Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/igsYqHWwujsoxx6XRiO849-vJk0.roa
File: igsYqHWwujsoxx6XRiO849-vJk0.roa (raw, json)
Hash identifier: zV8d1Wzn89uHdXe1t3wM15m5BugH+Enww0wnCoNvRIE=
Subject key identifier: 8A:0B:18:A8:75:B0:BA:3B:28:C7:1E:97:46:23:BC:E3:DF:AF:26:4D
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA962909D7C369621D24DF98DE1D3
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/igsYqHWwujsoxx6XRiO849-vJk0.roa
Signing time: Tue 02 Jan 2024 10:33:53 +0000
ROA not before: Tue 02 Jan 2024 10:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201208
IP address blocks: 145.62.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a9:62:90:9d:7c:36:96:21:d2:4d:f9:8d:e1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a0b18a875b0ba3b28c71e974623bce3dfaf264d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:81:dc:f7:93:d7:84:e2:ea:cf:dc:4b:8a:
f2:b9:32:fd:e1:46:cc:d9:5c:b8:00:a2:0c:0d:f7:
84:0f:65:a5:01:b5:bc:f5:63:07:d7:14:dd:68:81:
78:87:bd:97:56:f3:47:bd:0e:b2:8f:b1:d7:ae:35:
4b:29:e9:f7:ec:1c:83:c2:5f:21:30:03:a6:60:bd:
26:88:50:72:71:3f:93:ee:34:92:de:d6:3e:ab:f2:
7b:e8:bb:b7:4b:82:4a:a6:5f:a4:0a:90:ae:50:94:
a1:39:d5:58:b7:c1:22:87:ad:37:d2:87:c7:62:e3:
83:d4:58:cc:af:1e:d6:c6:20:3c:57:28:f1:e7:68:
6f:65:b2:8a:3e:a3:21:48:7e:dd:f5:cc:a7:d0:73:
9a:74:b9:ed:d5:fa:ae:9a:17:4c:d0:14:e5:f4:91:
98:eb:b6:77:43:74:09:e6:1f:9d:7d:84:1c:18:c4:
a3:9d:09:86:91:e6:79:c3:bd:79:a3:9b:46:e0:7b:
65:9b:18:98:b6:81:02:9a:86:d9:ee:da:7d:b2:76:
0f:5d:07:33:35:35:d3:a4:8a:53:5f:74:a0:7b:98:
71:4e:49:e2:fa:65:66:15:ab:6b:8b:9a:b3:5a:84:
53:8f:fb:bc:ee:2d:3d:0e:e3:2d:be:96:86:07:3a:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0B:18:A8:75:B0:BA:3B:28:C7:1E:97:46:23:BC:E3:DF:AF:26:4D
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/igsYqHWwujsoxx6XRiO849-vJk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.62.80.0/20
Signature Algorithm: sha256WithRSAEncryption
31:28:1f:93:72:f5:25:84:53:fe:02:c8:f3:52:af:7d:c7:f2:
a4:20:00:e9:32:a3:db:cd:27:c4:03:be:9e:7f:79:50:0b:1b:
22:fb:b0:1c:76:11:f0:3c:44:ab:82:10:c1:5d:86:93:34:26:
cc:11:83:09:02:84:d5:aa:76:3b:cf:81:51:a5:b6:ed:99:63:
07:94:75:87:bf:bc:16:75:6f:2d:8f:23:ed:c6:b2:82:0a:aa:
ee:03:46:ba:2b:2b:8f:39:8b:94:c3:7a:3d:0c:a8:40:bf:c3:
39:4d:0c:00:18:42:73:22:a2:96:4f:55:76:02:af:67:99:8b:
f5:ba:de:f2:7e:dc:e0:1c:39:79:2e:a2:d9:7a:80:35:3c:25:
bc:77:b8:a8:25:b8:4e:e2:64:64:da:c2:e8:c9:ac:6f:4f:bf:
75:65:05:3e:f2:44:cc:71:71:bb:16:d0:84:c6:87:a8:a5:80:
30:4c:39:50:e8:14:a6:94:7f:6b:24:b2:eb:a4:89:69:d1:e0:
ee:75:e5:7d:1a:8f:d8:98:90:35:f9:24:ed:58:32:1e:41:ff:
d9:c9:51:22:be:f8:fb:71:5f:60:52:75:06:c3:ef:77:14:94:
a1:77:6f:c1:53:08:e2:3e:87:ec:db:0a:43:9a:77:0d:70:18:
b8:c2:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:33:09 2024 by rpki-client on console-ams.rpki-client.org