Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/iW2VY-LfTldLxx4ApMoLLICoeyk.roa
File: iW2VY-LfTldLxx4ApMoLLICoeyk.roa (raw, json)
Hash identifier: IOv4PXiT4d3unsfUFYwzy3qQ14UK/FUeRUX5ADAwo0Y=
Subject key identifier: 89:6D:95:63:E2:DF:4E:57:4B:C7:1E:00:A4:CA:0B:2C:80:A8:7B:29
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 0190A8686DEC8191A11653F6F77CD3FA1E83
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/iW2VY-LfTldLxx4ApMoLLICoeyk.roa
Signing time: Fri 12 Jul 2024 19:25:34 +0000
ROA not before: Fri 12 Jul 2024 19:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60633
IP address blocks: 178.197.0.0/16 maxlen: 24
213.3.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a8:68:6d:ec:81:91:a1:16:53:f6:f7:7c:d3:fa:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jul 12 19:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=896d9563e2df4e574bc71e00a4ca0b2c80a87b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:71:7e:9d:db:fa:5f:e5:b9:45:5f:6d:28:8b:
1f:b6:db:09:5f:25:cb:4c:30:d5:90:f5:f0:b5:71:
38:90:99:a5:54:a3:ae:fe:8a:6a:ee:d3:26:ae:d5:
fd:d1:22:54:f1:dd:b8:5a:e2:c2:4c:b3:ff:26:b4:
ab:41:41:75:ce:8e:11:ab:ce:41:eb:67:84:3e:fc:
81:d5:40:5b:da:64:a7:32:b1:2a:84:8f:3e:f6:29:
06:4e:2a:19:30:5f:21:50:a8:12:f9:3f:c7:c9:7e:
ec:81:e8:1e:20:6b:a0:e9:5a:e2:4d:b6:4e:43:4e:
8e:0f:f9:c7:46:01:af:bf:a4:06:72:11:b5:fc:06:
c4:f7:8f:26:9b:53:bb:65:9c:04:b8:a5:b9:68:90:
e8:1e:31:a8:64:56:0b:10:b7:ac:be:e2:d9:fb:69:
78:ab:2e:24:f7:c3:2a:28:a6:cd:f6:cd:a4:be:f2:
4c:c3:28:aa:19:ed:cb:7c:74:b6:bd:88:9b:5e:ae:
15:03:1e:1d:d8:43:55:96:4a:50:ef:70:aa:88:16:
ec:4a:a1:78:a7:d7:01:e4:dc:8e:38:28:7f:01:7e:
b9:ba:9a:38:5a:5e:52:1a:d1:1c:8d:4a:68:b8:fd:
a2:c7:02:c7:ea:7d:19:66:3a:41:4a:94:8a:1f:ee:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6D:95:63:E2:DF:4E:57:4B:C7:1E:00:A4:CA:0B:2C:80:A8:7B:29
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/iW2VY-LfTldLxx4ApMoLLICoeyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.197.0.0/16
213.3.80.0/21
Signature Algorithm: sha256WithRSAEncryption
07:23:74:ad:9d:b8:2b:b0:8d:d8:c0:51:f5:d7:79:43:15:5f:
43:01:4e:ab:d9:3c:09:20:a9:c6:d0:8a:4f:ed:d0:f0:fe:9b:
70:b9:1f:58:e7:43:b7:38:ac:b1:58:3d:42:f9:8c:e6:a8:21:
9f:81:e7:2e:b7:59:ed:cb:99:43:6b:91:18:07:a6:16:14:b2:
59:3f:2d:a2:e4:60:95:59:a2:7c:0f:fd:2b:44:30:68:fe:a1:
20:ab:55:07:36:35:0b:85:d0:87:e0:fc:8e:bb:c1:ad:10:ff:
f2:04:b9:7c:c1:25:e5:38:7a:be:47:83:47:0c:cf:55:1c:36:
97:e6:e3:c6:36:52:86:17:47:0f:a6:7a:57:a2:17:99:72:be:
2c:df:6b:34:f7:ce:bb:b8:1a:7c:b4:95:2d:53:7d:51:60:2e:
21:32:20:c4:d4:03:ad:f1:98:a6:f7:19:8e:c2:09:ee:41:aa:
55:92:e2:4a:65:2b:31:88:84:9f:bc:61:b5:fd:bb:0b:bc:bb:
34:d1:24:16:ca:25:5e:ab:cf:17:9d:b8:57:9c:a2:1d:85:c0:
73:4a:45:69:ca:f4:2b:8f:a7:36:cd:da:e4:6b:fc:ac:06:9b:
5b:10:53:c5:0a:df:4c:29:fe:dc:14:5a:9b:c5:22:53:02:01:
52:69:08:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:48:05 2024 by rpki-client on console-fra.rpki-client.org