Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/ikoxD9fuMngXz8bgBH9GBPd1ViM.roa
File: ikoxD9fuMngXz8bgBH9GBPd1ViM.roa (raw, json)
Hash identifier: Xh4bHabuqg4S9P9HhhjyjCjjIKxyE9bgJrVpRn2n3JA=
Subject key identifier: 8A:4A:31:0F:D7:EE:32:78:17:CF:C6:E0:04:7F:46:04:F7:75:56:23
Certificate issuer: /CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
Certificate serial: 018CC56E2129C0A26B15F3C8B7D8B5D4E41B
Authority key identifier: FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/ikoxD9fuMngXz8bgBH9GBPd1ViM.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212629
IP address blocks: 185.145.108.0/22 maxlen: 22
2a07:48c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:21:29:c0:a2:6b:15:f3:c8:b7:d8:b5:d4:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a4a310fd7ee327817cfc6e0047f4604f7755623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:98:56:dc:67:4c:91:a8:15:1c:65:d3:a6:
87:a2:4e:ff:c2:17:81:ed:45:38:23:fe:52:36:60:
31:0d:11:21:e0:a6:4f:34:32:63:69:18:79:97:08:
60:98:09:b2:dd:33:97:48:9d:1b:a9:2c:6c:7f:c7:
dc:9e:49:3c:83:2d:fa:6b:e7:27:de:b7:21:2c:12:
4d:95:3d:fa:bf:44:52:d9:83:40:bf:7a:85:b2:eb:
3d:bd:1a:36:46:cc:ca:0c:9b:bd:f5:97:18:84:49:
ba:d2:60:f7:b2:e5:90:85:79:ad:33:eb:42:35:57:
72:9b:95:e4:9d:01:4e:4c:b6:c7:05:36:81:48:ad:
ac:01:e2:0c:39:4a:f0:23:dc:c5:f4:4b:46:62:0b:
28:15:9b:3f:77:f4:f4:15:cf:47:d4:cb:21:bc:49:
c5:a3:06:2a:0a:46:f2:a8:ae:d2:cf:4c:a5:e2:29:
d4:35:6e:79:14:43:a4:c9:c3:5c:30:ee:51:11:6f:
07:3a:df:28:b9:72:75:31:54:69:bf:dd:23:de:68:
da:f6:88:f9:ad:59:68:e0:09:2b:f5:79:ea:30:3b:
57:6c:ce:84:b5:9b:c8:b0:56:d6:d5:3e:48:fb:c5:
c8:f4:38:93:ec:62:c7:33:c0:ff:d7:8c:0e:22:80:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4A:31:0F:D7:EE:32:78:17:CF:C6:E0:04:7F:46:04:F7:75:56:23
X509v3 Authority Key Identifier:
keyid:FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/ikoxD9fuMngXz8bgBH9GBPd1ViM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.108.0/22
IPv6:
2a07:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:87:f4:5a:51:53:a7:e7:1f:78:5a:50:9e:02:ff:5d:13:ca:
bd:d0:75:38:64:88:6a:f7:6c:14:ac:3e:55:51:ab:d0:a0:8e:
e9:08:17:15:c3:3d:cc:5a:e8:f0:d2:b6:fe:22:2d:c6:a3:29:
da:4b:ae:e7:c9:b8:b9:ed:09:22:9f:3e:f7:6b:b7:03:03:20:
72:99:01:25:4b:04:95:6f:76:27:7f:c7:24:17:b7:04:27:4b:
29:89:42:d9:f8:a7:a1:27:6c:63:1f:7d:42:08:00:49:f2:95:
5c:c1:9b:eb:d2:e8:a9:49:b5:64:86:71:d8:6e:19:ef:b6:ee:
83:3d:2f:fa:fa:45:e3:45:f3:5e:76:00:98:49:90:de:c0:c2:
4b:5a:0e:00:f3:19:0b:03:05:ae:b9:ef:cc:15:46:be:d2:c6:
9a:15:86:d1:0b:86:2d:6e:07:40:48:41:0f:83:de:a0:1e:00:
da:d4:3a:31:0a:ad:1f:2b:ae:40:8e:f0:ae:e0:0a:5a:b7:f4:
12:fa:c0:e4:b9:60:4d:4b:2b:23:74:52:48:d6:87:28:95:39:
67:a9:68:4a:41:18:5e:be:55:77:4c:2a:fb:3d:3c:c9:75:74:
b3:21:4c:e9:4a:ea:c9:b6:52:5d:9a:b4:1a:28:a0:5a:4c:0e:
04:c1:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:24:11 2024 by rpki-client on console-ams.rpki-client.org