 02 Apr 2024 14:16:45 +0000
ROA not before: Tue 02 Apr 2024 14:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44812
IP address blocks: 146.19.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:2b:66:1a:75:d5:30:cf:6b:67:2a:cd:e3:69:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 2 14:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8968459b5e230625c6aebdfc4288d41dcf8f11cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:30:55:f1:34:e7:91:2f:02:ff:4f:13:53:
d3:66:f9:a2:52:ad:06:a7:82:08:43:a2:64:c5:bc:
b6:28:f8:34:11:bf:a5:c9:01:8b:1a:a0:32:f1:22:
67:b8:91:ba:5d:b5:25:ee:c1:87:5e:ec:93:66:28:
d6:73:7b:0c:57:58:fe:bb:74:03:a3:4b:16:5c:d6:
fe:33:b5:24:b8:98:04:51:88:a8:67:d9:05:1c:a4:
bc:98:08:d7:61:5d:a3:50:77:9e:85:02:9d:89:0b:
48:ac:37:c2:7b:5f:4d:05:71:5c:4c:48:96:fb:57:
62:80:66:14:8f:86:a7:8a:2f:fa:12:96:9a:5b:10:
f7:a0:1f:63:ad:5b:14:9c:48:7f:cb:36:5b:ac:ef:
c6:f8:7f:af:9b:87:0c:17:50:e3:26:70:62:2d:fb:
96:72:8b:b8:b1:a4:e9:e1:7c:46:9c:f9:6e:e8:53:
6e:8a:12:10:69:d0:dc:43:21:b2:d2:e0:ef:95:08:
a7:6b:f3:17:ee:13:8f:88:fe:68:a6:c0:1f:2f:aa:
58:da:0a:6f:c5:e7:5a:98:b0:8a:41:fe:10:cc:2e:
bc:ae:8b:76:a4:11:a0:b3:5a:8f:93:a2:f5:53:ef:
6a:10:20:d3:89:15:fa:86:22:93:2d:58:85:e1:c7:
c4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:68:45:9B:5E:23:06:25:C6:AE:BD:FC:42:88:D4:1D:CF:8F:11:CB
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iWhFm14jBiXGrr38QojUHc-PEcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.87.0/24
Signature Algorithm: sha256WithRSAEncryption
96:80:0a:e5:36:28:9c:f5:ac:ee:0c:b3:8c:4b:17:eb:f3:e9:
60:06:82:26:10:d2:a8:5f:a8:83:30:80:56:47:61:b1:56:fb:
fe:2d:b2:2c:74:54:70:f1:24:a1:89:0c:dc:09:2f:d3:3d:54:
3b:d4:1a:0f:63:3d:fa:99:e8:16:d8:bc:7d:9c:f2:9f:17:06:
29:2f:85:56:4c:6c:17:e6:05:a1:3b:99:1f:e4:a0:a9:d7:5d:
03:c7:06:89:06:f5:71:25:98:8a:33:a5:75:a5:c2:64:68:10:
cc:54:43:c0:6e:a2:f3:ad:4e:64:a6:98:89:9d:25:ea:48:95:
d0:d1:42:64:88:ff:cb:fe:5a:a8:76:bf:72:0c:0a:59:1d:13:
66:b3:1c:e4:b6:78:1d:5b:aa:28:b3:6b:a6:41:2f:08:4f:2e:
60:e0:09:66:09:b3:e2:c7:42:46:5d:39:47:50:a1:30:bd:58:
2f:10:3d:3d:5b:d6:df:e4:2f:6c:a8:49:2b:f4:c7:61:33:ab:
27:b1:6a:18:8b:cc:95:ab:5a:86:da:43:ad:9a:aa:33:e4:d4:
8e:5a:16:a7:7c:87:9f:f0:d2:a8:98:fd:70:3a:88:50:da:f5:
75:d4:27:34:87:79:39:60:c5:4d:41:5e:da:82:f9:2d:c5:30:
db:1e:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 05:09:36 2024 by rpki-client on console-ams.rpki-client.org