Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IotrmkD74TRXdhwR9tUzwOHJFsw.roa
File: IotrmkD74TRXdhwR9tUzwOHJFsw.roa (raw, json)
Hash identifier: 7NGddAJdcylbpiDnlfktvLJ2IUoPKS8RJoFLcU2qVuU=
Subject key identifier: 22:8B:6B:9A:40:FB:E1:34:57:76:1C:11:F6:D5:33:C0:E1:C9:16:CC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B79C93C6F6728CE67BF1EA09C1F04E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IotrmkD74TRXdhwR9tUzwOHJFsw.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20454
IP address blocks: 176.57.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9c:93:c6:f6:72:8c:e6:7b:f1:ea:09:c1:f0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228b6b9a40fbe13457761c11f6d533c0e1c916cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:a3:1d:9d:6a:e0:94:7e:72:6d:2f:0e:19:
f5:32:a3:33:d2:35:01:08:5f:62:4e:70:1c:7a:28:
bf:85:54:8b:6c:01:2d:5f:85:51:7c:a4:2a:67:7e:
aa:8b:71:1e:04:92:2f:76:9f:99:2d:74:54:ad:b2:
65:8f:ba:e0:7c:62:51:54:26:39:c1:95:6c:08:3c:
14:96:3a:44:d0:bd:e1:85:aa:76:ce:9c:b4:6b:a3:
7e:88:dd:25:f6:ab:73:c5:cf:32:e7:f2:5a:79:c2:
18:da:7b:3e:45:21:d3:4d:42:bd:e5:3f:bf:64:f8:
63:8a:74:fa:80:85:7b:ee:3f:22:09:3b:9f:61:e8:
0d:8e:11:f7:36:38:fe:99:82:15:2e:92:46:5e:c2:
4a:98:9f:ce:9b:74:e8:4b:4e:70:72:d3:bd:4d:8e:
88:cc:40:5e:8e:e7:81:c9:ab:e1:9f:1a:db:4e:b4:
1e:f9:7c:66:df:23:22:95:ef:41:49:d4:9e:08:46:
af:9b:61:6c:72:55:d1:f2:ad:9f:43:ad:f2:01:16:
f6:bb:be:da:64:6c:7a:91:45:b1:47:fa:4a:f1:b6:
7f:b8:d9:aa:2f:7c:0d:2b:d0:e2:14:bf:04:1c:01:
ce:36:62:85:e1:ae:a9:10:18:2a:33:e2:3a:08:f6:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8B:6B:9A:40:FB:E1:34:57:76:1C:11:F6:D5:33:C0:E1:C9:16:CC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IotrmkD74TRXdhwR9tUzwOHJFsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.62.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5f:3c:6c:a8:c0:87:18:8e:8c:4a:30:71:06:7f:85:62:99:
8b:82:b8:1f:c2:fb:81:17:be:28:be:e4:0c:0b:a9:f9:76:d3:
6e:73:11:6a:14:6f:16:b3:36:5f:0c:79:6f:2e:4e:9f:b0:f7:
95:eb:38:fc:65:ba:49:9c:30:cb:54:d0:ce:4d:2d:1c:77:eb:
4c:b6:fd:f1:0c:35:e1:50:fa:59:52:86:09:15:2e:7a:e7:8c:
13:50:14:76:74:62:ec:be:c2:98:bd:e8:f1:42:17:c4:57:f7:
d6:61:40:95:c3:8a:0d:34:85:f3:74:3d:1d:99:b6:61:d0:37:
68:9c:34:54:65:41:df:2d:7d:c1:a8:63:89:b3:63:7b:88:82:
53:1b:54:87:29:bb:a0:27:99:6c:60:76:31:ed:af:f3:60:0a:
24:3d:eb:38:85:b4:da:21:40:be:9f:0f:50:4d:08:21:70:72:
20:94:be:ee:60:9e:85:04:57:44:56:cc:34:39:8a:6b:3f:85:
ea:be:3c:ab:dd:93:52:06:ca:15:6c:da:a4:13:0e:6f:b4:7c:
64:d4:97:7d:b7:af:37:99:fb:32:79:01:eb:1c:4f:8e:1b:ec:
16:7e:33:b2:42:dd:98:db:b3:08:a9:76:09:f0:11:be:d2:aa:
8b:d0:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:29:47 2024 by rpki-client on console-ams.rpki-client.org