Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/1Ibq9p4r_2nmzxUnXILAgp4hTmU.roa
File: 1Ibq9p4r_2nmzxUnXILAgp4hTmU.roa (raw, json)
Hash identifier: OPaN64NF/Pvgw6uIT2esv1cvd6xf/jmzeKQZQIELyCA=
Subject key identifier: D4:86:EA:F6:9E:2B:FF:69:E6:CF:15:27:5C:82:C0:82:9E:21:4E:65
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 018CC86EEFE1C94A69192B8112F908FE81E9
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/1Ibq9p4r_2nmzxUnXILAgp4hTmU.roa
Signing time: Tue 02 Jan 2024 04:29:22 +0000
ROA not before: Tue 02 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134823
IP address blocks: 193.42.40.0/22 maxlen: 24
2a13:2200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:ef:e1:c9:4a:69:19:2b:81:12:f9:08:fe:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jan 2 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d486eaf69e2bff69e6cf15275c82c0829e214e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:00:1d:89:0f:ac:63:29:f1:32:dc:62:c2:
c7:3a:54:e4:a9:4b:6e:2d:62:4b:15:6c:4e:b5:84:
3d:63:77:40:65:d8:e2:4a:1e:bf:48:41:59:c2:6f:
60:88:f6:f7:78:c8:3e:16:19:bc:ba:e6:64:54:db:
9d:ab:08:f7:17:b4:33:95:2b:16:ed:38:43:68:32:
85:7b:14:3d:04:95:3c:7e:ad:b2:11:fe:de:05:f7:
df:b3:1f:dd:b4:bb:22:19:64:7c:da:b9:4d:0d:36:
12:41:b8:27:82:28:c0:5b:5c:18:e1:35:ce:50:75:
b2:40:90:55:e3:f9:7b:22:58:01:de:45:10:4b:f3:
cc:30:f1:a1:a4:3f:09:68:a4:8a:91:30:a0:de:67:
bb:cc:82:7b:46:8b:e5:7a:20:93:f9:8d:c2:e2:45:
47:a6:d2:16:49:02:d7:a2:1d:b1:ea:da:31:9f:f0:
d6:3c:43:02:d2:14:3e:7b:6f:23:60:ab:d5:db:71:
56:e5:2e:6c:bb:85:f4:b8:51:18:69:df:b1:51:a3:
bc:4e:19:cf:e0:eb:8a:5c:c6:98:c2:fa:3c:e9:80:
99:31:f8:f9:8a:bb:3a:df:3f:67:31:41:6f:57:f4:
8d:22:6f:4d:ac:82:06:98:a0:47:4c:c5:02:e0:8e:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:86:EA:F6:9E:2B:FF:69:E6:CF:15:27:5C:82:C0:82:9E:21:4E:65
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/1Ibq9p4r_2nmzxUnXILAgp4hTmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.40.0/22
IPv6:
2a13:2200::/29
Signature Algorithm: sha256WithRSAEncryption
39:ed:eb:70:11:4d:25:3d:92:31:cf:eb:62:90:94:ce:d1:4a:
bb:4c:de:e8:17:fd:22:d4:50:4d:5a:8d:7b:e2:be:6e:a7:92:
79:21:cc:8b:cb:c2:ca:62:43:34:39:1f:ab:b0:48:ff:ed:f4:
6e:20:89:93:d9:a1:66:56:bf:f8:d6:49:e5:fa:6b:68:93:13:
8a:e7:a2:ec:da:9a:9a:0d:04:3e:d2:70:79:ae:98:02:72:82:
ab:8d:67:ef:b8:7c:f2:fa:f3:12:b6:e6:aa:1a:4f:24:89:65:
77:e9:e5:86:6b:1e:63:06:e4:e8:9d:9a:24:d5:28:f1:ce:01:
d0:68:c8:a0:b9:b6:12:b3:38:7b:62:0e:a3:d0:07:7a:91:be:
4f:3b:47:40:83:4f:25:a7:bf:9c:a9:ce:a6:c7:5e:7f:5b:b5:
7e:49:56:a6:26:3e:81:f9:d5:32:e1:20:a0:2f:ed:46:c2:20:
46:6d:bc:94:8b:9d:48:b4:4d:2c:40:bf:12:5a:33:df:29:d7:
2e:4f:73:f7:b0:03:2a:07:21:1c:b8:13:07:ac:b2:e1:bd:fe:
ae:ee:99:14:29:a3:e5:c4:f5:13:78:bf:9d:76:cf:53:ff:c5:
db:8f:d0:55:d0:81:57:45:51:4f:b3:5b:8e:af:12:23:10:4b:
40:67:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:35:28 2024 by rpki-client on console-fra.rpki-client.org