Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/i3AIln6TK2px3CtWquVCPLE9vsw.roa
File: i3AIln6TK2px3CtWquVCPLE9vsw.roa (raw, json)
Hash identifier: EfmPvglOrlYjL2q13qfwYDHyXK3ce1yjdtUFpE9UURY=
Subject key identifier: 8B:70:08:96:7E:93:2B:6A:71:DC:2B:56:AA:E5:42:3C:B1:3D:BE:CC
Certificate issuer: /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial: 018CC9BC1C4EE273A5D78766EC80F0C212B6
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/i3AIln6TK2px3CtWquVCPLE9vsw.roa
Signing time: Tue 02 Jan 2024 10:33:17 +0000
ROA not before: Tue 02 Jan 2024 10:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1c:4e:e2:73:a5:d7:87:66:ec:80:f0:c2:12:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
Validity
Not Before: Jan 2 10:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b7008967e932b6a71dc2b56aae5423cb13dbecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:d0:96:1b:66:13:c1:17:a7:3f:10:94:90:
fa:47:cc:82:d7:00:e3:71:09:83:7d:05:14:dd:8b:
de:fc:d3:d8:0d:a2:6d:c0:b7:19:26:06:b6:4e:aa:
fb:20:35:33:f3:60:a7:f5:70:78:db:15:23:9b:cb:
9a:bc:e0:8f:5a:56:9b:3b:d2:b4:94:c3:9e:ae:a0:
0c:81:1d:e1:79:2d:5e:31:a3:eb:2b:f8:ac:1c:75:
72:a3:15:0b:2b:84:76:71:dc:74:d9:19:0e:a6:e4:
59:66:ce:37:92:5c:a1:16:d4:be:19:a4:14:66:18:
63:cf:da:ee:ae:ad:dc:4b:d8:a5:27:c0:44:6b:17:
9a:d5:c1:a0:0b:d2:84:4e:ae:c4:6e:66:b0:08:3a:
67:2d:3b:3c:71:29:d4:ee:d8:a8:e8:1f:e1:ba:33:
40:5e:c1:56:c2:de:11:0a:2f:5e:c1:f3:a7:c7:3d:
89:e1:68:90:7c:70:dc:58:89:21:c8:2c:57:a6:a9:
1e:9a:22:ed:f2:79:89:47:7a:a7:10:ff:c8:ee:b2:
a9:12:29:d1:df:6c:de:0e:c2:b7:a5:11:ca:8d:f2:
0a:af:bc:1d:0d:20:8c:b8:26:89:f0:6d:e5:4e:97:
f8:fa:24:eb:08:af:f1:6f:55:07:38:21:33:6b:36:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:70:08:96:7E:93:2B:6A:71:DC:2B:56:AA:E5:42:3C:B1:3D:BE:CC
X509v3 Authority Key Identifier:
keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/i3AIln6TK2px3CtWquVCPLE9vsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4b:50:88:c8:9a:e3:10:21:ab:aa:93:b6:36:ba:b3:b5:15:
8e:47:84:a9:6f:9a:3a:9e:42:0c:b9:a9:23:4c:41:cc:29:7e:
c3:d4:f1:b9:96:a0:75:fd:0f:59:58:f8:45:df:5d:64:28:20:
0c:71:f6:30:8a:3e:a3:67:f1:48:74:ed:4c:7b:dd:dc:3f:67:
1a:86:98:0a:37:25:5a:21:08:c3:2e:96:ef:53:43:ea:2d:d5:
0a:dd:c6:d6:67:c8:be:49:2a:01:b9:c7:85:82:5a:3f:ca:0f:
4f:4b:ab:3b:47:15:42:0a:8b:23:c1:43:cc:f7:04:aa:49:f1:
7a:f6:c8:99:8c:e1:56:45:0b:6b:70:df:6a:22:dd:63:f9:63:
73:96:4e:65:d7:9b:1d:82:a9:47:28:45:89:c5:e1:76:23:91:
94:95:fc:8f:b6:b1:c6:ec:ac:c0:d0:f2:d9:a1:82:e1:a9:7a:
6b:29:1c:c7:6a:8c:f9:bf:68:0c:24:e5:38:ff:0d:76:b9:51:
e7:bd:4b:83:00:eb:49:a3:b7:0d:fd:db:ef:03:78:f6:df:d5:
bd:7b:1c:35:e7:ea:f3:dc:31:f8:ca:7b:ed:0c:fe:ca:76:24:
0c:6f:72:a4:30:d9:b4:28:60:9f:2f:5f:fd:13:28:c7:d8:ca:
c3:a8:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:56:42 2024 by rpki-client on console-fra.rpki-client.org