Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/iC7tkg4YpzoOEwQy77_Oqfl4RZw.roa
File: iC7tkg4YpzoOEwQy77_Oqfl4RZw.roa (raw, json)
Hash identifier: DIk1/CgKHHZayFogegArFlhvkmCWKg0YcXljwpip8xI=
Subject key identifier: 88:2E:ED:92:0E:18:A7:3A:0E:13:04:32:EF:BF:CE:A9:F9:78:45:9C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 018CC493962305A2EDA54ED9B299C3584873
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/iC7tkg4YpzoOEwQy77_Oqfl4RZw.roa
Signing time: Mon 01 Jan 2024 10:30:55 +0000
ROA not before: Mon 01 Jan 2024 10:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197564
IP address blocks: 213.108.24.0/24 maxlen: 24
213.108.25.0/24 maxlen: 24
45.155.96.0/22 maxlen: 22
45.155.99.0/24 maxlen: 24
91.226.36.0/23 maxlen: 23
2a10:ba00:bee4::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2001:67c:124c::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:96:23:05:a2:ed:a5:4e:d9:b2:99:c3:58:48:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jan 1 10:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=882eed920e18a73a0e130432efbfcea9f978459c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bd:58:5c:59:ff:b6:86:ca:ea:36:31:52:f1:
98:0f:e9:82:c2:75:3b:da:ef:a8:c5:27:cb:d3:94:
8a:09:d0:c6:d0:43:36:e3:ba:cc:39:7e:67:cb:29:
1f:7f:f0:18:01:b6:82:20:cd:bb:74:25:e3:8c:c3:
c5:22:1d:b3:28:b7:11:06:a9:32:0a:c2:7c:e4:33:
bc:95:10:e1:6d:ea:58:82:05:d4:e1:07:b0:65:1e:
6b:fb:82:ed:0f:37:37:70:5e:7a:94:a2:f6:57:47:
92:7c:ce:dc:27:cf:eb:92:d8:23:d9:64:05:47:a4:
cc:f1:df:55:a9:3b:f7:33:99:b1:d2:92:4d:76:8c:
e4:91:ee:00:88:ba:76:05:db:55:df:1a:e0:ed:0e:
8f:58:ce:71:58:92:34:a0:1f:0b:c6:a6:87:b5:65:
5f:8e:61:89:bb:26:24:e4:da:69:a0:53:33:bc:0d:
b8:57:f1:49:6e:90:95:b4:33:b0:28:b6:d9:16:6e:
2f:62:e3:4e:ae:b8:88:60:00:a8:fb:ce:1a:ce:80:
ef:52:69:a1:19:e8:0b:35:09:e2:46:84:63:22:f3:
c1:f9:07:6a:67:7c:ef:93:e7:2b:c6:7a:12:81:1d:
dd:af:b8:8c:a7:7d:ce:47:67:7d:cd:e8:68:f0:fc:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2E:ED:92:0E:18:A7:3A:0E:13:04:32:EF:BF:CE:A9:F9:78:45:9C
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/iC7tkg4YpzoOEwQy77_Oqfl4RZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.96.0/22
91.226.36.0/23
213.108.24.0/23
IPv6:
2001:67c:124c::/48
2a10:ba00:bee0::-2a10:ba00:bee4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:37:6d:06:85:84:98:15:b2:6f:b8:e6:16:36:a0:f0:15:f5:
77:e3:8a:70:51:ea:3a:08:2c:c7:be:87:37:82:c6:e5:48:97:
d1:b9:07:1c:44:07:6d:ec:99:5f:44:33:e3:4e:3a:66:f4:94:
33:f9:d1:cc:98:fa:a5:66:c9:35:25:b4:e5:41:c3:3a:74:c8:
e7:1e:87:ac:43:8b:38:2f:fa:36:07:11:31:0b:7b:16:37:c7:
34:52:52:f8:bd:fc:6f:78:8d:d3:e9:01:f0:52:07:22:f1:53:
07:71:53:25:56:03:bf:cc:c7:37:fe:2b:3c:77:c2:30:48:00:
11:9c:d1:a1:fc:b1:8f:49:d9:12:50:d3:3e:33:49:84:a6:38:
30:b6:3f:09:9f:fb:76:21:ce:34:84:bf:09:7c:27:53:ed:98:
b6:f3:6a:6b:7a:f5:f4:76:d5:14:8d:8d:bc:2d:8f:8e:04:72:
17:19:63:2b:f8:88:ac:89:bf:2a:4b:9d:81:e6:5c:98:09:f0:
7a:6a:88:f8:b5:69:b2:c8:f0:66:9c:2c:71:78:c9:91:a1:85:
2f:3f:f8:c2:da:2d:d1:24:84:36:54:08:38:75:08:4d:50:0f:
4f:3c:93:e5:7a:a7:4a:7c:f6:37:55:66:05:ff:f2:d1:dd:7e:
54:f1:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:34:31 2024 by rpki-client on console-ams.rpki-client.org